Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: 8UMAot8l7gECWoqH+VrMR1ns0zX2LM45AXJghcWNlA8=
Subject key identifier: ED:9E:15:58:CE:47:81:73:91:4F:EA:71:4E:FF:D1:F4:CB:02:B6:9A
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 019F935B9A1948EA906AD473221AF09DC731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: 01E0
Signing time: Fri 24 Jul 2026 09:01:21 +0000
Manifest this update: Fri 24 Jul 2026 09:01:21 +0000
Manifest next update: Sat 25 Jul 2026 09:01:21 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: 5PCE7eDFIhkm7dOqRvmCyTy5UElu5glIWnJq2MYfe/A=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:9a:19:48:ea:90:6a:d4:73:22:1a:f0:9d:c7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Jul 24 09:01:21 2026 GMT
Not After : Jul 25 09:01:21 2026 GMT
Subject: CN=ed9e1558ce478173914fea714effd1f4cb02b69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:20:00:75:27:15:98:a5:89:48:3c:50:a0:
cc:75:74:14:8e:3e:ac:fb:7f:5d:78:a6:58:50:a0:
58:8a:47:5f:cf:be:82:14:1f:fb:df:33:66:15:0b:
71:ef:cc:db:7b:81:c6:c7:cb:d0:fd:26:57:b5:02:
df:6f:79:70:06:01:d6:51:d0:2d:2a:42:58:4d:e0:
af:74:0b:58:d7:f4:e8:35:02:58:05:14:11:50:25:
20:fb:aa:b7:58:f1:27:ad:98:8f:33:9d:38:3c:99:
94:42:e9:b6:15:92:58:e9:f0:a6:e8:a3:33:d7:5a:
51:ea:27:52:2c:bd:b3:1d:2b:cc:ad:e8:f2:2e:4f:
b3:d9:45:92:a0:3f:3d:99:a9:67:f5:8d:26:36:27:
1f:69:3d:1a:52:10:92:33:70:7b:36:3c:41:88:71:
3a:28:c5:be:d7:33:7e:bb:c8:b6:8c:15:2c:82:a5:
25:29:c8:49:76:b1:c0:90:5a:a3:bf:78:de:1a:f7:
56:ae:6a:5a:15:c7:e1:9c:79:22:ad:e0:88:e3:cb:
07:35:ac:a3:10:c3:0b:0c:9f:31:8c:d4:e9:02:d7:
09:63:c7:53:81:7c:da:df:fe:08:87:62:50:ca:81:
4d:0e:bd:e6:af:c0:bd:1b:ef:de:7b:01:31:88:5e:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:15:58:CE:47:81:73:91:4F:EA:71:4E:FF:D1:F4:CB:02:B6:9A
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:91:8c:e4:dc:51:81:e8:ef:4e:0d:e7:b3:c7:7b:75:ce:
fd:bc:f1:3f:68:20:76:19:07:12:4c:66:4d:e9:25:3c:bc:69:
0c:ce:b3:e5:4b:ae:89:30:f2:17:60:d7:02:22:cc:e8:7d:d3:
38:56:d6:04:4d:b3:3b:3b:d7:95:df:85:de:93:ce:9b:35:9f:
8f:d0:31:28:5a:9b:0f:3e:ee:2f:e3:13:63:ab:f9:40:85:e4:
92:9f:8d:f7:41:e0:59:22:46:c9:92:a4:3c:4a:ad:38:78:ae:
3e:19:3a:1b:e3:b5:cb:81:dd:5b:67:43:4b:f8:b6:32:83:a4:
b9:5a:9a:23:69:36:14:22:08:8e:3d:c2:f2:8f:7e:79:88:ce:
dd:19:3b:79:f3:c4:16:e2:14:1f:c4:ca:39:38:79:51:7f:e3:
c4:92:81:ab:ab:8c:ee:9c:95:e8:6c:a1:f0:92:d2:b3:02:63:
6d:ae:fe:7e:c4:70:77:60:68:40:00:ba:d0:87:01:b4:24:de:
fd:d3:10:68:ea:c5:c1:9a:1a:d8:ae:eb:3e:9f:6f:64:0d:98:
77:f7:f3:d5:60:7e:b3:9a:a0:f2:a6:cb:dd:36:5b:61:77:13:
c1:02:9a:53:e9:fa:cb:c5:17:83:d7:71:0d:23:e9:95:2f:7a:
ba:05:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:54 2026 by rpki-client