Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: 3s7SydEfBwySlQ4dltuSZuz6bnVfkTeRjGGGs7lLhFI=
Subject key identifier: 44:72:2F:84:0A:C7:BD:92:EE:68:9D:0F:E8:56:5D:72:0F:4E:06:C5
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 019CABD9FDAE3635B624EA6C2643963E0999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: AXOV/etRkjfyPBRzCYhO+6fkbAVzn4WIyb+rVDkjpAY=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fd:ae:36:35:b6:24:ea:6c:26:43:96:3e:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=44722f840ac7bd92ee689d0fe8565d720f4e06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:80:be:8e:1f:16:1e:30:27:2d:96:1c:72:
d0:c5:59:88:db:ed:4f:cc:08:6a:19:c5:72:a3:79:
d3:b4:0e:d6:48:df:c1:e2:76:f9:cb:61:bd:45:24:
81:4c:fe:0b:6a:62:8b:dd:66:33:de:d8:b7:34:b6:
62:b8:dd:9c:65:f3:0d:fe:49:ba:2a:36:4f:5b:3b:
e7:00:53:b9:db:6d:4b:b6:43:20:cb:d4:1a:d3:ec:
08:86:e2:eb:9d:a9:01:84:a8:a3:b2:a4:df:00:a6:
0a:02:32:79:75:5c:60:78:0f:29:e1:78:1f:50:a8:
f4:7c:2b:e4:6a:c3:03:a1:4f:39:3c:89:56:de:96:
93:d8:12:04:09:d6:77:8a:91:0d:b7:fc:c2:f3:a3:
7a:87:64:76:80:7a:d9:71:7c:a3:46:3a:3f:2a:18:
3e:f6:dd:ed:fb:75:ff:59:e9:ef:70:89:b2:e6:4a:
e8:2c:48:44:fd:15:f1:c1:d7:cc:29:48:f2:36:f8:
f1:7d:80:e5:00:7e:da:6c:f3:db:5f:e1:73:07:4f:
a9:2e:7e:80:4c:10:64:4f:1b:c0:36:cd:b2:08:0e:
1f:0d:93:8d:a4:f4:f3:6f:24:35:8e:0d:33:b0:b4:
3d:07:ac:8c:b2:92:f6:db:85:5e:79:59:d8:66:17:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:2F:84:0A:C7:BD:92:EE:68:9D:0F:E8:56:5D:72:0F:4E:06:C5
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:78:48:70:09:6f:83:c4:92:fa:d8:6f:0b:9b:23:8a:a0:
96:61:81:e2:0f:8b:f5:7e:e1:c4:25:5d:e2:81:47:aa:0c:76:
7f:37:4d:88:19:3f:85:54:c8:22:96:17:02:6b:07:1f:2a:e4:
4c:25:a9:d1:b7:fe:d5:bb:8d:f7:de:37:81:f2:85:84:b3:a2:
2f:bc:a2:80:9d:cc:70:8e:32:ea:4e:0e:c5:58:32:b7:db:74:
f1:26:04:bd:c6:76:94:0c:0b:58:88:4b:b0:77:d9:67:03:68:
ca:1b:df:79:5b:f0:2f:4f:2b:cc:13:39:5c:b1:4f:ea:26:e2:
90:4f:50:be:f9:5f:63:ad:c5:6d:c4:b5:c6:cc:45:99:ab:89:
c9:c3:58:cf:03:88:b8:b8:02:7d:d1:35:27:6a:83:fa:01:aa:
1f:d8:0b:d8:b5:53:6b:0e:97:f9:97:a2:10:35:ad:10:10:ac:
17:e2:9b:14:41:77:27:4a:eb:1c:4b:6e:d3:4e:c7:aa:28:4a:
0e:c7:ff:3a:3c:a3:8c:01:0e:4e:e9:39:1b:f9:19:44:13:28:
47:99:78:25:01:8f:45:91:72:a2:1a:57:b9:5a:f4:82:9d:9f:
55:56:aa:06:94:e1:f8:a2:16:41:7c:20:b5:55:ec:9f:80:de:
a6:3e:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:19:06 2026 by rpki-client