Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: OGMHaH8k9PMvLFxVvBP4cxD/FtXXgHSI67sNCvuX5d8=
Subject key identifier: 01:20:D8:17:B3:F2:3C:D9:2A:05:26:98:B8:00:83:61:DB:1F:71:65
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019EC148E7FCF5B9AE22570D03649FE1584B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 080E
Signing time: Sat 13 Jun 2026 14:00:41 +0000
Manifest this update: Sat 13 Jun 2026 14:00:41 +0000
Manifest next update: Sun 14 Jun 2026 14:00:41 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: 8pwHPiN2oojXGV9Sayv961CpMqj3LEYHkLC5/y0jIvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:e7:fc:f5:b9:ae:22:57:0d:03:64:9f:e1:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Jun 13 14:00:41 2026 GMT
Not After : Jun 14 14:00:41 2026 GMT
Subject: CN=0120d817b3f23cd92a052698b8008361db1f7165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:15:c0:26:78:95:f8:06:ea:e8:a5:82:f0:
38:da:21:4c:3f:ac:4e:33:c9:fe:6c:39:53:0a:46:
04:e9:2b:bf:92:00:40:40:1b:0b:3f:9c:1d:12:2a:
32:28:16:21:f5:74:b8:d3:1c:51:70:ea:1f:d4:b5:
70:33:8f:84:ec:cd:e6:6c:ab:c0:dd:e9:82:17:4b:
45:37:c4:9b:ff:9e:af:94:31:fb:08:0c:ef:0b:10:
9c:07:18:23:fd:85:3b:11:a1:8f:c0:57:08:25:b8:
18:80:8e:51:be:09:aa:ee:0c:2f:8c:fe:38:af:fa:
ae:5b:87:c9:07:8a:20:b8:a5:fc:aa:cf:a9:66:5b:
56:19:cd:3a:0e:8d:70:2b:26:76:ef:14:e1:1d:d1:
47:a6:6b:5c:da:5f:7d:1a:e9:92:83:49:c1:7d:c7:
96:c1:27:a7:df:40:ff:d7:4a:2c:2e:93:06:08:31:
95:4c:bf:21:a8:8d:9a:57:00:48:64:81:1c:9e:c8:
a1:48:68:3b:06:da:05:11:c4:55:49:3b:45:a8:4c:
0c:87:54:5e:b4:d4:ea:53:b9:96:d6:47:9a:a5:ae:
70:1e:6d:5a:41:9e:39:f5:ad:c7:57:8d:fa:68:01:
6d:6c:e8:a7:40:c7:ed:a4:24:02:29:7d:bd:7a:ed:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:D8:17:B3:F2:3C:D9:2A:05:26:98:B8:00:83:61:DB:1F:71:65
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:fc:0f:a8:e6:71:6c:07:a5:30:60:65:72:55:82:b7:00:
f1:3c:d0:2a:4d:31:ad:b4:b8:2c:8a:27:e9:06:90:af:33:bb:
ea:0c:db:68:6e:59:b7:04:02:58:18:86:d7:ab:04:c4:2a:7d:
12:8d:c4:03:18:09:24:4d:34:f1:a0:23:3e:2a:ab:68:13:ba:
04:4f:ed:85:32:24:50:a4:48:ce:bd:dd:f6:07:dc:78:b2:4e:
4b:5e:f2:26:54:69:a9:08:8e:eb:56:26:f1:6e:55:b4:59:e3:
19:a2:bb:6d:34:5f:6a:26:d6:ea:37:55:c8:de:8a:01:60:dd:
33:5f:77:ce:1d:01:e4:ac:d5:9f:24:8f:9c:28:14:8e:53:c1:
aa:5b:91:83:87:30:07:30:0e:cb:e8:e6:88:6a:c7:ff:5d:ce:
bc:de:27:09:58:07:cc:39:ab:60:44:b0:94:f8:57:82:df:75:
e9:a6:d0:6b:dc:dd:2d:b1:5c:39:b6:8a:aa:1a:01:0c:45:59:
f2:d9:a7:42:42:15:68:fc:26:ce:83:c0:2e:f3:e3:37:09:f5:
af:a3:e1:d0:ff:b0:fd:16:4c:86:f1:03:56:2c:b7:b5:49:74:
ad:e5:1d:ea:9c:84:56:9b:af:6c:0f:75:80:04:36:bf:a5:5e:
82:d9:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:36:53 2026 by rpki-client