Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: J3SqejO2i+omRTWAkW4rKA30HluurUGOqg89JZsgISs=
Subject key identifier: 8C:A5:09:E3:23:B6:9D:54:3B:C4:05:82:4D:F2:B6:1B:3E:A7:CD:FC
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019FAAF5E423B7C6E716D2652AD62FA75724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 0887
Signing time: Tue 28 Jul 2026 23:01:09 +0000
Manifest this update: Tue 28 Jul 2026 23:01:09 +0000
Manifest next update: Wed 29 Jul 2026 23:01:09 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: Abwze0gVYTxvFRlcO6uj4172qw7VyLXWfzd8J88ZO4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e4:23:b7:c6:e7:16:d2:65:2a:d6:2f:a7:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Jul 28 23:01:09 2026 GMT
Not After : Jul 29 23:01:09 2026 GMT
Subject: CN=8ca509e323b69d543bc405824df2b61b3ea7cdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:38:ef:fb:15:97:ae:b3:ca:2a:f3:21:83:
22:33:aa:4a:cf:f1:9c:6a:68:41:3d:b0:8d:7a:18:
fd:ac:d3:49:6c:38:85:ce:c9:f6:bc:5e:d9:7a:4e:
2f:a2:2e:f2:b2:04:00:78:d8:6e:95:64:8a:aa:ef:
c5:c0:85:82:dd:6d:24:d4:e5:02:5e:c2:76:f9:6b:
d0:a2:e5:c7:2a:c1:ec:a1:19:38:53:83:96:ac:bd:
24:d3:f3:dd:12:f3:8d:ee:9d:94:d0:bc:09:84:70:
d5:50:45:72:73:64:aa:bf:52:ce:d2:24:b5:be:5a:
d6:c7:2f:c3:52:26:ec:71:4d:1e:75:7a:9a:be:d6:
3d:b2:36:a9:52:e3:cf:50:98:55:1d:47:d9:a7:41:
44:68:1d:25:74:0f:cf:4b:c5:df:51:c1:8d:eb:33:
78:46:7d:72:59:ac:54:15:8f:a9:c1:59:ba:c1:de:
93:73:92:7f:c0:c7:af:d3:2f:cd:81:5e:65:29:30:
bc:cb:d2:72:bf:00:ff:7c:cf:a2:86:6a:88:3e:7b:
c8:f6:7e:e3:98:2d:5a:3a:94:72:63:0e:27:85:9a:
3a:b9:f1:06:1d:7b:f7:7f:f9:b5:76:7e:ee:e9:58:
16:c6:9b:0e:bc:6b:5c:00:b1:6c:4f:3a:43:a5:ed:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:09:E3:23:B6:9D:54:3B:C4:05:82:4D:F2:B6:1B:3E:A7:CD:FC
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:23:e9:ab:09:45:09:77:1a:c9:74:8a:83:47:a6:60:49:
5b:d4:38:b2:66:1a:cd:8c:9f:0c:43:98:e9:08:5a:08:d3:39:
0d:b4:67:9f:a4:b9:d7:6c:12:d7:33:f4:e1:4c:90:a4:69:8a:
e9:06:cb:45:5d:dd:fb:77:d4:c3:43:e1:a4:18:2b:62:15:30:
5e:73:fb:2d:a5:a7:a8:c0:de:5f:fb:9c:87:a6:47:aa:dc:ba:
d8:a5:e2:d1:92:04:4c:d2:de:bd:ec:a7:ba:55:35:f3:87:f3:
a6:de:5f:4a:ef:ed:22:e1:28:ec:4d:d6:1d:30:3e:04:a6:12:
83:f0:42:17:26:59:80:e9:ee:46:c8:79:6c:ea:5c:92:40:85:
ed:8f:58:6c:5d:67:1a:9a:28:5e:8f:b9:e3:9f:4f:82:df:4c:
5a:be:3b:d7:a4:fe:22:19:cf:51:49:b9:75:ec:0c:36:51:45:
10:2e:87:50:0b:f1:9a:01:80:b6:32:18:b8:2f:31:72:d8:eb:
b5:0f:3f:1b:ce:2f:fb:47:6e:d5:fa:dc:5d:7b:cb:49:87:d7:
31:ed:ff:0e:3b:3a:5f:e3:0d:39:24:b4:d8:5c:11:3f:4f:76:
4e:74:82:f9:0c:56:66:c2:20:19:cd:58:5b:79:e6:2a:9d:71:
59:75:fd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9eQjt8bnFtJlKtYvp1ckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2Y2ZWYxNmNlMmFjMjhhNTk5MDYwM2QxZmEyNWJkNDk3
NTk0ZGQwHhcNMjYwNzI4MjMwMTA5WhcNMjYwNzI5MjMwMTA5WjAzMTEwLwYDVQQD
Eyg4Y2E1MDllMzIzYjY5ZDU0M2JjNDA1ODI0ZGYyYjYxYjNlYTdjZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlY47/sVl66zyirzIYMiM6pKz/Gc
amhBPbCNehj9rNNJbDiFzsn2vF7Zek4voi7ysgQAeNhulWSKqu/FwIWC3W0k1OUC
XsJ2+WvQouXHKsHsoRk4U4OWrL0k0/PdEvON7p2U0LwJhHDVUEVyc2Sqv1LO0iS1
vlrWxy/DUibscU0edXqavtY9sjapUuPPUJhVHUfZp0FEaB0ldA/PS8XfUcGN6zN4
Rn1yWaxUFY+pwVm6wd6Tc5J/wMev0y/NgV5lKTC8y9JyvwD/fM+ihmqIPnvI9n7j
mC1aOpRyYw4nhZo6ufEGHXv3f/m1dn7u6VgWxpsOvGtcALFsTzpDpe1qJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIylCeMjtp1UO8QFgk3yths+p838MB8GA1UdIwQY
MBaAFBE/bvFs4qwopZkGA9H6Jb1JdZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYjU4NzctYWE2NS00OWZjLTg1OWQt
OTA1ZGJhYjhiZDU3LzEvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zYjU4NzctYWE2NS00OWZjLTg1OWQtOTA1ZGJhYjhiZDU3
LzEvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNMj6asJ
RQl3Gsl0ioNHpmBJW9Q4smYazYyfDEOY6QhaCNM5DbRnn6S512wS1zP04UyQpGmK
6QbLRV3d+3fUw0PhpBgrYhUwXnP7LaWnqMDeX/uch6ZHqty62KXi0ZIETNLeveyn
ulU184fzpt5fSu/tIuEo7E3WHTA+BKYSg/BCFyZZgOnuRsh5bOpckkCF7Y9YbF1n
GpooXo+5459Pgt9MWr4716T+IhnPUUm5dewMNlFFEC6HUAvxmgGAtjIYuC8xctjr
tQ8/G84v+0du1frcXXvLSYfXMe3/Djs6X+MNOSS02FwRP092TnSC+QxWZsIgGc1Y
W3nmKp1xWXX9TQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:53 2026 by rpki-client