Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: w92CquHk1LaxwDYAXxfr55HANrr/YnckC32UGX1OA8s=
Subject key identifier: 53:FE:26:14:F4:66:D8:46:81:D1:8F:0E:E0:3B:7B:3F:5D:A1:07:30
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019CADC77BFAC0B88D088FC82643606DB043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0FAB
Signing time: Mon 02 Mar 2026 09:00:57 +0000
Manifest this update: Mon 02 Mar 2026 09:00:57 +0000
Manifest next update: Tue 03 Mar 2026 09:00:57 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: /jZeTMMq+rUt53ZNL9+K874CguCu0QLPdIhjPCwPVoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7b:fa:c0:b8:8d:08:8f:c8:26:43:60:6d:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Mar 2 09:00:57 2026 GMT
Not After : Mar 3 09:00:57 2026 GMT
Subject: CN=53fe2614f466d84681d18f0ee03b7b3f5da10730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:4a:99:df:f4:1c:61:3a:f1:e6:1e:b3:84:
ae:93:22:6a:a4:5a:96:4f:79:35:f4:3a:5a:37:9d:
b9:95:42:2c:70:00:c6:28:8e:ac:68:cd:7d:1b:c7:
33:e3:3d:49:b1:46:05:c1:0a:44:bd:90:dc:a3:00:
87:9a:6b:2a:68:af:90:dc:0e:4d:87:e8:bb:25:5f:
9b:40:ce:82:c2:f4:5d:65:65:24:f5:41:3f:2b:5b:
a1:a8:cd:fc:5c:3f:12:7b:f6:26:cc:a0:5a:89:18:
8c:d9:e4:d5:d9:e9:b6:6b:6d:c6:bc:4c:f3:7f:b2:
00:cc:1a:b1:49:01:28:75:91:b5:24:d6:b6:04:9b:
8c:d0:97:c4:04:d7:1d:7d:67:7a:b8:61:b0:f8:4a:
4f:d5:73:89:dd:9e:70:90:02:0c:b1:5e:02:44:c0:
44:8a:74:c4:aa:7f:5e:44:7d:fc:b9:ac:31:9a:8a:
8e:1a:46:07:f2:24:68:d3:cd:53:a2:f5:e9:ec:b0:
bc:54:c1:13:4c:fd:fc:b4:0b:11:2b:d1:d7:77:c9:
a2:aa:2f:9e:ed:ff:20:76:db:2a:98:26:c4:43:50:
28:d7:e6:08:e9:6c:14:0a:63:61:05:3f:8d:20:09:
f9:86:1e:51:50:09:99:3f:35:62:43:45:ff:29:6b:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:26:14:F4:66:D8:46:81:D1:8F:0E:E0:3B:7B:3F:5D:A1:07:30
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:de:f2:39:44:45:59:e1:88:92:dc:34:eb:7a:54:9e:17:8a:
a3:9c:32:59:31:f7:9e:2b:ed:4b:8f:16:48:16:5e:e8:de:67:
96:08:db:d4:01:bc:85:ce:8a:90:f6:51:3b:93:1d:03:08:e6:
25:bc:b1:b2:f5:8f:fd:ca:28:ae:fe:4b:f3:51:76:d3:8e:1f:
b5:e5:aa:43:80:3f:96:6c:d8:b2:83:b3:af:60:f2:68:0c:12:
a7:76:09:26:f3:8e:1d:1e:09:0b:7d:b1:12:84:75:17:f1:3c:
ff:d7:4c:67:30:8f:79:5c:46:09:20:68:2a:03:5e:b6:2f:a7:
89:39:06:98:d3:9a:94:cb:94:44:2d:5f:06:c6:b3:24:fe:17:
a9:0c:dd:2e:f3:ff:ec:38:a8:a3:c2:08:69:a0:22:3c:24:c4:
48:7b:cf:e1:fe:9c:a7:61:99:55:bb:75:3d:d6:27:7a:8e:2f:
f0:aa:08:9d:1b:88:dd:1b:3c:52:e6:74:10:8c:fe:e1:60:0b:
3f:fc:dc:97:9b:2d:1a:65:06:ad:59:3a:0f:6c:da:75:a2:10:
8c:c9:0d:02:89:0a:6a:46:14:97:6f:cc:82:c5:1d:d5:55:2b:
80:91:04:bb:e6:5b:fe:74:f7:3b:f4:63:04:e2:cf:61:8d:b9:
00:6f:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:04 2026 by rpki-client