Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
File: ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft (raw, json)
Hash identifier: um3ON15HktNV3NtxLqXAr52KaGw+pl0lZu4VKd7hlQM=
Subject key identifier: 3B:CE:94:02:CF:C5:04:BA:77:09:E1:78:DD:7A:92:8F:74:05:01:00
Authority key identifier: 11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
Certificate issuer: /CN=113c673a25f75c8de0c860f469183a709a171e24
Certificate serial: 019FA4BC1FE15CE66756A502BFEF0E6727CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:00:20 +0000
Manifest this update: Mon 27 Jul 2026 18:00:20 +0000
Manifest next update: Tue 28 Jul 2026 18:00:20 +0000
Files and hashes: 1: ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl (hash: dbwo+f/P03bzvy6SfuzpepQDMsOV++CFiBTtI0JgdpY=)
2: FKTTJ2_pJQ0c4167Z_9foASOfe8.roa (hash: 5QwyJIVruZ9DDqn9rtCcqANTOb2u+3Qm0t0OytggvZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:1f:e1:5c:e6:67:56:a5:02:bf:ef:0e:67:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113c673a25f75c8de0c860f469183a709a171e24
Validity
Not Before: Jul 27 18:00:20 2026 GMT
Not After : Jul 28 18:00:20 2026 GMT
Subject: CN=3bce9402cfc504ba7709e178dd7a928f74050100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:dd:fd:47:a1:ad:3c:88:0f:94:f1:d1:4e:
2a:bb:21:f0:34:51:aa:5d:f4:e9:6e:be:b9:7b:69:
74:5d:b5:ab:66:e6:2d:4f:6a:fc:3a:52:3d:23:ce:
22:1c:1d:08:9c:46:0d:78:8b:75:45:0d:66:b1:a1:
71:7d:03:ae:86:75:f2:43:4d:c8:f0:0f:ed:ee:a5:
07:f6:f1:07:ad:a1:ff:dc:7a:e4:5f:08:3b:35:d2:
5d:91:ef:22:ab:d3:a9:9e:db:82:2d:40:90:0f:8a:
ab:5a:b1:51:23:1c:c5:64:9e:21:bb:09:b9:a6:7b:
4e:96:d6:33:a7:c3:ce:e3:ab:12:72:ea:f4:a9:f2:
8f:c6:c4:68:d6:fa:d6:7b:61:a3:dd:89:18:c6:ea:
d2:8d:15:8a:8b:82:58:1c:cb:4d:13:e0:41:c9:19:
f5:f6:0b:8f:b7:b0:a4:f1:c5:52:e3:fe:f0:c0:e2:
22:01:a4:3e:ea:9c:a3:78:9a:fc:10:4f:cc:dc:06:
70:48:d0:2d:c5:05:cb:ef:d4:ce:04:4b:02:e8:87:
1c:7f:9b:03:7e:53:fa:4c:75:ea:ee:2e:4a:7e:64:
98:ed:00:10:d0:f3:1c:05:41:1f:b3:c7:d0:cb:b0:
66:6b:58:7f:5f:bd:ec:60:fb:89:97:55:96:79:aa:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:94:02:CF:C5:04:BA:77:09:E1:78:DD:7A:92:8F:74:05:01:00
X509v3 Authority Key Identifier:
keyid:11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:69:31:51:bf:e8:b8:07:bc:eb:c9:1a:e2:d9:dc:34:3c:9e:
de:cc:82:b8:6d:78:99:d1:71:4f:83:9c:68:35:02:02:70:2b:
f4:37:9f:fb:ad:27:85:cb:a8:34:39:e9:80:21:36:59:29:e7:
64:54:34:28:20:fb:06:fb:fc:53:3f:9d:09:0c:34:7c:53:39:
77:96:53:6e:fc:ed:2f:15:35:0f:f5:b6:f2:1e:3f:d5:bc:a6:
51:e0:f7:53:80:9e:7f:fa:05:78:46:32:99:17:50:88:ad:b4:
da:b7:c3:40:d8:7e:8b:9a:10:09:29:b4:83:49:f3:a6:f6:66:
af:8f:a4:71:e5:2a:89:92:9b:27:37:5a:8b:50:4e:c6:47:b5:
97:4a:66:cf:88:61:48:e9:b3:e1:c5:78:22:f5:60:c4:73:8e:
5a:53:ae:3d:b3:f9:ce:16:f7:44:2c:41:89:39:27:19:93:0c:
12:79:58:a4:93:1c:8e:a0:f8:ed:c3:e3:85:d1:d0:d0:e1:24:
6a:b8:a6:bf:52:19:a3:2d:95:90:69:f9:dd:4a:48:f2:35:fb:
5c:9e:17:21:2b:7f:25:9f:fa:9d:12:d8:3f:dd:a9:9a:26:17:
63:5c:d9:47:f6:38:3f:8a:8e:5b:33:4a:b7:91:18:5c:3b:06:
b4:c3:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:12:38 2026 by rpki-client