Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: x3VashKXqpUE/TqRN1HjD+PrqxWbbMJVVBM0kDoPT1U=
Subject key identifier: 29:05:ED:D1:4A:D9:E4:81:DD:7A:5F:35:55:F0:90:0D:A9:43:6C:9C
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019EC2C9DDAC237BCE33BB882EFC830E3DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 10BF
Signing time: Sat 13 Jun 2026 21:01:09 +0000
Manifest this update: Sat 13 Jun 2026 21:01:09 +0000
Manifest next update: Sun 14 Jun 2026 21:01:09 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: gXXEI5/MBMhhPZ+MKVkfN3JXH/3NIotivAzWGqSIiSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:dd:ac:23:7b:ce:33:bb:88:2e:fc:83:0e:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jun 13 21:01:09 2026 GMT
Not After : Jun 14 21:01:09 2026 GMT
Subject: CN=2905edd14ad9e481dd7a5f3555f0900da9436c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:ec:bc:f3:77:7b:e4:5f:b1:1a:51:e4:a4:
d9:11:95:af:b0:44:62:d4:e7:97:d1:c4:ca:15:a8:
a5:f7:ab:0f:6e:35:7c:54:0c:cf:b6:6d:1e:97:70:
fd:22:59:1c:c7:ba:0c:83:54:88:22:38:fe:82:01:
42:23:5c:4a:c8:e7:76:74:d7:3f:ab:6a:fc:79:42:
96:14:af:81:ce:21:64:0f:28:92:08:35:fd:a0:5b:
5c:b1:81:88:58:7b:4c:2c:04:16:57:70:ce:1c:b6:
35:91:98:db:04:ea:4e:ea:7a:1c:0e:3f:2d:43:70:
d0:ef:1d:af:9a:d6:e0:f4:89:30:4e:dc:6c:e8:82:
85:6b:04:30:e4:74:d4:d0:23:b7:7a:b6:06:9b:37:
2d:ad:a7:52:fc:c6:84:32:e4:b3:42:b2:d7:ce:82:
81:87:61:19:28:5c:34:1b:7c:c7:a3:ad:1b:10:a6:
d1:ad:12:c1:41:be:ff:58:6b:43:10:2e:32:a8:c4:
12:53:cd:f9:70:61:aa:5b:85:e3:0b:49:4b:bb:92:
a3:3b:a4:74:73:c0:28:d5:50:39:22:78:62:27:da:
dc:12:46:c0:9a:72:13:8f:a8:5e:2a:a1:f2:79:c1:
36:9c:ac:db:13:dd:a0:13:db:8b:d2:7f:1c:4b:68:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:ED:D1:4A:D9:E4:81:DD:7A:5F:35:55:F0:90:0D:A9:43:6C:9C
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:8b:96:b4:18:ab:62:69:83:2e:dc:87:00:2e:6e:28:5e:
21:be:67:a9:b1:77:bf:3a:4e:d7:54:85:c1:cf:4b:5b:08:e5:
4b:eb:73:64:86:69:fc:99:7d:8d:e9:83:e6:50:2e:40:2d:b3:
f7:86:d4:bc:fb:5c:87:c2:d8:aa:86:61:41:af:e2:f4:f9:65:
06:97:49:85:93:47:d4:a2:54:70:43:7d:e2:f8:e0:c1:84:32:
a1:d5:1f:a5:67:a3:5a:f2:4c:7f:6a:c2:a6:fa:b7:5b:b9:6d:
69:70:c5:fa:d8:93:c5:d8:a3:ef:b7:e0:5c:92:88:db:01:5b:
7b:9c:be:32:ee:23:dc:04:da:78:aa:d1:0b:aa:56:ad:7d:0e:
4b:a3:4a:fc:58:7e:a5:75:30:d2:40:5a:94:87:f0:e1:df:4e:
36:36:2c:64:f8:09:53:cc:25:ea:ea:b0:59:79:8f:3b:39:4c:
fd:9d:72:de:3a:e3:df:f5:a5:f5:e8:65:66:f1:d3:f5:71:1d:
86:f0:23:a5:ae:41:d5:c2:61:1a:f5:d4:15:73:7e:fc:4d:d7:
96:7f:5d:67:4a:01:e0:ee:2b:fa:0b:9d:de:3f:ed:a9:f7:bb:
d6:9f:d5:ee:6e:9d:0f:59:5d:2d:32:90:f7:f1:aa:17:cc:97:
52:6c:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:44 2026 by rpki-client