Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier: pzNzsok+Yu5mjsuBgIea5uClFaQooTAFI52huHZ8hHA=
Subject key identifier: 53:19:14:CA:B3:93:63:A0:70:2B:18:24:49:97:87:5E:E4:9C:53:4E
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial: 019FA82B68A085CF9B34DF58B9FFD7765B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number: 0F88
Signing time: Tue 28 Jul 2026 10:00:44 +0000
Manifest this update: Tue 28 Jul 2026 10:00:44 +0000
Manifest next update: Wed 29 Jul 2026 10:00:44 +0000
Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: DukLaRmErK/MGdk6KqDEcGLY1lfsR5dCARqzECk9AGs=)
2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:68:a0:85:cf:9b:34:df:58:b9:ff:d7:76:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
Validity
Not Before: Jul 28 10:00:44 2026 GMT
Not After : Jul 29 10:00:44 2026 GMT
Subject: CN=531914cab39363a0702b18244997875ee49c534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:31:7e:25:c3:27:9a:37:c4:b5:9d:d2:dc:
39:cb:ab:0c:87:50:61:0a:c5:ff:de:ab:17:09:35:
3e:b5:51:ed:de:4b:e6:37:6c:c6:b1:21:9a:10:ea:
52:f3:7c:48:ad:8e:bc:ad:62:22:3b:bd:0b:80:e7:
b8:b5:65:8b:cb:ee:38:4e:37:13:50:72:dc:bd:00:
e7:34:85:51:0e:85:cd:51:ca:6d:87:b3:32:b1:19:
76:32:9d:62:31:fa:1a:28:65:46:bd:5f:c1:76:59:
3e:d8:69:3c:8e:2c:b7:c7:80:e8:f2:12:3d:1a:4e:
df:ee:b0:34:64:45:5f:06:a1:91:49:c3:86:8d:83:
18:72:e9:86:10:b6:69:d9:d6:f0:8f:92:95:fd:fb:
a7:05:f2:3f:12:91:38:3c:84:1d:1e:73:0c:db:ea:
e8:3c:40:a1:5d:9b:0a:b6:f3:e8:cb:44:66:95:f3:
f4:26:71:48:5e:72:28:fc:14:11:a9:de:f7:23:0c:
26:6a:59:fd:03:00:48:e1:71:71:51:06:4a:bb:0a:
2f:16:f1:51:e6:8d:1c:e9:a3:56:d4:61:2c:33:32:
eb:e2:31:a8:b8:53:d0:fe:25:f5:e4:08:00:8c:3f:
d2:fe:5e:64:8d:41:6f:b9:2c:f2:bb:3a:98:76:b7:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:14:CA:B3:93:63:A0:70:2B:18:24:49:97:87:5E:E4:9C:53:4E
X509v3 Authority Key Identifier:
keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c7:58:bf:a1:3f:86:c7:e5:1b:2b:41:d9:ac:1a:ba:15:a1:
34:fb:8d:4f:8d:11:af:69:95:cb:17:08:92:bb:a9:5e:40:b8:
60:73:55:67:69:62:3f:4e:38:56:69:4f:70:3e:16:f7:9c:ab:
23:53:11:52:82:cf:ce:9c:34:09:c7:d9:c5:50:2d:8f:91:1f:
f0:e6:26:52:ec:16:f9:1b:24:d4:3b:fe:4e:55:e5:ca:59:98:
75:62:96:c3:c3:ef:1e:66:b7:4f:9f:dd:9e:d9:f7:7b:c7:22:
28:ea:30:98:8f:01:8e:a4:1c:55:b9:ec:98:95:e0:50:9b:03:
06:30:56:b6:75:5c:5b:0e:80:f2:e6:cc:8c:dc:61:76:6c:e0:
43:b9:d8:07:f7:37:e4:6a:6a:03:c2:1e:8f:6b:03:d3:13:59:
fc:9e:46:44:1e:40:e7:e5:69:60:41:60:c6:4e:35:fb:3e:64:
aa:55:11:ef:42:92:56:cb:a9:78:dc:f7:98:7b:71:31:98:73:
f6:a1:07:94:87:0e:9f:60:d5:5e:37:19:c9:db:fb:b5:10:58:
a1:7a:63:42:ff:ff:20:53:d3:b1:ad:f3:ed:5f:4e:22:aa:60:
bc:75:26:24:c7:9f:ac:c1:50:ed:91:48:cf:86:9e:46:be:93:
33:b4:ee:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK2ighc+bNN9Yuf/Xdlt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3
N2YzOTMwHhcNMjYwNzI4MTAwMDQ0WhcNMjYwNzI5MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1MzE5MTRjYWIzOTM2M2EwNzAyYjE4MjQ0OTk3ODc1ZWU0OWM1MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQoxfiXDJ5o3xLWd0tw5y6sMh1Bh
CsX/3qsXCTU+tVHt3kvmN2zGsSGaEOpS83xIrY68rWIiO70LgOe4tWWLy+44TjcT
UHLcvQDnNIVRDoXNUcpth7MysRl2Mp1iMfoaKGVGvV/Bdlk+2Gk8jiy3x4Do8hI9
Gk7f7rA0ZEVfBqGRScOGjYMYcumGELZp2dbwj5KV/funBfI/EpE4PIQdHnMM2+ro
PEChXZsKtvPoy0RmlfP0JnFIXnIo/BQRqd73Iwwmaln9AwBI4XFxUQZKuwovFvFR
5o0c6aNW1GEsMzLr4jGouFPQ/iX15AgAjD/S/l5kjUFvuSzyuzqYdrcVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMZFMqzk2OgcCsYJEmXh17knFNOMB8GA1UdIwQY
MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt
MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl
LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcdYv6E/
hsflGytB2awauhWhNPuNT40Rr2mVyxcIkrupXkC4YHNVZ2liP044VmlPcD4W95yr
I1MRUoLPzpw0CcfZxVAtj5Ef8OYmUuwW+Rsk1Dv+TlXlylmYdWKWw8PvHma3T5/d
ntn3e8ciKOowmI8BjqQcVbnsmJXgUJsDBjBWtnVcWw6A8ubMjNxhdmzgQ7nYB/c3
5GpqA8Iej2sD0xNZ/J5GRB5A5+VpYEFgxk41+z5kqlUR70KSVsupeNz3mHtxMZhz
9qEHlIcOn2DVXjcZydv7tRBYoXpjQv//IFPTsa3z7V9OIqpgvHUmJMefrMFQ7ZFI
z4aeRr6TM7Tufg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:46 2026 by rpki-client