Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier: QC/OPCFza9oSs02+/wYYezqckx5hgq/04Tl0KBP+30o=
Subject key identifier: 43:1D:A9:F8:C9:13:E2:FC:4F:D6:4C:AD:C3:47:2E:CA:B8:97:24:B5
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 01A0C4E941D63F66CAAB8B10B3221A2B7F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number: 12FE
Signing time: Mon 21 Sep 2026 17:00:16 +0000
Manifest this update: Mon 21 Sep 2026 17:00:16 +0000
Manifest next update: Tue 22 Sep 2026 17:00:16 +0000
Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: uODXRsCT1628SUl4E6vfbJ+dfbFhX9TOmqjJN325y0U=)
2: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (hash: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:41:d6:3f:66:ca:ab:8b:10:b3:22:1a:2b:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Sep 21 17:00:16 2026 GMT
Not After : Sep 22 17:00:16 2026 GMT
Subject: CN=431da9f8c913e2fc4fd64cadc3472ecab89724b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:03:bf:05:00:6b:13:c5:10:da:8e:05:cd:
0d:a4:aa:1b:ac:14:b9:fd:77:d4:cb:40:a7:e2:ea:
47:7c:30:43:3b:f1:5c:60:0d:19:9e:d5:16:3a:18:
46:1d:bf:3a:e9:00:94:47:ba:c8:9d:24:a2:a3:ab:
fa:bc:35:42:d5:99:f1:b3:65:c4:01:ed:36:bb:73:
b3:38:0b:1b:80:97:cd:dc:1d:1d:53:7d:7c:cf:32:
6a:a9:74:ba:b6:15:0d:2c:46:b2:fe:34:b9:4f:c7:
f8:7c:42:7d:c0:fc:9c:1d:44:80:cf:ed:d0:7e:20:
f4:42:28:f8:7f:af:ef:28:d0:44:76:10:b9:a0:0d:
14:b8:10:85:c1:c3:77:1d:c8:99:b7:2e:78:01:b3:
d1:e0:07:c7:ba:45:8e:32:5c:ea:22:94:95:d6:ad:
15:5e:1b:79:d7:90:12:c1:bd:34:bb:a5:0b:bf:46:
d1:bb:1c:57:5f:ea:c4:c6:3c:7a:66:05:08:d5:27:
c9:b4:f8:26:2a:bb:bd:1e:6e:6a:7c:5e:7d:e9:38:
b5:ab:bd:00:8f:74:0e:5b:20:46:79:dc:7c:3f:36:
1d:c9:ad:80:13:5d:3f:41:b9:9b:af:4f:f1:8c:76:
5e:7e:6f:f5:fe:8b:6a:62:3a:9c:cd:f9:b2:b5:c6:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:A9:F8:C9:13:E2:FC:4F:D6:4C:AD:C3:47:2E:CA:B8:97:24:B5
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:a4:65:f6:51:a2:2c:80:8b:d2:da:7c:be:96:7a:1a:6b:
65:76:61:be:59:ad:4e:1a:96:f4:9a:21:09:43:02:77:2b:05:
2c:93:75:0a:6f:3c:2c:c3:1e:07:2d:b9:c3:3d:9d:64:75:ec:
8b:a0:17:0d:ad:a5:4a:0f:11:76:8c:de:70:33:57:eb:bb:7c:
9d:35:92:5f:99:46:68:fa:71:04:e5:48:c4:e2:8f:c6:97:8c:
59:f7:e3:90:36:76:af:5f:a3:45:54:d7:9b:f9:19:37:3b:e1:
00:76:7f:5b:b1:cd:b6:4d:b3:95:3d:c5:c4:44:1f:76:3f:a1:
da:b7:8c:22:e9:b6:78:d5:13:fb:54:17:ef:26:26:b7:99:86:
69:cb:aa:e7:3e:19:72:17:4c:1e:c6:5f:25:27:48:58:e8:75:
db:ce:9a:19:25:c0:bf:e9:00:85:21:2b:5f:dd:84:99:e2:6c:
64:ba:eb:f4:36:a4:8b:2b:8e:74:e3:71:0e:f7:49:5c:6f:05:
d4:27:e5:48:5c:ef:ae:9b:39:c3:b7:75:0c:97:37:d0:03:08:
83:ee:bd:58:a5:70:c9:b5:97:76:e1:2e:43:6c:fc:e7:45:42:
db:8d:ae:72:df:03:36:41:6b:6e:a6:00:2b:97:1a:21:f5:f1:
8f:8f:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:09:15 2026 by rpki-client