Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: YdALK8pIXLcdY3mhEH3LqEJ5DVv6JOclprlGSiqw/KQ=
Subject key identifier: 8F:20:78:60:8B:6B:B8:5A:A4:81:81:B0:DA:D6:82:E2:8A:14:DF:67
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01A0C96B220A6172685550B3237146D4763E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 14:00:36 +0000
Manifest this update: Tue 22 Sep 2026 14:00:36 +0000
Manifest next update: Wed 23 Sep 2026 14:00:36 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: eAaUsw2f0UiiL5BLlwg/cXnJDZ76tcovrNqhORxWn2k=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:22:0a:61:72:68:55:50:b3:23:71:46:d4:76:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Sep 22 14:00:36 2026 GMT
Not After : Sep 23 14:00:36 2026 GMT
Subject: CN=8f2078608b6bb85aa48181b0dad682e28a14df67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:92:14:92:21:98:4f:f3:f6:d1:c6:e5:7f:
38:27:dc:76:34:13:15:64:04:07:20:0b:43:cb:fe:
55:c9:9b:7c:a7:52:51:a5:39:62:f9:b0:6b:de:07:
c9:da:58:37:79:0e:8d:6c:1e:a4:be:a9:c2:20:a2:
c2:f0:9f:2a:da:e0:e9:d7:45:2a:75:8f:68:62:81:
40:65:99:3c:76:76:93:bf:53:5c:47:c8:cf:f4:e5:
ca:d4:09:86:9b:58:b8:97:03:89:82:df:c3:e9:58:
7d:d3:52:b2:7b:3a:9b:0f:87:ae:0a:0d:cf:bc:d8:
15:98:a6:95:20:36:e4:28:19:a8:6a:f8:3f:22:40:
94:94:d8:1d:bb:49:bf:87:fd:f0:a2:c2:39:c5:6e:
ed:7f:8b:1d:f4:87:3a:02:29:f4:07:e7:67:01:52:
db:18:10:86:83:e0:1e:08:0f:b7:20:67:ed:e5:4a:
2d:60:e5:e5:c2:0d:9e:b8:88:16:00:6b:5e:d8:5c:
85:50:3b:24:8b:96:1e:3b:46:8a:b7:a4:56:ee:c9:
a3:ae:d9:9b:54:c8:d7:03:63:b7:b6:23:a2:29:ac:
9a:05:34:3a:79:91:e5:e3:64:9e:e7:78:8c:31:fd:
12:08:ae:78:bc:4b:73:b3:bf:73:98:4d:16:20:27:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:78:60:8B:6B:B8:5A:A4:81:81:B0:DA:D6:82:E2:8A:14:DF:67
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:84:f3:56:42:ef:7a:20:80:16:06:84:39:f2:9b:ba:9f:a9:
24:15:ea:b2:8d:14:49:fc:c1:01:bf:97:a6:17:b5:29:cc:5d:
88:f2:4f:93:9a:08:1c:0f:f3:13:65:17:ce:99:24:6a:22:91:
74:9f:e7:7d:5a:4a:33:71:96:03:65:45:fa:fd:1b:78:c8:6c:
f2:65:bf:9d:ed:95:4f:fb:e2:7a:5b:79:66:62:5a:3e:3f:72:
5c:8f:97:c2:c4:48:a7:ca:8c:eb:90:ad:c3:63:14:c8:c8:95:
fb:3d:c6:e1:0d:b5:9c:1c:a3:05:be:71:26:3c:ef:03:d7:7e:
25:de:5a:1f:1c:86:23:b2:ff:13:a4:c2:f9:23:b7:ac:de:7d:
fd:a0:53:dc:2d:12:30:cb:96:26:82:17:fb:0d:ad:38:a4:95:
ad:d3:ed:5a:a1:09:be:22:1a:7e:f4:4c:91:fc:4e:b8:fc:50:
33:40:e6:71:63:da:32:ed:57:b0:3d:5a:f5:3c:83:c9:08:a9:
2b:77:a2:d7:64:bf:2b:49:ae:10:51:9b:e0:4b:1d:6d:1a:0c:
c5:c4:a7:8c:0f:e1:ef:e3:39:e1:fa:a5:13:5e:49:b9:7a:6e:
6a:f9:4c:80:6d:2b:e9:d6:98:7e:cd:b9:2a:3f:17:27:1a:37:
be:ac:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:56:10 2026 by rpki-client