Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: T6GB6sTBxKSUPRVmmxE2qnOFfwzuiZB877JuL8QRdHY=
Subject key identifier: 98:E2:2E:59:8F:AA:A0:A4:F5:5B:72:AA:61:A7:39:43:EF:8D:D2:46
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019D9B506737291E31B1A9965EE9B668A225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 1026
Signing time: Fri 17 Apr 2026 12:00:30 +0000
Manifest this update: Fri 17 Apr 2026 12:00:30 +0000
Manifest next update: Sat 18 Apr 2026 12:00:30 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: +sPjwZZCxFCquV7v2VaQ3SCIkO8JNrXCZhwJBd1w3nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:67:37:29:1e:31:b1:a9:96:5e:e9:b6:68:a2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Apr 17 12:00:30 2026 GMT
Not After : Apr 18 12:00:30 2026 GMT
Subject: CN=98e22e598faaa0a4f55b72aa61a73943ef8dd246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:f7:ab:20:6b:0b:ba:17:e5:62:46:41:1f:
81:50:61:43:3b:e5:8f:16:de:fa:a1:57:83:1f:22:
49:18:31:ec:d1:07:d0:51:f6:51:02:d3:cd:0e:f2:
fb:a7:85:e5:a5:df:ba:fe:57:3e:c7:e2:ac:65:7a:
ba:68:58:d3:97:4d:19:10:aa:80:3b:bb:3e:08:bb:
b2:aa:43:d4:65:ba:c8:98:d0:2b:94:d7:30:fb:ae:
73:42:88:f3:8f:75:f3:f7:e9:69:10:96:4d:94:ae:
1d:46:3d:8b:f4:7d:08:09:54:69:af:3a:63:52:c8:
17:69:b6:39:10:02:32:c8:2e:e0:ca:d6:12:f8:be:
e3:8f:28:00:f0:77:81:d3:aa:c4:60:8e:f7:28:34:
ba:b5:6d:60:fb:e6:f3:99:1b:d1:35:4c:7b:c9:8b:
06:85:e5:18:22:79:5c:e3:e3:f3:74:73:57:ca:b0:
15:f1:d8:44:e8:30:59:18:5a:8d:c9:dc:96:11:28:
91:fb:5e:8d:e0:4c:0a:39:e6:3a:a2:0d:52:f4:96:
f0:7c:83:63:99:52:01:2c:3b:d5:f2:88:d8:87:33:
16:86:a3:33:b5:67:9b:14:d0:4e:5a:17:67:99:99:
30:3a:2e:c9:fb:f1:a4:2f:bb:90:bb:06:51:6d:93:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:2E:59:8F:AA:A0:A4:F5:5B:72:AA:61:A7:39:43:EF:8D:D2:46
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:5a:f8:e7:00:4a:c1:19:99:2f:10:36:95:5c:e2:f5:45:
f0:12:58:59:79:eb:4d:19:37:a4:c1:77:18:98:65:77:c2:99:
26:9c:7f:a2:8f:9b:b6:7f:fc:12:1e:d6:15:b3:16:d0:2a:d4:
23:51:ad:33:a9:c4:e6:97:a7:f3:76:3b:b6:db:f5:21:d3:07:
a3:92:a2:a6:b9:1f:36:32:f2:7d:a1:6b:01:36:22:9f:3c:e4:
22:f0:d3:76:64:7f:c3:88:56:26:56:fb:36:49:3d:ed:6f:47:
58:d9:75:5b:00:11:6f:ae:aa:e8:1a:45:01:b5:8e:db:0d:56:
3e:35:03:d1:4a:94:32:d3:79:c4:0c:0d:5f:63:09:8c:75:21:
c8:55:e3:9b:8f:0e:73:1e:f0:ce:dc:a8:d2:e1:33:20:b5:47:
c8:fb:30:43:18:8b:36:54:e8:3b:28:ee:dc:af:48:25:03:63:
9c:fd:2e:5f:1b:34:83:84:35:56:a7:65:d3:30:0f:57:2d:bc:
ee:eb:40:ba:87:58:ac:b5:f2:b4:69:2e:f6:c0:d2:94:a0:ac:
0c:6f:fa:06:f8:de:a7:26:2e:ce:0f:20:a0:d3:dd:b4:7d:42:
4b:05:33:70:36:df:66:86:db:98:b2:ab:b4:da:32:d9:90:f3:
ff:61:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:50 2026 by rpki-client