
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: 9b+fazyKTMdJw2PVzxXqKesMWNg6pJllwP/+rA95l8U=
Subject key identifier: 1B:7E:9C:99:87:06:C5:63:F2:52:99:1E:6B:D4:14:9A:BE:C1:8B:3F
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01A0BDD4C58E9EE4CC01FCD521C426EAE07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 08:00:33 +0000
Manifest this update: Sun 20 Sep 2026 08:00:33 +0000
Manifest next update: Mon 21 Sep 2026 08:00:33 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: 12/KInq7VKFYoipN0RD1QRlgRlSXu8w1PNiMRk4m7y4=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:c5:8e:9e:e4:cc:01:fc:d5:21:c4:26:ea:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Sep 20 08:00:33 2026 GMT
Not After : Sep 21 08:00:33 2026 GMT
Subject: CN=1b7e9c998706c563f252991e6bd4149abec18b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:0d:5d:18:b1:8c:dc:3f:d5:54:93:fe:d3:
fe:46:00:27:80:47:7b:c1:c8:31:32:7c:89:5b:01:
64:62:e0:b3:9f:29:43:99:9c:9f:06:5f:a6:36:8a:
30:39:0a:7f:fc:34:a1:99:9f:2d:42:f7:64:a4:43:
db:1f:b8:85:01:7c:a4:52:51:6f:22:40:98:77:ad:
74:c9:51:52:7e:5f:e1:f0:4e:01:6a:07:e1:41:08:
19:0f:6b:97:ad:8a:66:37:e6:95:7c:20:0f:80:db:
da:d9:62:23:8f:42:0f:b5:03:e2:0c:4f:a2:6b:f8:
b2:8d:16:73:37:f5:7b:0d:cb:32:2f:e7:b5:bf:d9:
60:98:d5:f0:6d:53:c6:a9:92:3e:e7:5a:c8:6a:1c:
07:29:e7:cc:8b:2a:df:17:4d:30:34:6f:b4:5e:00:
3a:80:c0:be:de:61:7a:12:97:59:bf:64:5f:f4:ed:
c7:de:f9:9f:e9:5d:5f:f4:a2:f9:cb:22:df:de:c1:
c6:f7:cb:a0:57:04:f3:8c:53:43:14:7c:e1:15:1e:
bc:bf:f4:fb:50:85:37:54:ed:fa:fc:62:a2:d8:87:
fe:c7:1e:3a:03:88:a6:26:41:0b:a7:0e:9f:8f:63:
a5:3d:4c:51:52:d3:65:60:04:5c:ca:dd:22:4c:bd:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:9C:99:87:06:C5:63:F2:52:99:1E:6B:D4:14:9A:BE:C1:8B:3F
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e6:e1:82:52:52:2d:d8:98:4b:17:48:6a:95:18:48:4b:d0:
69:7a:fb:a9:fc:11:29:f2:82:9d:57:a2:98:a9:e1:c1:41:5f:
37:4f:51:a2:74:d7:6e:60:18:bb:19:5b:96:5c:6a:02:32:4c:
0d:93:35:9f:bc:33:e4:10:e3:c4:ef:67:93:dc:6a:02:48:41:
4e:13:eb:67:bc:34:79:9f:f8:16:8b:7e:da:88:82:3b:83:62:
96:93:8c:57:f6:14:ba:82:0c:54:41:cd:81:5e:44:15:75:88:
ac:f1:f1:a4:a0:a0:4e:3b:ed:4e:c7:55:7b:a8:ec:69:a3:91:
7a:91:85:ef:fe:03:ef:76:57:3d:48:93:84:dc:f2:93:78:3c:
07:e4:9e:4c:bd:29:1a:7e:71:56:64:d3:42:f9:5b:3c:b9:92:
b9:bd:39:bc:df:02:60:be:90:bc:b2:a5:62:01:a0:92:6d:f6:
d1:62:0f:b9:84:c2:d4:cb:6e:e2:d2:a2:d0:1d:56:4e:a2:cd:
7c:a5:6b:07:40:55:ba:48:28:37:54:8a:86:82:b9:89:46:58:
81:1c:99:a3:61:db:d3:ca:fe:7e:eb:c3:10:a8:ce:58:4a:f0:
6c:b2:71:c2:4c:f2:89:fb:28:53:a5:31:e3:9f:41:64:b1:81:
65:dd:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:01:55 2026 by rpki-client