Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: HEi3sv/6Qry1dYWS/+l+/QH9mHHCxuUYWHE24kQwdTQ=
Subject key identifier: 7E:27:8E:82:70:42:C7:71:08:E0:97:55:D3:51:C3:E2:A4:DB:36:A4
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 01A1122927F87D4B737F5D2BA382DD718A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 0941
Signing time: Tue 06 Oct 2026 17:00:49 +0000
Manifest this update: Tue 06 Oct 2026 17:00:49 +0000
Manifest next update: Wed 07 Oct 2026 17:00:49 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: zZUpXaCve2qs9tr3uMhqNkqNbtMzoFnl6l+lpS249ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:27:f8:7d:4b:73:7f:5d:2b:a3:82:dd:71:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Oct 6 17:00:49 2026 GMT
Not After : Oct 7 17:00:49 2026 GMT
Subject: CN=7e278e827042c77108e09755d351c3e2a4db36a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:10:9c:fd:c0:73:03:5e:cd:44:67:08:a3:
c8:01:72:aa:b4:e9:78:21:c2:ea:75:4c:15:85:ce:
05:d9:27:0a:b5:02:42:99:6e:7a:66:3c:0a:e1:db:
2f:98:0f:ff:9b:b8:8b:01:b8:f7:43:3c:c2:66:93:
1c:e1:e8:61:08:f5:3d:da:8f:ea:b7:f2:88:2c:f2:
aa:06:9d:82:7c:b1:dc:0d:66:13:07:70:84:fc:a3:
47:c8:75:fc:a0:d6:fc:84:c2:dd:fa:9c:5f:ca:61:
53:83:45:3c:0c:90:08:42:c7:33:d5:65:40:32:01:
7b:59:64:0a:d2:ec:9d:02:d3:1b:13:74:47:e0:f0:
88:f3:f8:60:fd:66:c5:38:4e:4b:94:1e:19:fd:b8:
df:86:b9:d4:28:a1:bb:46:fa:35:94:73:b1:4c:bc:
46:8e:f5:da:1a:b7:9d:25:0b:f5:60:15:5c:d4:4d:
40:da:fb:d4:21:e0:be:41:a1:c4:8b:93:07:ff:4e:
0f:2e:fc:fa:61:cc:94:97:bb:76:6a:70:4b:53:8f:
b7:08:eb:1b:3f:81:0f:35:11:79:a7:6c:2e:99:51:
c1:c8:e1:15:88:c4:11:0e:5e:fe:c7:37:8a:f5:e3:
57:97:c4:8f:1c:72:9a:9f:85:6c:f2:7f:0f:2f:1f:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:8E:82:70:42:C7:71:08:E0:97:55:D3:51:C3:E2:A4:DB:36:A4
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:ed:4a:49:d5:a2:16:55:bb:53:ec:b0:ba:6e:2c:42:ec:
1b:55:0b:e0:1b:e7:8e:94:5d:ac:65:76:e5:c0:c0:27:15:52:
db:22:ca:08:d2:7a:f1:34:a6:3e:07:70:6c:87:27:25:30:36:
12:60:48:c5:e8:92:c6:a5:b8:25:78:78:c0:a9:f8:a5:4c:e3:
b5:96:0a:61:de:96:77:f8:60:38:1f:fb:9c:3f:97:92:2d:9d:
be:49:17:51:13:ea:14:a3:b4:12:46:53:fd:15:fc:dd:24:aa:
cd:cd:d2:04:5a:9f:e6:94:a5:7a:31:89:13:71:29:b2:7d:8c:
53:62:45:be:8b:df:7c:f1:e6:0d:74:3b:0b:65:86:e7:81:c7:
75:27:d1:9a:84:e6:38:cd:22:b7:13:21:1e:92:39:54:3b:81:
4d:37:f2:53:be:71:7f:00:8e:1b:56:41:e2:8e:1a:c2:02:fa:
f8:ff:90:5e:29:ce:da:14:43:7c:46:ce:db:19:87:ea:90:40:
15:2f:57:fa:78:47:21:eb:2e:18:97:4d:1d:d3:ed:e0:52:2a:
fc:29:26:72:b8:4e:f0:c9:1f:3a:e7:2b:30:a9:86:f4:3b:ca:
00:b2:3d:31:d0:52:88:c5:e9:9b:5d:5f:36:2a:d8:5f:3e:90:
08:46:3b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESKSf4fUtzf10ro4LdcYomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2Y2ZWYxNmNlMmFjMjhhNTk5MDYwM2QxZmEyNWJkNDk3
NTk0ZGQwHhcNMjYxMDA2MTcwMDQ5WhcNMjYxMDA3MTcwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZTI3OGU4MjcwNDJjNzcxMDhlMDk3NTVkMzUxYzNlMmE0ZGIzNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhsQnP3AcwNezURnCKPIAXKqtOl4
IcLqdUwVhc4F2ScKtQJCmW56ZjwK4dsvmA//m7iLAbj3QzzCZpMc4ehhCPU92o/q
t/KILPKqBp2CfLHcDWYTB3CE/KNHyHX8oNb8hMLd+pxfymFTg0U8DJAIQscz1WVA
MgF7WWQK0uydAtMbE3RH4PCI8/hg/WbFOE5LlB4Z/bjfhrnUKKG7Rvo1lHOxTLxG
jvXaGredJQv1YBVc1E1A2vvUIeC+QaHEi5MH/04PLvz6YcyUl7t2anBLU4+3COsb
P4EPNRF5p2wumVHByOEViMQRDl7+xzeK9eNXl8SPHHKan4Vs8n8PLx8GeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4njoJwQsdxCOCXVdNRw+Kk2zakMB8GA1UdIwQY
MBaAFBE/bvFs4qwopZkGA9H6Jb1JdZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYjU4NzctYWE2NS00OWZjLTg1OWQt
OTA1ZGJhYjhiZDU3LzEvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zYjU4NzctYWE2NS00OWZjLTg1OWQtOTA1ZGJhYjhiZDU3
LzEvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMvtSknV
ohZVu1PssLpuLELsG1UL4BvnjpRdrGV25cDAJxVS2yLKCNJ68TSmPgdwbIcnJTA2
EmBIxeiSxqW4JXh4wKn4pUzjtZYKYd6Wd/hgOB/7nD+Xki2dvkkXURPqFKO0EkZT
/RX83SSqzc3SBFqf5pSlejGJE3Epsn2MU2JFvovffPHmDXQ7C2WG54HHdSfRmoTm
OM0itxMhHpI5VDuBTTfyU75xfwCOG1ZB4o4awgL6+P+QXinO2hRDfEbO2xmH6pBA
FS9X+nhHIesuGJdNHdPt4FIq/CkmcrhO8MkfOucrMKmG9DvKALI9MdBSiMXpm11f
NirYXz6QCEY79g==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:13:38 2026 by rpki-client