Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: Iek9Rrx8GuAIna7wTM+jHwevenACV5TIMrq8uTMwMfg=
Subject key identifier: FD:4E:E8:2A:24:B2:0C:63:A0:B7:BB:6E:66:03:12:E1:E4:FE:3F:2C
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 019D382DE20DC2C2AC4989F3CF89EF214472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: AxhIEOjdBw77+vMd6ctkQY+VXqUU+K55mFQ0RIrog+M=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:0d:c2:c2:ac:49:89:f3:cf:89:ef:21:44:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=fd4ee82a24b20c63a0b7bb6e660312e1e4fe3f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:ca:f1:1c:9d:3c:1e:bf:a9:f5:53:c6:d1:
8c:6b:0c:2b:fd:a6:29:14:80:71:90:6f:a4:08:c7:
e5:11:0e:08:80:c7:08:4c:42:4c:8c:c8:8d:28:99:
49:67:95:05:90:51:ac:dd:1b:cf:c7:ad:37:95:03:
96:15:f8:a2:31:a5:4d:e2:bf:5e:53:d0:dd:81:64:
a4:0e:2f:c0:9a:e5:e8:1c:0e:de:8b:57:2d:94:cb:
f2:24:58:9a:e3:d8:ce:17:77:c9:28:94:7e:c4:15:
f7:55:92:62:59:8a:e3:ac:9e:3d:16:36:b2:90:7e:
84:d9:34:b9:ab:0f:f1:4b:1a:0f:e5:e1:28:41:5f:
e9:91:38:95:33:d2:9e:15:86:1a:28:a4:7b:ce:3e:
c3:c1:79:bd:57:c5:fc:8c:45:bd:f8:10:6a:49:bf:
20:69:92:29:4a:96:ef:21:df:7d:37:0b:5d:45:65:
c7:41:fa:63:a3:3e:8e:ab:0d:82:5d:ab:9a:ee:9e:
d8:69:7a:ad:55:1f:b4:a2:1e:9f:97:4e:40:4e:22:
d9:42:a8:5f:41:2b:3c:67:72:0d:5c:a1:f2:e8:8e:
10:50:7e:85:77:dd:2f:49:0d:92:f3:b9:0b:08:8d:
ee:08:91:bc:a9:92:1e:9e:61:e0:da:e2:54:82:ed:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:E8:2A:24:B2:0C:63:A0:B7:BB:6E:66:03:12:E1:E4:FE:3F:2C
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:8f:73:5c:a9:bc:8d:42:0d:0b:1b:56:4f:88:cf:ee:1c:
d6:7a:77:4c:17:32:0a:9e:54:79:e8:4c:76:eb:55:8e:66:11:
e3:a3:3d:ba:a0:76:cb:7c:f1:e5:bf:14:ba:c3:44:87:9a:20:
ee:c4:0e:0b:2a:fb:ad:e2:01:4c:53:98:1b:65:cb:5b:24:75:
bd:bb:af:88:11:fb:21:7c:1f:b2:cf:a9:fb:06:f3:6f:9e:af:
48:ea:3a:67:e3:75:15:60:06:b2:f2:54:07:e1:ff:63:c3:8f:
fe:08:6c:34:73:ec:67:b6:79:78:55:1e:90:93:a6:4c:28:7a:
a8:25:f1:59:81:e4:d7:a6:fa:48:e6:45:72:0c:ee:cb:51:b6:
b4:4a:1c:2e:f5:62:3a:0d:62:c6:bf:e4:2a:ee:20:e6:5b:48:
a0:fa:51:5d:b2:12:26:2e:b5:e5:e7:ee:2b:87:93:00:94:8a:
fd:5a:4a:33:b0:f7:ad:fa:8f:6b:07:f0:39:54:3b:7b:55:99:
23:b8:34:6b:78:93:4a:0c:d4:26:e8:27:46:c0:a3:fd:6b:3b:
94:b5:37:cc:bb:85:53:df:4a:d8:04:a9:26:ad:64:e7:4b:87:
72:13:02:83:8d:5a:50:48:7a:3c:bf:4d:dd:9a:e5:ce:84:67:
24:5b:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:02 2026 by rpki-client