
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: Na1TXAtYE5V1lRAbdMXccyEi2/AfExuwh8onVgCb66U=
Subject key identifier: 12:C1:F8:34:14:8B:91:B2:7C:59:98:58:4D:37:E7:DA:EE:68:70:83
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019E209227FF2799AE7F626E9E5A5C4E1A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 106B
Signing time: Wed 13 May 2026 09:01:49 +0000
Manifest this update: Wed 13 May 2026 09:01:49 +0000
Manifest next update: Thu 14 May 2026 09:01:49 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: v6kZxizHYu3qlY8caVyaazFdXE1TmPqnsTnzNa9e++M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:27:ff:27:99:ae:7f:62:6e:9e:5a:5c:4e:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: May 13 09:01:49 2026 GMT
Not After : May 14 09:01:49 2026 GMT
Subject: CN=12c1f834148b91b27c5998584d37e7daee687083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:10:8e:75:97:7b:e3:23:6f:89:1a:fb:8e:
df:5c:26:6d:f8:42:ab:40:c0:2f:f7:79:8d:1d:70:
2e:12:35:07:4d:5c:09:1c:e7:8b:e7:7a:8f:0a:5a:
37:d7:f2:b6:a4:fe:e1:f0:84:6c:2a:b3:73:35:86:
92:93:6f:ee:81:85:cd:dd:5f:cc:3e:00:5d:b2:5b:
36:36:30:e9:48:6e:7b:29:9a:e5:4b:41:48:f6:98:
34:d4:89:ae:28:37:cd:e3:0b:93:e8:d7:1e:3c:04:
a8:ac:4b:e1:24:75:e7:04:14:d6:e2:fa:56:4d:24:
50:d7:d2:c4:ee:f9:72:5b:9a:ef:73:2f:ac:0a:5d:
20:76:42:c0:d8:c1:1c:a4:4a:ca:8b:b8:57:2a:bb:
9e:93:53:b3:48:cb:fb:8c:31:49:f2:03:f8:8f:2d:
ad:0d:14:f5:61:96:ec:68:ae:b1:3a:e8:a4:0d:5a:
1b:e7:33:2c:42:7f:dd:65:b8:67:62:06:88:2c:bc:
81:c3:64:ed:fa:07:47:64:93:38:2c:bd:9c:62:cb:
fa:34:14:b5:82:fd:42:8d:20:b4:15:73:26:bf:c1:
08:86:d4:17:9e:c3:59:9f:7d:b9:91:18:72:90:fb:
22:1c:3b:1e:49:62:ec:30:5f:c4:63:4b:b4:57:c6:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:F8:34:14:8B:91:B2:7C:59:98:58:4D:37:E7:DA:EE:68:70:83
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:ab:0d:ac:99:8e:ce:04:6a:e1:b6:78:c8:b3:81:47:7a:
3a:08:74:f7:d5:e8:a1:53:fa:dd:46:89:74:3c:e7:02:e6:63:
cc:40:de:f2:aa:20:82:94:57:b5:37:12:55:d5:2d:d5:d0:83:
b9:56:8b:6d:38:12:4b:f0:cb:3a:cf:3e:33:8f:3a:9d:f1:6a:
b8:1c:bd:0b:a6:d7:e8:fa:57:87:ba:a3:ab:18:63:ec:b8:c4:
a0:15:1b:5a:6f:d2:78:b2:91:de:5a:97:56:bc:72:f8:6e:62:
2d:e7:62:cc:d4:04:69:f9:fd:19:69:3e:e0:cd:51:46:b6:ac:
71:f0:1a:e6:aa:5b:a7:54:eb:ac:79:91:e9:cd:d1:18:e1:1a:
9a:7e:79:9d:b0:28:14:76:2d:7e:02:ed:0c:a8:8b:7c:f3:8c:
ec:60:22:2d:47:79:2c:f2:3a:ce:dc:69:a5:41:21:3e:93:a6:
c0:64:d7:1f:10:40:a2:0b:02:35:96:be:4f:25:2c:70:43:8c:
a7:a6:e7:a1:06:59:4d:9e:2c:b5:ba:fe:7a:ad:e6:9d:6e:06:
2b:49:c7:48:4d:0f:87:d8:95:95:17:5e:6c:79:73:71:b6:98:
b1:fa:c1:2c:3f:b6:92:8d:8a:ae:8f:54:73:35:36:9f:19:b3:
ea:0b:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:35 2026 by rpki-client