Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: s4XpTVkc8tPpUmLHleUfxKhTNjyDQ/QECYBrCbo4IVM=
Subject key identifier: 8A:CE:55:3D:A8:FC:1B:83:58:53:EB:AF:47:C9:AE:B8:1C:14:95:76
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019CAE35F742FD68C3CAD53659C332456133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 06FB
Signing time: Mon 02 Mar 2026 11:01:38 +0000
Manifest this update: Mon 02 Mar 2026 11:01:38 +0000
Manifest next update: Tue 03 Mar 2026 11:01:38 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: LiRmVCPcsqt6y1x0eJexUnAEzZdFHWr3rS0vNmHjplE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f7:42:fd:68:c3:ca:d5:36:59:c3:32:45:61:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Mar 2 11:01:38 2026 GMT
Not After : Mar 3 11:01:38 2026 GMT
Subject: CN=8ace553da8fc1b835853ebaf47c9aeb81c149576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:bd:d7:a8:9f:5a:38:32:78:91:47:85:ce:
8b:c1:ad:e4:f6:45:00:ba:c9:b0:42:25:87:9d:c3:
22:1f:65:39:68:fd:97:ab:74:d8:44:37:a0:91:92:
5f:dd:65:2d:b8:fc:76:47:d0:4f:e5:fd:57:91:86:
6a:74:f3:04:49:80:ff:9b:53:37:22:92:1b:5a:70:
63:16:33:d3:cc:54:0f:41:6b:5a:f4:e4:74:73:6f:
ba:2e:a1:c9:71:8c:a1:18:47:ae:53:53:86:db:0c:
15:a3:26:db:81:6b:12:64:fe:5b:a1:91:96:73:2c:
df:2f:a6:5f:5d:42:b3:c6:05:97:f1:9a:87:eb:8d:
fc:dc:95:aa:15:a7:35:07:62:37:81:8c:82:4e:81:
1f:3a:5f:79:ad:4f:31:a0:d9:aa:3c:b9:db:33:74:
10:e9:80:de:ac:bb:5f:55:3a:6d:8c:30:3a:4a:26:
a4:16:2c:44:f5:b1:3f:5e:b3:92:2d:89:7f:6a:50:
91:c2:9d:b1:83:17:4f:55:ad:bf:03:24:ee:3a:96:
c0:68:5a:15:42:40:21:66:6b:2f:4e:08:24:d5:e9:
a4:6f:9c:27:47:96:ca:db:dc:0e:7b:51:69:6e:4f:
c5:65:78:c5:aa:ee:4c:96:00:6a:92:24:9d:ba:ab:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:55:3D:A8:FC:1B:83:58:53:EB:AF:47:C9:AE:B8:1C:14:95:76
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:87:54:6b:5a:28:f7:e6:97:a0:12:d4:b5:ee:dc:0b:df:51:
6d:60:f5:9f:76:97:d7:f7:57:04:63:d9:4a:ad:75:7e:55:cf:
03:29:47:b0:7d:d9:6d:2e:1f:4a:eb:6b:88:9d:5f:6d:3a:ac:
ec:28:f7:cf:45:31:4c:b8:4a:e0:a7:0d:00:bd:b7:ef:cc:19:
f6:e2:90:9c:78:92:e6:ab:10:63:54:b5:1a:b2:d7:82:39:c9:
5c:7c:2d:64:47:d1:14:f4:d8:dd:a0:2a:8a:c0:a6:57:58:a1:
60:53:bb:41:38:93:07:b5:83:44:59:23:bf:e4:bc:fb:da:d8:
85:06:ab:f9:e6:41:46:cf:e3:55:2b:48:37:0d:84:29:88:b2:
ed:90:e8:29:f9:ed:57:78:82:6f:6a:2a:8d:ce:73:38:ae:6c:
fb:7d:7c:70:78:75:e4:c8:3f:d8:1e:73:04:a5:75:6a:5c:50:
73:72:f0:bd:ae:f3:45:72:07:cd:16:96:e2:54:1a:af:1b:ca:
f3:4b:dd:55:82:94:38:6d:5a:77:49:9b:aa:92:c3:93:3b:d7:
8b:65:ec:44:97:1e:30:14:6e:98:d5:2d:dc:2e:aa:cb:e9:26:
6a:85:0d:be:c5:a4:93:35:9d:2a:e4:1c:0d:51:b9:75:90:77:
6a:fb:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:36 2026 by rpki-client