Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: VN++N7m0SWyEPfDF+Vs0Od/y6Jw1rAQzbgOH8RWk6s0=
Subject key identifier: 17:BE:7F:16:C3:27:60:CB:FB:05:2D:2A:43:EE:D4:39:93:38:D6:AB
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019E3004FE86C479CEB2FBD0DE4E157CD86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 1073
Signing time: Sat 16 May 2026 09:01:34 +0000
Manifest this update: Sat 16 May 2026 09:01:34 +0000
Manifest next update: Sun 17 May 2026 09:01:34 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: miaTZ0iEyeObCvqbWaqQmDusFMHiiKN5WBPQ8TVW1Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:fe:86:c4:79:ce:b2:fb:d0:de:4e:15:7c:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: May 16 09:01:34 2026 GMT
Not After : May 17 09:01:34 2026 GMT
Subject: CN=17be7f16c32760cbfb052d2a43eed4399338d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:fd:ab:37:79:21:ae:03:91:d6:55:fa:32:
4c:90:59:f3:48:7f:6f:90:18:d4:b9:a1:95:fb:b7:
41:7a:78:13:e1:37:6b:20:14:c5:5f:75:cc:be:fe:
00:0b:e5:91:b6:d1:a5:bf:3a:63:8e:9c:fa:b6:25:
c1:17:af:66:8e:99:b8:61:97:fc:9a:2e:66:cb:97:
5e:7d:6c:83:96:36:a2:40:44:3f:8a:34:40:bd:1a:
ef:5e:5c:a5:7a:6c:67:1d:e5:28:51:76:aa:78:2b:
26:f9:ad:2f:6c:4b:cc:46:d8:07:b1:fa:e9:40:9c:
28:98:7e:88:85:40:89:96:9f:cd:7f:fb:f6:e8:48:
db:b1:a4:ae:73:5e:e4:97:5b:60:7b:38:57:90:c4:
b8:11:56:81:e8:f8:02:12:f1:35:97:95:58:69:57:
6d:99:4c:6c:a7:58:9d:a9:3f:a3:aa:ba:7a:aa:5f:
02:88:61:7d:14:84:e7:ee:bc:74:39:23:e4:3b:a7:
b8:80:1c:54:f0:88:40:69:71:0f:0e:78:d1:7a:04:
68:3e:64:a7:6a:18:24:f2:2f:42:30:08:b8:0e:a4:
e6:08:f7:ef:59:de:c3:6a:f8:41:a4:73:8f:07:bd:
43:aa:2c:c7:17:01:f1:6a:33:98:7d:fe:cf:ac:74:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:7F:16:C3:27:60:CB:FB:05:2D:2A:43:EE:D4:39:93:38:D6:AB
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:c9:bd:2e:f9:05:55:2b:cd:7f:23:ad:22:9d:2d:c5:bd:
0e:69:90:c2:e7:77:0e:0f:d6:9a:1d:b0:fb:ad:3b:a9:11:2e:
e7:79:33:ad:39:2a:aa:44:6a:ce:8f:32:9b:99:a1:67:e2:54:
e8:f7:31:f4:a9:3b:2a:24:21:69:24:af:87:94:54:63:05:33:
00:16:f9:aa:b6:fb:46:56:09:d5:65:38:af:2a:9a:dc:44:83:
79:4b:3b:ed:44:ec:f8:47:c5:2b:4b:4f:ad:c3:c6:8b:97:f5:
37:3c:bb:17:be:3c:d1:46:c9:f1:b5:59:06:1b:51:8e:6f:c6:
69:07:b6:68:e3:c2:8a:6f:3e:a1:56:c6:b5:bc:71:34:47:7a:
57:62:9f:74:fd:30:c5:87:7b:98:85:c9:27:f5:30:1d:ff:fa:
1b:c8:2c:9b:94:fe:4f:b6:a8:2a:bc:c1:6b:06:63:15:08:af:
73:ee:41:6a:81:47:e5:3b:d5:bc:44:d2:db:4d:51:42:84:6f:
28:fa:6b:9d:a9:57:63:7f:08:60:22:79:5d:fd:41:f1:c5:db:
38:25:98:bb:8e:28:48:a7:d0:6d:5f:e9:88:22:c4:df:9e:c5:
46:b8:3c:06:af:a8:11:53:09:a9:74:76:d0:fe:8f:00:8e:8e:
47:a0:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:52 2026 by rpki-client