Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: FbZaYBveaP2pDSVcsXYyaTWxjqpoXUIK19/dDBTonIA=
Subject key identifier: C4:F9:1C:FE:88:CF:86:1C:FC:72:C3:62:0F:20:0A:88:73:09:60:F8
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01A13D49FBF135392CA24A7933CEF253024F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 02:00:21 +0000
Manifest this update: Thu 15 Oct 2026 02:00:21 +0000
Manifest next update: Fri 16 Oct 2026 02:00:21 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: xuO9PN/s3hfQXGGSzlq6CIcv43kZPVhCJvDMOUGtPoA=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:fb:f1:35:39:2c:a2:4a:79:33:ce:f2:53:02:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Oct 15 02:00:21 2026 GMT
Not After : Oct 16 02:00:21 2026 GMT
Subject: CN=c4f91cfe88cf861cfc72c3620f200a88730960f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:ef:1c:35:86:80:72:6f:04:c2:50:37:77:
80:81:15:a2:5b:87:1a:aa:b7:bc:ec:57:1e:40:28:
36:73:00:80:e5:4d:0b:fd:96:f5:25:39:89:4d:e7:
06:bc:87:9e:fa:ff:9f:a4:bb:ea:f2:71:57:f1:b3:
0b:23:9c:75:bc:4a:47:ba:94:43:c1:3e:5d:36:3a:
2c:f9:88:82:4a:31:b1:3f:0f:55:f2:91:f1:7a:4e:
89:c2:f8:40:0a:c3:d0:e2:f7:cf:af:ad:28:71:d4:
00:40:4c:60:b3:28:65:7d:89:52:73:cc:e5:45:53:
30:bd:0d:df:b8:be:88:4c:75:85:6b:d6:12:6a:89:
ad:95:fe:96:98:35:d7:09:ff:89:5e:2e:f5:85:8d:
f0:92:af:3d:07:38:c5:39:ee:bf:8e:62:2b:39:8c:
a7:67:c6:09:e6:73:39:c1:3c:99:14:ef:d0:04:1a:
1d:44:3b:53:8e:60:0e:1d:d9:fa:48:db:3c:0f:6c:
58:8a:b3:71:64:f3:be:b1:e7:f6:9f:4b:9c:fb:6b:
c1:4d:3e:66:1b:2d:ba:9a:f3:f7:90:5d:a5:8f:70:
e3:01:e9:f0:41:a5:a6:1f:af:3a:69:2a:83:3d:2e:
95:b1:ce:4d:fd:4e:4e:bc:26:e4:0b:f6:15:b8:8b:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:1C:FE:88:CF:86:1C:FC:72:C3:62:0F:20:0A:88:73:09:60:F8
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:de:41:f6:68:ea:45:21:45:a0:c7:85:11:41:9f:ab:bc:04:
4e:af:a4:25:ee:3d:6c:a8:94:df:f0:30:50:76:22:26:c5:33:
69:73:ab:d0:38:b2:dc:2b:be:ca:2d:92:64:8f:6d:81:79:d6:
de:ef:bc:65:33:50:83:52:5f:cf:eb:07:58:64:56:3b:c1:1b:
7e:13:49:22:fb:ec:07:9c:97:d3:43:b5:0d:1e:7c:99:86:ef:
be:ff:7d:f9:7d:78:2c:c0:de:f5:72:02:e5:2e:17:78:19:01:
47:ce:d7:46:df:df:48:3d:d7:f7:09:7a:23:f8:3a:f5:5c:bd:
8d:9f:f6:da:f6:03:91:df:d8:59:71:5c:b2:fe:75:9c:63:2b:
9b:d2:73:1c:e1:2a:79:84:b4:d9:d7:f4:2b:f1:e2:29:2e:99:
67:c5:88:5f:62:e0:2c:3d:b0:d7:cb:bc:26:f4:8f:5a:11:04:
73:d5:41:0f:9e:4a:24:48:53:ab:f0:c0:f6:39:70:d4:23:04:
f6:2a:54:9d:48:50:2f:cf:6d:8a:b7:3c:42:5d:8a:cc:2c:e4:
e1:16:63:e8:d7:72:88:3f:f1:77:86:7a:9d:97:ae:9d:3e:8b:
3d:b3:06:fd:3c:fb:05:53:8f:cc:c0:26:00:50:73:0a:fa:2b:
da:87:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:34 2026 by rpki-client