Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: D46L8FDL4jk8TyLnN4KEotOBz1hXP4QaMs2tSkKRLWM=
Subject key identifier: EC:84:BE:9F:62:43:04:04:6D:D6:93:C2:41:61:5D:85:57:BF:2F:FC
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019CEB93C10BDC664E84AAC11D2040070E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0FCB
Signing time: Sat 14 Mar 2026 09:00:54 +0000
Manifest this update: Sat 14 Mar 2026 09:00:54 +0000
Manifest next update: Sun 15 Mar 2026 09:00:54 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: k64A9d/o/zUDfEoMq7o2UmKp0A6paI7tEbLyYLkkx0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:93:c1:0b:dc:66:4e:84:aa:c1:1d:20:40:07:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Mar 14 09:00:54 2026 GMT
Not After : Mar 15 09:00:54 2026 GMT
Subject: CN=ec84be9f624304046dd693c241615d8557bf2ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:7c:85:25:f4:fb:14:9e:8b:bf:b0:7a:20:
6e:d5:24:a0:75:be:58:cc:0f:4c:a5:40:ab:ed:70:
2f:c4:b2:04:07:ce:bd:08:97:93:d8:2f:a7:0d:4a:
0d:e2:03:c4:42:ae:93:6f:8c:84:3b:0e:20:78:2e:
42:46:65:d4:90:86:93:3d:fc:67:2f:7f:39:2f:0c:
8d:c3:e4:57:da:8c:32:63:89:87:f9:28:5c:9d:33:
33:a0:38:9f:88:9e:9b:f5:aa:c7:b6:29:ac:62:03:
57:35:0f:5c:f7:5a:d0:96:9a:ba:22:6d:2d:37:77:
8f:7d:9c:96:4a:a0:6f:dd:e4:ef:8c:05:d3:b2:7f:
d4:58:6a:31:7a:bf:d3:3c:f5:46:72:3c:9a:af:1d:
06:47:34:b0:6a:52:86:2c:4a:c4:0e:95:88:67:c1:
35:09:71:db:ef:10:55:02:41:d5:e8:4d:e5:16:f4:
bf:9d:f5:1b:bd:ea:96:9f:fa:b5:5f:3e:48:b2:1b:
ff:d3:3d:1b:75:56:fa:8a:75:95:a3:41:da:7c:8f:
ef:22:ed:af:c0:b8:26:b8:a3:27:90:3b:81:bb:a3:
ee:c3:5e:21:42:4a:b4:d9:da:f9:13:5c:ea:26:53:
1b:05:40:73:64:06:a1:d4:03:07:21:d2:3e:0c:f7:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:BE:9F:62:43:04:04:6D:D6:93:C2:41:61:5D:85:57:BF:2F:FC
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:06:45:93:8c:21:1c:45:f4:dc:81:f1:2a:11:e3:92:16:5a:
ec:ed:03:0b:82:60:0f:9f:0f:82:9d:cb:a6:03:7f:47:a4:0a:
7a:46:d2:18:26:b3:de:85:20:df:f1:bd:07:57:f5:af:ad:46:
77:89:b8:95:68:f4:f8:3c:db:e4:00:bd:49:9d:c8:41:0a:93:
7a:04:38:b2:32:fa:e9:64:92:88:a1:cc:0e:5b:0a:12:36:38:
9a:36:35:0c:7c:87:0f:90:b0:82:80:f0:73:eb:e7:2b:4a:4a:
a6:3c:2e:10:37:8f:ab:fc:a9:d5:dc:b6:30:5a:e4:10:c5:4f:
11:24:92:9f:85:e0:86:ac:c9:36:51:d3:13:c4:4d:32:b2:b7:
4d:5d:9c:51:8a:b7:0b:44:59:18:16:b2:f0:bc:f4:06:65:33:
bf:49:13:04:b4:7a:50:6f:47:03:af:91:0e:d8:38:dc:57:4a:
cc:3f:86:d1:74:f1:12:37:ce:27:fa:39:9b:04:e3:8f:13:1d:
fd:df:73:9a:24:12:7c:21:eb:d6:e1:ed:d8:05:2f:f1:40:2d:
57:45:32:93:64:ca:74:c7:04:4e:8b:1c:5a:d8:e4:81:d4:3b:
09:84:73:41:99:27:21:69:75:66:ce:4d:06:67:af:05:a8:12:
7d:59:1b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzrk8EL3GZOhKrBHSBABw57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2Q1ZTgzMWMzMzBkM2NiNTFkNDc2ZTBjMTYzNTQwZjI1
ZTAzNzIwHhcNMjYwMzE0MDkwMDU0WhcNMjYwMzE1MDkwMDU0WjAzMTEwLwYDVQQD
EyhlYzg0YmU5ZjYyNDMwNDA0NmRkNjkzYzI0MTYxNWQ4NTU3YmYyZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Op8hSX0+xSei7+weiBu1SSgdb5Y
zA9MpUCr7XAvxLIEB869CJeT2C+nDUoN4gPEQq6Tb4yEOw4geC5CRmXUkIaTPfxn
L385LwyNw+RX2owyY4mH+ShcnTMzoDifiJ6b9arHtimsYgNXNQ9c91rQlpq6Im0t
N3ePfZyWSqBv3eTvjAXTsn/UWGoxer/TPPVGcjyarx0GRzSwalKGLErEDpWIZ8E1
CXHb7xBVAkHV6E3lFvS/nfUbveqWn/q1Xz5Ishv/0z0bdVb6inWVo0HafI/vIu2v
wLgmuKMnkDuBu6Puw14hQkq02dr5E1zqJlMbBUBzZAah1AMHIdI+DPfznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyEvp9iQwQEbdaTwkFhXYVXvy/8MB8GA1UdIwQY
MBaAFBE9XoMcMw08tR1HbgwWNUDyXgNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgt
MzNmMzk2YWI1NmYyLzEvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgtMzNmMzk2YWI1NmYy
LzEvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgZFk4wh
HEX03IHxKhHjkhZa7O0DC4JgD58Pgp3LpgN/R6QKekbSGCaz3oUg3/G9B1f1r61G
d4m4lWj0+Dzb5AC9SZ3IQQqTegQ4sjL66WSSiKHMDlsKEjY4mjY1DHyHD5CwgoDw
c+vnK0pKpjwuEDePq/yp1dy2MFrkEMVPESSSn4XghqzJNlHTE8RNMrK3TV2cUYq3
C0RZGBay8Lz0BmUzv0kTBLR6UG9HA6+RDtg43FdKzD+G0XTxEjfOJ/o5mwTjjxMd
/d9zmiQSfCHr1uHt2AUv8UAtV0Uyk2TKdMcEToscWtjkgdQ7CYRzQZknIWl1Zs5N
BmevBagSfVkbCQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:19:51 2026 by rpki-client