Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: /gXuKRx4207RcfGKvXHwuHRQjTlfLeIizW9u5tybBmk=
Subject key identifier: 27:A3:33:35:F6:C9:41:05:CF:30:A2:C0:5B:70:AF:5A:CF:B3:5D:3C
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 01A0E174831E3BEC6D82B259E3D8BC320A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: 028D
Signing time: Sun 27 Sep 2026 06:01:44 +0000
Manifest this update: Sun 27 Sep 2026 06:01:44 +0000
Manifest next update: Mon 28 Sep 2026 06:01:44 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: UNNo5X8oFvPgG3XDrHO+sjLSwGeLqGAVcHBzjE3QpFc=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:83:1e:3b:ec:6d:82:b2:59:e3:d8:bc:32:0a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Sep 27 06:01:44 2026 GMT
Not After : Sep 28 06:01:44 2026 GMT
Subject: CN=27a33335f6c94105cf30a2c05b70af5acfb35d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:07:ce:12:71:8f:e8:f5:52:43:05:bc:92:
80:6a:db:d8:a8:95:eb:9c:18:06:20:d4:3e:26:80:
ba:56:7f:f3:2e:79:30:7c:13:e8:66:45:6f:5f:e1:
b6:4f:df:f9:ea:d4:90:34:fa:d8:c9:4f:e2:dd:ec:
30:cc:04:a0:70:79:2d:13:03:61:f5:5e:da:f3:b1:
ae:37:d0:3c:a1:8d:ab:e9:3d:61:1c:df:f9:de:f6:
da:90:6e:fc:5f:c6:92:ef:98:d5:7b:76:89:3b:94:
38:78:66:a0:af:1f:55:27:d5:18:34:b4:ce:10:00:
ec:5b:52:c1:36:46:67:94:a2:4f:93:0b:eb:97:60:
ce:e0:e4:3b:d7:a4:7c:2c:b5:ac:63:a4:3c:f2:22:
53:a2:1a:af:95:0b:b0:0f:3a:b0:7d:9c:9f:9b:84:
cc:f6:58:0e:58:27:3f:91:53:06:2d:88:8d:8d:84:
9a:58:26:ee:aa:5a:5d:bb:ee:b0:fd:5a:92:cb:36:
bc:6e:97:f5:aa:24:ae:0d:92:ab:e8:eb:d8:16:ef:
d3:a3:9f:d1:f7:50:c5:96:8f:8e:fb:a0:8c:64:3e:
3f:27:68:30:8d:fc:c4:46:3e:89:82:1e:28:b8:e9:
0c:88:3a:1c:25:fe:f2:10:88:7a:bf:61:27:e5:50:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:33:35:F6:C9:41:05:CF:30:A2:C0:5B:70:AF:5A:CF:B3:5D:3C
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8f:23:5d:8f:e4:a9:21:e7:d5:93:f5:98:9a:86:d0:dd:83:
e6:94:7b:03:c1:f3:c5:b8:1c:74:6b:95:4f:76:b8:21:e0:c4:
cc:2c:02:25:ba:b6:13:00:be:78:9a:11:71:9a:aa:58:e9:d9:
84:af:d6:47:d4:6d:53:e9:6a:88:4e:76:61:c5:e7:e5:06:e7:
b6:99:eb:d8:4b:6b:47:32:d6:81:a5:1a:de:92:ad:27:8e:c0:
f2:f5:c7:b9:69:70:21:c5:58:9f:44:5e:01:6d:6a:d7:ea:10:
ea:93:bc:22:c5:52:d8:55:d0:17:bc:ca:49:b6:79:f2:92:81:
aa:7d:0c:f8:1d:f3:9a:09:7f:b0:dd:36:0e:be:2e:fa:53:01:
96:10:9e:72:9c:91:09:83:42:da:53:8e:5c:a5:bf:f7:b6:7f:
ce:8c:4d:cc:73:aa:e1:48:af:79:b1:96:8e:18:a6:97:c6:70:
17:32:b5:13:b2:7e:f3:b6:e2:2c:a5:9a:68:23:09:88:1f:44:
63:b6:5f:a3:7a:b2:6b:9c:fa:76:e8:f1:e2:39:96:9e:b9:00:
d0:ff:1a:ed:04:99:4f:4a:f9:c4:cf:22:07:bc:32:14:74:1e:
ba:08:a6:9a:72:50:a5:e4:81:40:b7:e6:76:2d:54:02:ab:dc:
22:6b:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:06:54 2026 by rpki-client