Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: 1o/9am4kXkSId4DHN73f+M565Tp+y5vxEZhXUZlJnHc=
Subject key identifier: A4:5F:19:73:C8:82:31:35:30:13:31:55:BE:FA:BE:81:90:47:42:BA
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019F81FAA4A56332A30E154400C4D19167F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 1122
Signing time: Tue 21 Jul 2026 00:01:54 +0000
Manifest this update: Tue 21 Jul 2026 00:01:54 +0000
Manifest next update: Wed 22 Jul 2026 00:01:54 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: AXaWaR35SJm12x/wrWApzs4VhjkOKAEKmKgTPg5t7MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:a4:a5:63:32:a3:0e:15:44:00:c4:d1:91:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jul 21 00:01:54 2026 GMT
Not After : Jul 22 00:01:54 2026 GMT
Subject: CN=a45f1973c882313530133155befabe81904742ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:bf:7f:8a:44:6d:43:84:b4:3d:92:23:f4:
3b:41:8b:d2:0f:0c:d8:85:95:7e:49:9b:23:45:19:
2e:ea:d6:83:ab:13:05:ae:24:3e:f6:67:71:0a:84:
7a:5b:2a:a9:5a:e0:86:a3:a7:bf:ea:a1:a7:c7:e5:
18:23:5c:1c:9a:8c:42:df:65:6b:84:dc:c0:b6:8a:
8d:72:a8:77:6a:8b:ae:31:cf:df:9e:c5:d8:5f:a3:
bd:19:e4:37:15:1e:a6:f2:16:71:05:f5:b5:c9:c3:
98:bf:b5:28:8f:23:12:46:4d:ac:6f:fd:89:40:88:
e3:31:47:a0:f3:bc:a4:8d:38:2d:4e:44:bd:53:cc:
b4:6f:51:c5:61:e5:45:8a:a2:37:28:6f:39:ba:2b:
11:fc:22:5a:29:93:5d:34:4b:29:5c:e4:f0:42:8d:
42:f5:67:02:4d:b8:50:98:3d:da:2b:43:a2:1e:65:
5f:58:4b:27:04:6e:51:ab:e2:02:45:2c:ce:44:37:
9b:3c:a8:a0:b4:9a:4d:ed:90:23:4b:99:40:67:ad:
01:eb:83:6f:a9:17:69:53:13:8e:a6:b7:ae:08:41:
33:5f:17:ad:5f:22:ca:fa:1d:f7:c7:85:58:7e:60:
f1:9a:db:fa:95:e1:8d:99:a0:73:da:9f:ea:b7:68:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:19:73:C8:82:31:35:30:13:31:55:BE:FA:BE:81:90:47:42:BA
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:a1:19:94:59:7d:89:6f:8b:66:da:f3:a3:25:66:81:c8:
c4:43:93:39:76:53:5b:1b:fa:ef:17:b1:05:01:3f:d5:e4:75:
8f:8a:53:e1:63:50:84:ad:e6:f2:53:8e:1c:6b:3f:28:e6:09:
5e:c3:b1:e2:98:7c:ac:aa:06:15:70:fb:8a:27:c5:0e:ce:19:
ee:95:d8:00:53:2f:f2:82:7c:39:bf:d0:ae:92:fd:4b:b9:b7:
e0:28:8b:27:64:1f:7e:2c:6e:ce:6c:10:f0:b0:4c:2b:fe:c7:
de:af:b1:23:a4:5b:8f:30:f9:e9:e7:a8:77:9c:f1:18:97:6d:
24:98:84:79:8a:f7:97:00:7e:a2:71:84:22:ee:11:3b:8b:23:
8a:60:4b:d7:c4:5c:d2:37:19:47:e5:6f:ae:d1:f1:28:6f:c3:
68:13:ce:56:df:19:c2:e8:f4:34:70:91:d6:d9:0f:cc:e3:ba:
6a:eb:db:83:27:e7:6d:63:90:42:77:29:2f:82:40:ba:b2:b9:
b3:4f:37:c8:9b:56:9e:e5:14:3b:73:53:fb:7b:a5:74:d8:ec:
12:6a:d5:31:11:c7:3a:1b:0f:fa:83:c3:b1:92:f7:46:f7:b0:
64:5c:51:63:10:df:03:8d:80:99:19:47:c5:93:3d:ad:61:bc:
e8:6c:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:46 2026 by rpki-client