Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: tJumBTamuKHvRuPIIrnUPx1q+AaMIeH4Bmr8mvGOPXA=
Subject key identifier: 51:5B:D7:79:32:4F:1A:FB:45:19:5D:5C:A1:D4:9F:A0:AC:C0:31:99
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019D2960E815419BC25BC5419CB27141F539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0FEB
Signing time: Thu 26 Mar 2026 09:01:49 +0000
Manifest this update: Thu 26 Mar 2026 09:01:49 +0000
Manifest next update: Fri 27 Mar 2026 09:01:49 +0000
Files and hashes: 1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: DduQPmJKxe8ul74V+jJMdvaLCME3LZB+CdzhI1oUXLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e8:15:41:9b:c2:5b:c5:41:9c:b2:71:41:f5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Mar 26 09:01:49 2026 GMT
Not After : Mar 27 09:01:49 2026 GMT
Subject: CN=515bd779324f1afb45195d5ca1d49fa0acc03199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:f7:66:25:03:26:91:ce:52:b6:17:ca:76:
02:f7:69:2f:80:de:fe:14:1b:76:03:c8:90:ed:ed:
27:e4:53:d1:eb:68:a9:f9:3b:19:1f:54:cd:ab:d0:
a2:dc:28:50:db:91:32:95:45:17:b3:11:fc:c8:f2:
2d:5f:b8:67:08:45:fe:72:4d:ed:0c:11:0c:de:e7:
17:c5:15:f7:56:a1:44:c3:48:28:13:97:39:33:c6:
49:ae:a4:e8:85:e4:bb:57:70:89:54:b8:15:d3:86:
d5:1b:10:ef:fd:9f:15:f6:1a:8b:57:76:d8:b9:47:
10:31:ca:75:b4:4a:57:71:14:2f:9d:75:f9:c9:1c:
13:c9:00:94:95:e6:f6:ff:0b:b2:81:d0:52:79:b5:
dd:24:06:91:9c:0b:ff:6e:ff:b9:75:e5:e8:57:44:
b8:68:ef:dd:b9:98:95:5a:51:d0:3c:cc:91:36:d6:
93:57:9a:ee:77:97:9a:cd:cd:d9:ee:d4:c6:fe:fe:
3f:c3:40:5a:20:12:01:ef:84:c2:7e:e8:e0:69:d7:
25:b8:1f:37:5f:c7:da:69:28:8a:ea:db:34:73:7b:
84:1f:2d:89:17:4a:25:79:37:37:29:ee:b0:fd:3c:
1c:43:61:28:13:05:80:27:a0:f6:c4:50:dd:32:cf:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:D7:79:32:4F:1A:FB:45:19:5D:5C:A1:D4:9F:A0:AC:C0:31:99
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:b5:3c:95:c0:e4:aa:98:c4:bc:83:05:ef:9e:84:47:fd:
46:98:8d:aa:a0:ce:c4:16:c3:11:7f:35:75:d9:f6:ba:80:fb:
ac:98:c7:2c:c5:1e:03:95:71:6e:24:2e:9a:68:3d:76:5f:b4:
60:0a:56:8b:ca:61:2b:55:ea:70:6f:a5:0f:51:77:5f:57:8d:
7a:70:b8:36:e7:19:26:f9:b9:32:52:c6:4a:30:32:9a:8e:13:
1e:44:51:5c:70:8d:59:27:78:9c:8c:7e:8a:79:b7:05:66:97:
dc:c5:ba:a8:7d:b7:8c:ff:12:cd:57:ff:ce:c3:48:6e:bb:02:
d5:e1:0f:0b:37:cb:cc:5e:d7:18:f2:1b:d3:7d:84:3b:5b:b1:
83:53:34:5a:a4:0c:f6:2a:97:20:75:ac:52:cd:3e:81:2c:76:
2f:f4:55:a1:9f:f7:f3:39:fc:b5:af:45:35:65:25:c8:b1:1e:
c9:0e:35:67:68:cb:73:c0:76:46:9a:26:34:f2:d5:39:20:62:
1c:d7:a8:ed:35:cf:02:47:1b:d9:c0:7c:6c:9c:3e:da:fe:9c:
32:1b:29:a6:5f:3a:50:b1:0a:dd:22:51:d5:88:bc:fb:63:4b:
0c:83:bc:25:e8:a0:d1:c4:93:31:96:4b:c9:49:20:b7:ec:c2:
dd:48:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:24 2026 by rpki-client