Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: Cekpa/yDERlR5VQOA+mzQ5XiK5pFYjsa9t5duwDNBww=
Subject key identifier: 9D:14:E6:7C:F8:A2:61:CA:41:9A:A3:EA:53:55:F9:C9:CB:E0:B0:E0
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 01A1005AF672E57D31EFCB56FBD590A1F495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 11E8
Signing time: Sat 03 Oct 2026 06:02:03 +0000
Manifest this update: Sat 03 Oct 2026 06:02:03 +0000
Manifest next update: Sun 04 Oct 2026 06:02:03 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: XDAQMhMAk7Fc3Zga5cNYEquYELOufol6iJUbFkOyMFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:f6:72:e5:7d:31:ef:cb:56:fb:d5:90:a1:f4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Oct 3 06:02:03 2026 GMT
Not After : Oct 4 06:02:03 2026 GMT
Subject: CN=9d14e67cf8a261ca419aa3ea5355f9c9cbe0b0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:26:77:df:0e:a2:1c:85:ee:d9:f5:77:f9:
ed:79:a7:c2:15:8f:2a:2b:6b:43:ba:84:bf:3a:f1:
b2:9e:be:c0:01:6f:9f:80:cf:cc:fa:ee:fd:61:17:
8b:33:51:8d:e4:ca:49:aa:88:cb:67:93:19:7f:61:
aa:5a:ac:4e:fb:69:73:e1:76:0f:4d:93:68:48:34:
1d:1f:3d:f4:12:4e:93:2c:d5:7f:ec:ca:79:48:87:
9b:d5:4d:a4:20:7c:8c:0e:9e:cb:a8:1f:0f:ff:59:
d8:46:76:b6:63:60:c9:5c:ab:2f:cd:c7:0b:fc:12:
72:e2:4e:56:db:81:f2:34:3f:73:ec:97:fc:b5:25:
e8:3b:58:d6:df:0a:3f:27:bb:d1:7d:f5:80:76:4a:
55:9a:81:32:d9:e5:a4:75:3e:b2:e8:a5:71:92:9a:
a0:2b:72:19:05:20:a7:a3:9b:c0:4a:83:33:fb:5c:
5b:a5:08:a2:c2:a2:5f:61:66:98:45:1b:fd:bb:0b:
5e:09:c3:1e:2b:aa:4e:62:7a:5c:87:1f:c1:2b:13:
b2:fb:21:99:fe:c7:b5:c0:45:e6:53:c7:12:18:0d:
6f:ef:11:1c:63:77:dd:f8:01:73:65:7d:e0:b8:d1:
d9:bf:79:1d:ad:97:63:35:d1:e5:a7:21:2a:2c:87:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:14:E6:7C:F8:A2:61:CA:41:9A:A3:EA:53:55:F9:C9:CB:E0:B0:E0
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:a2:99:39:c8:66:71:8c:76:d8:80:0e:fd:17:bf:13:8b:
24:7b:1b:cc:22:1c:95:a9:cf:4e:48:27:5d:21:3d:b5:dd:7a:
90:5a:30:a9:fd:00:f7:16:80:5b:5b:d2:96:26:76:2f:ce:07:
1d:16:43:6a:b5:ed:fc:76:66:1f:b0:a3:af:5f:07:91:01:da:
17:67:4d:a1:55:64:5d:c1:62:70:24:80:83:37:e4:75:ec:e9:
0d:d5:84:78:5d:4c:5f:fc:9d:54:39:15:a8:8c:d0:ec:36:24:
1d:95:58:7d:43:50:cc:05:f8:95:b9:ec:c5:90:11:d7:e3:a0:
07:08:b0:9d:9d:f5:9e:6f:1a:ea:16:f8:68:2c:3a:3e:64:83:
9b:ec:b5:22:d1:b9:92:c3:33:d3:55:af:74:6d:37:fd:3c:2d:
b3:ea:c4:19:bf:ba:60:e3:92:cc:f3:b6:6e:1a:77:1e:ca:dd:
10:13:5b:12:02:f3:d1:84:c0:e0:1b:eb:8c:cf:1f:8c:b9:0a:
55:c2:ef:05:7d:2e:de:86:02:f8:4c:2a:7c:22:ae:39:63:94:
46:66:66:ce:80:ae:e5:77:13:ea:10:ec:ed:10:87:4e:cd:ec:
3a:85:05:99:f0:9b:ad:f4:a2:b2:8a:d9:53:7d:5f:04:d2:46:
bd:bd:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:13:08 2026 by rpki-client