Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: qlkYfOSf6X5MtcEr3y7GwqW8wNAXlKAQyjvdAvsd1kE=
Subject key identifier: 4D:B1:BF:7A:E3:C2:BF:12:AC:F6:D7:8D:8D:5F:D3:E6:76:A8:1C:9A
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 01A08C7B0247095319FF489CF4A626408E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: 0261
Signing time: Thu 10 Sep 2026 18:01:06 +0000
Manifest this update: Thu 10 Sep 2026 18:01:06 +0000
Manifest next update: Fri 11 Sep 2026 18:01:06 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: L10WGqneFoIQ/ZelvYXU8pcunAELgJW+2LUwMn46NG4=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:02:47:09:53:19:ff:48:9c:f4:a6:26:40:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Sep 10 18:01:06 2026 GMT
Not After : Sep 11 18:01:06 2026 GMT
Subject: CN=4db1bf7ae3c2bf12acf6d78d8d5fd3e676a81c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:3f:46:89:11:ef:ff:c6:66:e2:a8:fd:88:
6c:a0:28:4c:72:ac:7c:05:17:4d:12:02:30:9d:35:
2b:9c:7f:f1:46:d2:dc:3a:8d:0c:5f:2a:85:50:d2:
a5:1f:14:9c:67:ce:87:1e:37:45:79:7c:f2:e3:ca:
b5:93:a6:79:e9:fb:7e:bc:66:83:48:b5:12:f3:07:
29:ee:e7:a4:a2:1c:28:df:0d:c5:f9:a9:80:4c:6e:
0b:8c:92:24:9a:0f:62:43:46:fc:f1:c4:88:0b:57:
74:08:0f:af:81:0e:c3:5c:57:d7:49:2a:cf:b7:ab:
41:21:ef:05:7b:8e:8a:84:44:b1:c2:74:0c:26:00:
2c:9c:b6:67:3c:fd:72:7f:fe:b9:08:2a:2b:44:40:
32:18:02:a6:5e:1f:14:fd:9e:84:17:4e:7c:42:16:
2a:bf:28:86:d1:50:28:7c:d0:50:33:52:80:92:0b:
4d:06:6f:ab:7a:dc:2d:62:62:fc:14:d0:ca:0e:76:
d5:a0:78:63:90:14:50:9d:06:19:91:d2:3b:93:34:
07:cb:8a:b9:22:c9:98:46:2a:03:3f:86:71:73:cb:
1a:80:53:a4:ca:6e:48:f9:62:39:16:41:97:00:d7:
15:6a:a4:a7:ac:e5:2f:24:9f:3c:98:85:ff:ed:ba:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B1:BF:7A:E3:C2:BF:12:AC:F6:D7:8D:8D:5F:D3:E6:76:A8:1C:9A
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d7:cd:8f:b5:d4:e0:67:43:60:dd:b4:04:08:47:bb:e6:94:
46:35:22:70:af:05:b3:22:60:43:63:a9:91:8a:4d:40:e3:3c:
51:50:6e:cc:5a:c4:b3:ce:09:3c:3b:26:5e:c0:fc:bf:be:8c:
22:5b:0f:c4:50:97:10:7d:02:c6:42:9e:d4:07:74:f5:d3:9b:
6c:19:70:00:6b:09:22:99:e9:a0:3d:bc:35:9b:30:ce:99:36:
5f:7a:7a:ea:60:00:dc:23:ae:16:28:84:5a:be:20:5a:78:cb:
78:b4:c2:13:3b:e3:67:0d:89:d1:e2:6a:e8:73:48:6a:98:68:
a3:0a:a9:e0:36:0e:d7:7e:20:01:0e:d6:be:f4:3d:33:f1:50:
ce:1f:ef:ce:dc:01:66:44:03:4f:a7:1b:5e:52:d0:60:43:de:
14:67:3e:6d:82:77:33:29:a4:78:1f:34:a3:15:46:2d:63:64:
05:f8:aa:8d:b1:47:b0:45:82:96:63:3b:c8:13:43:70:8a:f0:
26:b5:f1:6c:36:a2:2d:82:f2:69:34:67:36:31:8d:0a:25:9a:
34:e8:b3:d5:a3:f8:05:51:89:51:e4:c0:2a:2f:e2:70:9c:78:
5a:97:1e:de:33:71:c6:66:d2:ce:a0:4b:23:97:ed:a5:80:95:
b0:41:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:58 2026 by rpki-client