Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: MpvLtr0OYJagZ8layFGFOxLdMTPN3CZIE5f3+jCzW8Y=
Subject key identifier: 22:5A:1B:CD:B1:38:C0:3B:9E:20:F5:A1:91:76:3E:CE:17:EB:62:7F
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 019F1152C0B2F194F935379F9B393B1F4666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 03:01:03 +0000
Manifest this update: Mon 29 Jun 2026 03:01:03 +0000
Manifest next update: Tue 30 Jun 2026 03:01:03 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: Z7+lLZ/sJlpdfyznZAXoPSJHU/i2YdmSB3cmWbJ0auw=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:c0:b2:f1:94:f9:35:37:9f:9b:39:3b:1f:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Jun 29 03:01:03 2026 GMT
Not After : Jun 30 03:01:03 2026 GMT
Subject: CN=225a1bcdb138c03b9e20f5a191763ece17eb627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:4d:61:3d:28:cf:e2:85:22:53:eb:d1:28:
b9:f8:ff:2a:30:9a:1f:43:ba:89:d2:8f:c9:28:8b:
e5:0b:e1:f7:75:ef:05:5b:05:6c:b9:dc:74:d8:89:
c6:bd:82:64:88:e9:4e:66:fe:3e:e4:9a:dc:b9:50:
fa:fc:73:66:6b:7e:ec:e2:47:27:f6:0a:f8:5e:bc:
9b:b3:05:bb:8e:6c:1a:54:94:4d:97:ef:da:c3:6a:
8f:29:07:44:29:4c:7b:ba:52:29:49:e5:07:48:3a:
a1:ab:da:ba:51:70:ab:66:52:95:49:ab:b3:58:d0:
6a:4b:c1:1a:73:25:83:9d:25:92:f7:51:9a:ef:ff:
09:2f:46:90:e7:29:f6:8a:0c:30:fd:21:07:de:b5:
36:1e:85:e8:65:2b:09:bd:e5:10:39:ba:a1:1e:9a:
f5:3a:61:7f:e8:58:a0:09:bb:45:c8:34:7d:1c:14:
1a:2a:d0:75:80:3f:27:0b:a7:25:00:0e:cd:c0:ce:
98:6c:68:f7:3f:73:6a:86:23:be:65:a9:f1:b1:64:
53:ee:d8:98:cf:a9:aa:c1:78:37:86:19:06:34:98:
18:a4:eb:26:3f:bd:91:b9:94:6a:7c:d0:1a:da:0d:
0c:83:3b:db:96:90:d5:d0:63:7d:a5:1b:48:c2:ef:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:1B:CD:B1:38:C0:3B:9E:20:F5:A1:91:76:3E:CE:17:EB:62:7F
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:0a:48:24:4b:ee:cd:92:1e:bf:12:e6:48:3f:e7:29:da:
0d:30:94:8f:0f:73:c8:40:23:3e:b1:ef:3d:74:84:c7:0d:6f:
fc:01:e3:57:1c:4b:63:ac:c2:cb:dd:4b:e8:ec:7c:0d:48:4c:
23:5a:23:92:9c:4f:1d:ed:f4:86:3e:7e:92:73:1a:1f:93:22:
e7:b6:8b:23:b1:b9:6e:e7:3d:09:2c:5f:a4:d3:05:3e:47:93:
5e:79:e6:2c:ac:91:66:59:af:90:ff:69:53:4f:c7:44:53:40:
1e:14:43:9e:92:d5:3c:be:e9:2d:7f:62:20:56:f0:fc:e2:0a:
19:93:30:5f:90:71:88:92:2d:0a:4d:a8:a1:f1:d4:5c:ef:2f:
69:d4:ff:be:4f:64:a7:51:ef:21:bf:44:14:c7:f1:35:ed:7e:
2c:e1:33:85:3e:8c:ae:ae:db:eb:9a:10:c2:61:01:46:06:7b:
e7:d5:a0:bb:99:50:93:2e:15:dc:87:fa:b9:54:77:a3:db:5a:
20:1d:c4:ba:95:c8:41:20:0f:43:12:00:cc:50:59:f5:ee:d7:
a4:37:b4:f4:a0:db:00:a7:85:96:82:d1:1d:5b:90:75:41:0c:
13:47:c5:50:54:ea:41:15:53:7c:bd:1a:e9:51:d1:92:70:6d:
cd:ce:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:44:47 2026 by rpki-client