Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier: a2QTeBIlo3qUTrc508a3QULlO3yyysmi2ePhLdfD6Ik=
Subject key identifier: 92:C5:C6:12:E9:D0:85:1E:5F:3F:5C:BD:F5:B6:3D:83:CF:ED:0A:C7
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 019D29CE41467B1FEB5629F415FBE4442339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number: 1120
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: Gy7yFDaNnpwUQUDRpzv/8TlvydMJGT0tYXbS43AVV10=)
2: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (hash: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:41:46:7b:1f:eb:56:29:f4:15:fb:e4:44:23:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=92c5c612e9d0851e5f3f5cbdf5b63d83cfed0ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:21:06:0f:67:a5:f8:cb:82:15:09:cd:cc:
5f:1c:f5:93:de:90:56:6f:8c:be:08:4e:e6:17:94:
52:30:c3:b6:0f:91:68:59:a4:8b:78:64:eb:49:2c:
c1:91:9f:4c:eb:3c:5f:5a:0f:c3:38:a1:76:b3:28:
df:38:6f:8a:49:18:46:22:74:41:ce:4c:1e:22:89:
aa:6d:3d:9e:c8:38:57:95:56:e4:d2:89:92:b6:47:
d7:26:1b:e3:d8:70:63:13:b6:5f:5d:a3:b1:fe:97:
be:10:33:2b:05:8f:da:f2:09:65:55:0f:8e:ea:6e:
9a:eb:02:c7:73:b3:3d:8f:71:93:13:8c:74:81:c0:
7f:28:c7:44:5e:ec:c8:5b:8b:0f:4a:1e:e6:6b:f1:
26:95:dd:05:67:85:82:f6:72:a5:fe:43:71:5a:43:
30:af:78:10:b6:14:c0:b4:a7:ed:c3:56:bb:7a:a2:
e3:2d:ca:4e:a6:45:36:ff:b4:ac:b6:75:aa:4a:5d:
3b:3c:8b:3d:d7:de:f2:79:39:10:ba:8f:58:e3:29:
9e:5f:c6:f5:e2:f1:ef:23:17:1f:5a:25:3d:e8:f9:
94:fe:e9:61:4b:b6:6b:b7:86:8b:dd:63:91:8c:c2:
ae:1a:51:0b:9c:c6:8f:5a:4a:50:75:ef:81:95:23:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:C6:12:E9:D0:85:1E:5F:3F:5C:BD:F5:B6:3D:83:CF:ED:0A:C7
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:db:20:16:29:78:0d:a1:93:19:0f:fd:b0:81:24:dd:66:
ed:09:6c:64:fd:58:53:cb:28:7a:23:87:b5:11:f9:57:7a:8a:
14:c1:40:63:3b:2f:76:b0:44:92:04:65:78:7c:80:e0:c6:b9:
9a:ac:03:98:a3:fb:e3:fb:a9:96:9b:77:ab:1e:5d:48:fc:48:
4b:18:79:0d:6e:f1:2e:29:6b:3f:90:bb:2f:e4:4d:b9:69:07:
6e:56:f4:0d:25:5a:06:75:7d:ef:12:93:41:ad:ea:e1:1f:18:
45:a4:59:f3:42:96:8e:23:e9:fd:38:b9:61:1e:df:f6:31:5e:
0c:6f:8a:4f:23:bd:c8:b9:19:1b:ad:e5:14:4d:54:30:f6:bb:
74:14:48:6f:48:27:67:a3:d2:02:5e:20:de:60:52:e5:d4:fc:
a9:26:ec:e9:55:8a:00:9c:f2:dc:f0:19:fa:d5:e2:b2:5a:21:
bc:39:d6:0b:e9:c2:42:ab:93:a4:60:14:28:b6:8a:0d:7f:72:
a6:b8:12:44:01:19:8e:7f:95:34:3c:f7:5b:a0:9c:98:dc:26:
7e:cf:07:4c:63:38:a8:95:b8:a0:45:16:ad:4a:32:1a:aa:87:
ec:5a:a6:e7:d1:19:27:23:c7:27:bc:e4:a7:d1:f1:f9:5b:dc:
e9:3a:bd:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0pzkFGex/rVin0FfvkRCM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3
YzMwNmUwHhcNMjYwMzI2MTEwMTE2WhcNMjYwMzI3MTEwMTE2WjAzMTEwLwYDVQQD
Eyg5MmM1YzYxMmU5ZDA4NTFlNWYzZjVjYmRmNWI2M2Q4M2NmZWQwYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg0hBg9npfjLghUJzcxfHPWT3pBW
b4y+CE7mF5RSMMO2D5FoWaSLeGTrSSzBkZ9M6zxfWg/DOKF2syjfOG+KSRhGInRB
zkweIomqbT2eyDhXlVbk0omStkfXJhvj2HBjE7ZfXaOx/pe+EDMrBY/a8gllVQ+O
6m6a6wLHc7M9j3GTE4x0gcB/KMdEXuzIW4sPSh7ma/Emld0FZ4WC9nKl/kNxWkMw
r3gQthTAtKftw1a7eqLjLcpOpkU2/7SstnWqSl07PIs9197yeTkQuo9Y4ymeX8b1
4vHvIxcfWiU96PmU/ulhS7Zrt4aL3WORjMKuGlELnMaPWkpQde+BlSNMTQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJLFxhLp0IUeXz9cvfW2PYPP7QrHMB8GA1UdIwQY
MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw
LTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFlL2YzY2EyMy04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYy
OWUvMS8xLUVUaDZ2cXRQTENSOGc3bHZ4d0Vna2g4TUc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNPb
IBYpeA2hkxkP/bCBJN1m7QlsZP1YU8soeiOHtRH5V3qKFMFAYzsvdrBEkgRleHyA
4Ma5mqwDmKP74/uplpt3qx5dSPxISxh5DW7xLilrP5C7L+RNuWkHblb0DSVaBnV9
7xKTQa3q4R8YRaRZ80KWjiPp/Ti5YR7f9jFeDG+KTyO9yLkZG63lFE1UMPa7dBRI
b0gnZ6PSAl4g3mBS5dT8qSbs6VWKAJzy3PAZ+tXislohvDnWC+nCQquTpGAUKLaK
DX9yprgSRAEZjn+VNDz3W6CcmNwmfs8HTGM4qJW4oEUWrUoyGqqH7Fqm59EZJyPH
J7zkp9Hx+Vvc6Tq9nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:42 2026 by rpki-client