Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: W5igkzIsjXse5oTdEjneNoCyWrFC6OiPtf6O03bpr8Y=
Subject key identifier: D1:45:52:27:0B:9C:C3:7B:D0:D3:2E:A3:1C:CA:FA:B1:76:C4:2A:C9
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 01A17BF2ABAA3CC5A6B2A9127D16F575C168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: 02DD
Signing time: Tue 27 Oct 2026 06:01:03 +0000
Manifest this update: Tue 27 Oct 2026 06:01:03 +0000
Manifest next update: Wed 28 Oct 2026 06:01:03 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: 6Wg/Y7U8I92H1A7VhJOOcQRhpLDaywBWyoUijh4SVC4=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:ab:aa:3c:c5:a6:b2:a9:12:7d:16:f5:75:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Oct 27 06:01:03 2026 GMT
Not After : Oct 28 06:01:03 2026 GMT
Subject: CN=d14552270b9cc37bd0d32ea31ccafab176c42ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:b8:0a:d3:1b:68:65:cd:f0:ae:3f:4b:6e:
fc:be:c6:0a:59:1a:9d:26:98:77:65:00:65:23:c1:
64:03:d5:4a:a6:aa:64:b8:18:69:7d:63:61:9c:ef:
94:4a:ad:d2:11:54:47:7b:aa:0f:ee:02:19:83:f6:
65:20:a1:68:50:7a:cd:d4:96:05:40:fd:bd:c0:a2:
ea:00:4e:c8:6c:49:ac:4e:20:b2:43:50:8d:e9:8c:
27:23:d9:b7:7e:4a:9e:bf:81:ea:24:83:7a:3e:aa:
7e:b9:45:c0:a0:c2:09:e1:ad:7b:d9:69:51:67:14:
0c:95:b3:df:f3:94:b5:ae:d5:61:14:8d:ef:b1:66:
8d:2b:29:f5:e3:e9:5a:9b:68:ae:56:20:3a:fa:44:
1f:fd:c1:bc:ef:15:88:e0:0a:81:fc:e2:68:c9:1a:
2c:36:27:54:cb:1d:32:7b:4b:98:bb:b3:f2:9e:9c:
5f:12:1b:96:f4:7a:a5:ae:bf:19:7b:b7:09:b3:f0:
71:6a:4f:e6:09:32:65:e2:5d:31:5c:07:9b:1b:c6:
f7:af:05:78:97:6e:bd:cc:0c:a2:17:84:e1:e3:b8:
cb:50:3d:04:3c:63:42:a4:76:c7:50:4e:af:b8:ad:
0b:3d:0a:b9:98:cd:45:7e:2a:f6:42:9b:84:a2:39:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:45:52:27:0B:9C:C3:7B:D0:D3:2E:A3:1C:CA:FA:B1:76:C4:2A:C9
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:a7:e2:5b:85:18:11:78:ce:7b:89:30:ea:7b:67:3d:c5:
4d:1f:6b:e6:16:28:63:78:0a:b7:1c:3c:9e:91:7d:70:94:71:
3e:50:eb:d1:e9:cb:0a:b7:6d:d7:da:4b:d3:54:fa:b1:bc:3c:
b8:78:aa:fa:c9:30:f8:09:15:ad:82:3f:0b:74:2a:c6:b6:bf:
15:6f:8d:93:dc:f6:c8:07:ad:29:12:d4:11:66:c9:a3:00:18:
6f:31:75:47:c8:26:7d:0a:0e:db:0a:41:b2:ae:f1:8c:58:b6:
0f:e9:64:cc:b3:81:43:b6:96:2c:5e:c1:95:b9:82:bd:b4:a0:
b6:c6:f3:44:d7:83:a5:bc:85:0d:22:53:da:f7:8a:fd:ac:af:
8a:7f:fc:d2:1f:8e:e2:86:4d:38:10:08:b2:0c:98:9a:d8:e4:
42:37:9d:8b:ad:28:38:bc:1e:f0:02:cf:f7:04:2e:94:95:9b:
07:c0:b9:3f:97:1d:09:78:df:58:6f:01:b6:e8:b5:e9:ba:9f:
f8:1d:9f:86:f4:90:66:06:44:42:88:5c:16:10:c9:8a:9c:d6:
50:22:ce:e0:8c:fd:a0:1d:eb:60:fd:7d:21:0d:77:f7:5a:34:
a7:32:b8:b2:6e:e2:16:4e:21:a7:93:67:74:09:4b:36:bf:78:
67:ce:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:02:34 2026 by rpki-client