Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: wzaHoIqm3/aRFY369amCJroHrTFnrjnZs346pvX1eY8=
Subject key identifier: 8E:72:C3:82:2B:06:9B:63:1E:FE:CC:8C:B7:62:87:36:B0:10:BF:A7
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 01A14A2A339A49A5A2C74CC5E98CCE37D37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 095E
Signing time: Sat 17 Oct 2026 14:00:41 +0000
Manifest this update: Sat 17 Oct 2026 14:00:41 +0000
Manifest next update: Sun 18 Oct 2026 14:00:41 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: ZXJQrB6Y++U1tcPbEBJond94EToh/MugrQfau9VJBCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:33:9a:49:a5:a2:c7:4c:c5:e9:8c:ce:37:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Oct 17 14:00:41 2026 GMT
Not After : Oct 18 14:00:41 2026 GMT
Subject: CN=8e72c3822b069b631efecc8cb7628736b010bfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:a7:e0:ab:08:6e:85:81:af:84:4d:6f:19:
69:00:c5:68:1e:05:ad:d7:04:35:6b:8c:95:11:29:
2c:52:90:0f:9b:05:91:97:d4:02:c3:e5:87:36:03:
b1:dc:9b:14:6e:3e:27:10:41:b4:f7:cd:f8:65:1b:
28:e7:79:37:b9:ea:fe:c3:dd:35:80:2c:e6:e1:ff:
cf:b7:7d:2e:99:7b:6a:1c:53:99:24:b8:c0:92:ed:
42:7e:eb:fa:75:39:33:0f:c2:33:e0:3b:0f:0d:d7:
79:07:03:ed:ac:14:db:69:0d:d4:ad:c5:eb:8a:d2:
d8:84:4b:21:77:ba:05:71:f7:c3:56:ed:d1:52:fc:
51:9f:2b:1e:42:0a:cc:63:fc:71:f9:79:7b:55:24:
af:08:e0:02:4d:5b:44:42:c7:42:bf:87:af:de:fa:
c1:0f:91:20:03:99:2d:e0:7c:bd:f0:2d:fc:6c:a9:
32:63:35:d2:e7:8f:be:3b:e2:56:98:16:62:ea:eb:
62:f8:3c:60:9d:f6:7c:32:68:b2:94:ae:d3:f3:95:
49:9a:a5:3a:88:ea:9d:1e:ee:40:87:a4:87:d3:05:
1b:79:8d:45:c5:70:65:3e:fa:c8:95:7a:46:df:45:
c1:19:d5:86:10:17:d5:4a:af:1e:b5:f0:db:fd:40:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:C3:82:2B:06:9B:63:1E:FE:CC:8C:B7:62:87:36:B0:10:BF:A7
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:32:c7:8e:22:49:83:13:09:55:dc:3d:34:b3:1d:d5:46:
90:0b:70:f4:4e:9e:c4:ad:86:22:d7:f2:1e:4c:6d:d5:ae:50:
26:e4:fb:5a:3f:a8:30:e0:fe:41:7a:48:8e:43:a8:b8:5d:0a:
de:bb:72:92:d5:39:bb:31:7f:17:39:ff:e1:9f:99:84:d3:ee:
1c:b1:e5:99:6d:9c:ad:52:c7:a5:f4:76:e2:c9:9c:70:e3:63:
31:69:c0:eb:9f:f0:7c:0e:fe:63:9e:34:59:a9:c6:54:4c:49:
98:82:92:4a:c9:ef:e9:13:70:ad:ba:5f:1e:10:65:27:5f:fd:
e5:e5:73:52:1e:0c:b2:00:84:eb:d0:dc:b1:8e:a5:91:86:e4:
82:95:03:7f:da:d6:eb:99:a6:c1:53:56:2b:5c:03:2f:ad:0b:
bd:ca:87:37:21:f4:6d:22:92:cd:ee:a5:f4:74:c4:44:26:5e:
3b:7f:b3:24:a4:b3:22:b3:50:0a:e5:cb:59:16:47:c4:d7:0a:
6f:6e:2d:b4:3f:30:f7:08:fb:fd:2b:c8:18:9f:ba:18:64:24:
fd:9f:f8:ad:ac:e5:dc:02:ca:dd:95:b3:d2:03:91:4d:9f:6b:
74:e7:48:d1:52:7e:5b:58:42:42:8e:4a:7f:f1:34:03:4b:65:
76:8f:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:52:31 2026 by rpki-client