Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: nyoG+a4eiVEruXNvQI3Hv/e+PMdztuNmwi31nk0ITzc=
Subject key identifier: 96:7D:F7:D0:B4:30:0F:04:CE:B6:4C:B6:99:B0:D4:C2:1C:AD:A1:9C
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 01A13E94F1CA3003B32374A2AC2BAD593260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 08:01:50 +0000
Manifest this update: Thu 15 Oct 2026 08:01:50 +0000
Manifest next update: Fri 16 Oct 2026 08:01:50 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: zEMXB435Tq7BcI6Jqod8SsMRAmXGbqACEPnOO+PyaaM=)
2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:f1:ca:30:03:b3:23:74:a2:ac:2b:ad:59:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Oct 15 08:01:50 2026 GMT
Not After : Oct 16 08:01:50 2026 GMT
Subject: CN=967df7d0b4300f04ceb64cb699b0d4c21cada19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:28:70:10:26:61:05:3d:6a:f4:a4:d0:e7:
8e:52:c8:dd:09:65:42:2b:f3:05:0e:e6:c1:c9:45:
f8:ae:42:d6:d4:ca:24:d2:d8:25:14:7b:aa:d8:a6:
ef:6a:c9:5f:91:3a:56:82:48:4f:f1:9e:b3:57:df:
d6:59:e3:d1:cd:44:44:a5:b1:64:5c:bc:25:ed:a1:
12:f3:8d:76:15:69:df:23:47:b7:ad:2a:09:f7:b8:
d7:16:29:5a:83:34:d0:c5:a9:61:d9:8f:03:71:fa:
6e:ea:f7:6f:90:9c:4f:b7:11:9a:1d:db:43:79:83:
c0:cd:d0:fc:9a:50:c8:86:52:2f:ec:a5:c2:d3:84:
cb:38:f0:93:3e:a2:77:f0:34:fe:8e:cb:4d:e2:6e:
a7:55:e4:3f:d5:d9:2e:5b:92:70:36:fe:b5:12:82:
2e:49:d9:46:a1:c0:7c:aa:dc:1f:2c:32:74:3d:bc:
36:68:d8:67:e8:16:b6:4f:c9:91:48:72:02:d1:ba:
03:50:e2:45:69:06:26:82:56:cd:ab:4b:01:f2:e4:
8a:62:51:e4:0a:22:2f:99:8b:60:2e:31:80:97:e3:
36:79:25:82:db:47:07:6a:f7:69:52:ee:6d:9f:00:
2b:9a:63:e4:e4:aa:0d:e7:a7:ee:bf:45:e4:e0:ce:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:F7:D0:B4:30:0F:04:CE:B6:4C:B6:99:B0:D4:C2:1C:AD:A1:9C
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dd:0c:0e:59:3b:03:36:8a:18:5d:bc:14:73:4e:fe:6f:a0:
82:73:a5:46:7d:72:84:13:5a:95:e4:24:ba:30:f9:3c:3a:43:
6e:42:fb:bb:f0:dc:3e:64:d4:73:fa:c1:e2:a5:8e:cc:9d:f0:
c4:12:e9:0c:d3:20:57:3f:f6:82:69:2f:d3:6d:cc:4d:34:ce:
f7:0b:42:5d:20:5c:75:bf:38:e4:68:a9:ca:e0:d1:70:ae:81:
45:d7:21:55:1a:b4:2c:39:6d:45:e0:ef:1a:4a:b9:98:cd:57:
22:c2:da:07:ae:28:1e:73:53:aa:c8:be:cf:a9:fe:ad:48:2e:
76:6c:52:b8:99:03:ec:14:39:ea:b5:7c:9e:d9:fb:8c:ff:51:
0f:da:0d:a1:92:fc:9c:21:59:e5:7b:d9:eb:c5:e3:67:4b:81:
11:1c:57:65:f6:b4:7a:9a:bb:86:74:da:2a:34:96:84:a0:d2:
3c:de:30:2d:d5:16:d6:c6:13:76:6b:f0:b7:68:dc:7c:eb:df:
04:e7:a2:15:57:e7:2c:d3:c3:7b:7c:2f:9c:45:d0:20:85:6f:
4b:5f:45:08:7b:ea:d5:ee:73:6b:be:e5:63:ae:19:15:fa:0d:
5a:9c:1c:64:39:3d:19:0c:0f:c8:b8:b2:69:36:b6:a1:81:dd:
db:83:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:03 2026 by rpki-client