Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: GyOzWlUQLV+tilzv7zOTXJjKvvryaAU0YFY6MJ1XriY=
Subject key identifier: 24:34:93:94:86:1E:B7:5B:E6:55:52:B9:EC:31:2A:9A:8B:B2:67:BE
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 01A130A257DC017339BD709A185B18037DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 1201
Signing time: Mon 12 Oct 2026 15:01:47 +0000
Manifest this update: Mon 12 Oct 2026 15:01:47 +0000
Manifest next update: Tue 13 Oct 2026 15:01:47 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: /nMj5ZwSQynr6b5bUW36144s7u2+dLwlUjsDObgZwMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:57:dc:01:73:39:bd:70:9a:18:5b:18:03:7d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Oct 12 15:01:47 2026 GMT
Not After : Oct 13 15:01:47 2026 GMT
Subject: CN=24349394861eb75be65552b9ec312a9a8bb267be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:8d:7c:26:05:1b:2f:29:c9:1a:83:91:ce:
4f:80:83:d9:75:8c:94:2e:b0:79:cb:c5:05:20:66:
86:2b:01:2b:44:23:c5:ba:02:ab:7f:3a:1d:0f:d4:
09:70:45:d9:a3:58:cd:ac:c9:62:5b:f1:4e:a7:ff:
97:1f:8b:0e:fd:b8:64:47:cb:0d:ee:2e:9f:d4:5b:
4b:e2:61:07:b0:c2:02:da:d2:46:f8:1d:4a:3d:a0:
e1:27:e7:bc:9b:11:82:87:f8:a5:82:9d:46:b7:13:
c8:c0:6b:97:6d:23:a4:de:7b:80:36:f1:b6:98:29:
2e:67:95:55:66:6e:5f:d6:38:52:7c:ca:28:27:2b:
d1:49:ad:a4:a7:66:81:1d:99:fa:8f:b2:4e:77:83:
35:ce:4e:55:b7:50:94:aa:2a:71:d3:9e:f9:7d:c3:
be:8e:5f:34:21:68:98:17:b1:3d:3c:75:5e:1b:fd:
5d:1d:03:87:03:ee:cf:33:d3:94:64:cb:38:85:32:
69:63:3d:17:56:66:8b:45:c6:0a:6d:9e:46:ab:13:
97:f9:15:b5:a7:b0:fc:8b:2d:20:01:c0:4b:00:8f:
b1:58:01:b7:04:ef:1f:d2:0d:6a:13:59:d6:00:2d:
34:e0:ff:b9:2d:fd:3c:73:6b:5e:73:15:dc:b6:ab:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:93:94:86:1E:B7:5B:E6:55:52:B9:EC:31:2A:9A:8B:B2:67:BE
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:67:ed:13:db:b4:43:b9:14:0d:94:1d:f0:88:87:bd:9c:
e0:75:83:13:42:60:59:0b:31:22:3d:6e:c0:5e:24:28:5c:8a:
91:f9:7b:3e:b3:c1:c4:e0:38:b6:43:ff:11:29:3a:16:98:07:
b1:84:68:5c:20:c0:3d:a4:f4:2a:9e:0f:b2:b2:53:ad:a0:88:
a7:9e:ec:aa:63:34:4d:26:ee:19:47:e0:d4:42:58:41:49:ef:
b4:21:89:cb:55:58:81:9c:3d:35:0f:84:9c:5e:a8:25:93:9f:
cf:ba:81:3f:2f:5d:91:b8:1e:5a:74:a2:d4:c9:4e:0e:c6:08:
98:f0:fa:23:c9:fa:88:66:1a:a0:dd:1d:02:c9:6b:3f:13:60:
5c:c1:21:67:04:d0:cb:cd:22:e6:35:8d:98:b5:8e:12:b7:f5:
59:7a:e5:3a:8c:04:b2:84:ac:85:8c:42:ae:df:b8:8a:a5:79:
ab:91:e6:bc:4d:5a:63:03:d6:45:bc:41:00:50:89:c2:12:17:
63:48:88:61:b5:97:ee:8e:26:1e:a8:9b:07:f4:6b:d6:d1:a0:
38:9c:aa:35:0f:d5:73:8e:8f:c1:40:84:f3:11:9d:c4:fb:9a:
75:57:33:20:9d:dc:c6:43:20:bb:8a:83:70:18:36:b7:c3:3a:
69:ad:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:25:22 2026 by rpki-client