Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: WDJtO1IF6/btC/YTWB+RPT5hSfaTzBsPIj+Ed8nHwXg=
Subject key identifier: C7:25:3E:C3:6B:71:3A:6E:90:D5:0C:14:CE:95:28:7A:FA:46:8C:7B
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 01A1419582A358BBBE6D4DEF5A79797013DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1A35
Signing time: Thu 15 Oct 2026 22:01:19 +0000
Manifest this update: Thu 15 Oct 2026 22:01:19 +0000
Manifest next update: Fri 16 Oct 2026 22:01:19 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: r3arVPUs38rZq40qeln2Pk9HtsKUQNey96MriUNf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:82:a3:58:bb:be:6d:4d:ef:5a:79:79:70:13:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Oct 15 22:01:19 2026 GMT
Not After : Oct 16 22:01:19 2026 GMT
Subject: CN=c7253ec36b713a6e90d50c14ce95287afa468c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:28:e8:53:92:87:24:70:c7:02:56:45:87:
10:29:45:25:2f:a6:24:46:6f:e3:0f:7c:1f:8d:bc:
c5:68:b4:93:66:5f:ca:67:c5:84:35:af:5f:4f:5d:
71:38:0e:c2:00:7a:9d:7e:87:e2:5c:51:de:8b:21:
12:bd:a5:e0:4b:11:ee:2b:ed:77:cc:74:df:b4:d7:
cb:e1:eb:96:25:ca:7d:dc:cb:9f:e4:3f:77:af:04:
58:25:6a:62:3c:3b:30:0e:00:5a:d4:48:d1:ed:dc:
da:ce:64:85:80:96:d9:f5:16:b9:e5:64:a9:fd:9e:
23:f2:94:82:a3:97:7c:20:df:df:20:0f:b8:f5:fe:
15:9f:d1:71:62:39:40:17:78:cc:cb:71:12:40:04:
94:f8:0f:2c:e1:0f:85:5f:76:04:58:23:b2:c3:e8:
07:23:18:65:03:be:6b:c2:87:0d:02:b0:b0:ca:d9:
7d:93:1d:27:ac:1b:17:81:85:8e:09:08:a4:63:bc:
bc:f7:62:fd:6b:95:02:57:94:22:49:7e:ae:e3:ec:
0a:a1:c3:88:24:ef:de:75:1b:04:2e:0b:11:14:a0:
10:47:f2:f9:eb:0c:12:d5:26:2e:d9:83:7d:d1:e7:
71:51:ed:3f:55:d6:81:56:c8:5d:b5:e6:f6:95:4d:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:3E:C3:6B:71:3A:6E:90:D5:0C:14:CE:95:28:7A:FA:46:8C:7B
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:50:79:31:65:d9:92:fb:35:ab:89:62:de:1e:62:74:84:d0:
28:a7:7d:ae:b5:f8:32:3f:25:da:90:59:66:38:4f:2f:51:f6:
cc:96:b8:7e:cf:64:1c:e0:63:97:d6:66:04:14:b5:6e:72:cd:
66:ae:e0:46:8e:b0:27:86:59:38:ff:be:fe:72:44:1d:89:c0:
97:fd:19:90:37:7e:66:da:93:d4:b8:48:ea:92:de:e4:8f:e8:
e6:36:ba:ee:7f:3d:5a:cb:a2:f6:21:f4:2d:18:ea:91:26:1d:
b8:94:e0:5d:52:86:93:61:1a:38:f5:f9:55:49:84:59:f9:9d:
b4:12:d8:53:cc:28:e5:1d:69:26:f6:ee:cf:2b:23:43:5f:9a:
6c:15:8b:b0:73:3c:1d:e7:71:ab:2e:b1:96:da:b2:62:a0:63:
88:2e:4c:94:57:ff:22:ea:aa:78:61:b3:fd:6c:90:78:8c:4b:
15:31:1c:c0:c3:da:6f:31:76:6d:15:5a:37:b4:69:22:28:ba:
ae:c9:41:be:09:fc:40:0d:ab:26:ca:2a:5e:91:9f:cc:b1:ea:
af:99:ae:50:db:ca:9e:1e:7a:14:9c:15:e3:e2:3c:08:01:97:
d4:d1:31:0d:a4:03:a6:5c:63:47:b4:ae:29:a5:bd:da:7d:b1:
05:dd:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:55:40 2026 by rpki-client