Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: kP8YzpugBlCGTzhqCQlW5sWCW+7gqFROQhMorjkGR30=
Subject key identifier: BB:F2:E7:98:E7:62:D5:41:32:56:97:0B:3A:3E:2F:C1:CD:DF:F6:99
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01A002822F12719874D443089A12D3232227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 23:01:21 +0000
Manifest this update: Fri 14 Aug 2026 23:01:21 +0000
Manifest next update: Sat 15 Aug 2026 23:01:21 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: Cne1Qao3uU9qR7CYPFoZxumbHPQLJgkhK5V8w0cSae0=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:2f:12:71:98:74:d4:43:08:9a:12:d3:23:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Aug 14 23:01:21 2026 GMT
Not After : Aug 15 23:01:21 2026 GMT
Subject: CN=bbf2e798e762d5413256970b3a3e2fc1cddff699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:92:58:e7:38:d9:03:45:35:a0:0e:de:df:
48:39:d8:db:db:cd:73:fc:89:2e:64:b0:b5:ce:94:
5f:4d:93:fe:f2:7a:86:85:64:8f:05:c1:21:a9:bb:
1e:15:1f:f5:16:3e:45:d3:7b:cd:75:1e:8a:9d:ab:
db:48:7b:af:39:72:e1:15:0a:74:6e:e3:de:1c:fb:
a9:ef:b5:98:04:3a:3c:b4:a9:a0:a9:40:24:91:a9:
d8:7b:fb:a8:f5:ec:a3:71:44:92:c2:fc:19:07:3f:
c8:07:04:33:76:c6:7c:33:83:50:b7:fd:57:4c:e1:
60:52:ca:ae:1e:ea:52:92:db:8d:83:7c:53:89:dd:
b9:ff:f7:8c:bc:c9:6c:1c:7e:24:d4:59:e3:5f:59:
eb:f2:0c:ef:bd:b9:a2:34:26:67:5f:21:87:18:0c:
43:32:67:1e:2e:36:4d:3d:3f:32:38:6e:cf:56:6e:
e4:aa:f1:8f:d4:7e:03:68:ba:9d:0e:34:c7:5c:29:
3d:8e:c1:97:ec:d4:59:ef:0d:35:87:93:96:20:27:
27:93:de:a8:dc:8f:a2:e4:d0:00:0e:b9:b1:27:ba:
5f:f1:5c:dd:a7:31:8f:39:c0:96:91:cf:73:da:6c:
44:02:42:d2:a2:bd:75:35:16:78:96:92:bc:02:46:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:E7:98:E7:62:D5:41:32:56:97:0B:3A:3E:2F:C1:CD:DF:F6:99
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d6:8c:1d:bd:99:60:37:9a:a1:4a:63:20:cc:b6:a0:83:23:
f4:3e:f6:12:72:f6:7d:81:94:ab:de:c5:ff:3c:97:a2:00:e7:
57:c8:8a:f0:d9:3b:8a:4b:00:f4:8d:72:8e:d8:58:ab:54:9d:
93:84:7d:b6:5b:da:9c:bf:a3:b6:fb:89:82:c5:0c:ea:fa:cd:
9e:3c:87:81:09:ae:d0:73:9d:7e:06:a1:a9:11:f2:5e:b4:8b:
71:7d:ac:42:ea:e6:bd:cf:fd:d5:68:59:b9:de:00:86:51:91:
47:f1:37:2d:25:ce:d3:9c:53:78:ee:bc:16:8d:b4:f0:37:dc:
08:6e:32:7a:07:e1:26:21:d1:34:f1:d9:5f:23:38:ec:5d:1f:
09:c4:9f:08:df:37:b5:c3:44:0f:4e:a8:d2:35:b9:e7:0c:4d:
7a:a8:ad:58:27:25:67:ae:61:14:ec:04:56:cd:e3:c1:35:e5:
3c:fe:f5:42:12:8c:e8:2b:dd:54:22:f4:7d:bb:00:bf:d9:5b:
49:32:0d:b5:1e:6f:90:84:06:e8:a7:0b:51:f1:54:5b:a7:d3:
a7:e9:ed:03:98:a5:1f:7c:da:56:66:46:5e:84:d0:6f:a0:f3:
50:93:d5:4a:61:95:34:b7:38:98:69:b1:61:e3:5d:9e:10:01:
e3:5c:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:14 2026 by rpki-client