Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: Y+VbWKXxjrtSYqcrkqZKE0/iaVqVKyfi/3javmvY+TE=
Subject key identifier: 5E:80:3D:7F:85:AF:3A:66:0F:AA:F6:80:F2:8A:C7:9C:F3:B1:CE:E9
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 019F1831255684E2DE64FC2EC33D1E2C55A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 11:01:41 +0000
Manifest this update: Tue 30 Jun 2026 11:01:41 +0000
Manifest next update: Wed 01 Jul 2026 11:01:41 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: zU8N9q6yuWtx/5TsxpVyvStt0UKlqowm0L1uvFlcbMc=)
2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:25:56:84:e2:de:64:fc:2e:c3:3d:1e:2c:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Jun 30 11:01:41 2026 GMT
Not After : Jul 1 11:01:41 2026 GMT
Subject: CN=5e803d7f85af3a660faaf680f28ac79cf3b1cee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:fe:df:57:30:ce:6e:17:17:8a:11:ea:6a:
0e:65:97:50:01:50:0f:8b:89:d5:af:0a:7d:96:c3:
3f:9d:e7:e7:fb:c3:bd:57:8c:32:20:2b:f0:04:e8:
8e:98:82:aa:57:7a:44:79:a1:81:78:d9:f0:83:94:
bb:dc:03:28:75:a9:2b:ac:08:f8:7d:a1:55:a3:c9:
b9:75:26:10:27:a0:70:53:45:df:d5:2c:63:ac:3f:
b8:0b:8d:6f:0c:4d:e2:0b:8a:fc:f3:7a:c0:f7:2e:
e2:9a:e8:54:fe:81:1f:4f:c5:38:41:76:01:d0:ee:
35:eb:aa:d7:b0:f3:dc:9b:c2:88:84:a2:45:57:84:
4e:ca:cf:c5:57:bd:b3:73:71:64:63:29:77:29:c2:
1b:89:77:b1:5a:76:e8:34:72:24:32:56:3b:c2:d0:
2f:72:cb:75:af:fd:1b:f5:d2:80:a8:b0:b4:8d:9e:
24:3b:42:d9:c3:49:7d:1d:7e:9d:ab:82:1c:78:da:
b2:18:24:69:43:1a:3b:d5:18:2a:e0:8c:35:8a:ae:
cf:cf:04:52:89:06:ea:77:b4:18:55:b5:41:bf:03:
7d:f1:c4:6e:d1:e4:79:3d:d0:80:32:59:b0:d4:13:
2e:a8:58:eb:cf:2e:ce:b6:1c:13:68:e7:3d:23:66:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:3D:7F:85:AF:3A:66:0F:AA:F6:80:F2:8A:C7:9C:F3:B1:CE:E9
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f2:de:55:8b:87:44:76:e2:52:2e:8c:24:71:e3:b9:15:66:
28:36:6c:bf:9b:25:45:13:83:76:90:c7:f0:25:c2:7a:0a:11:
1f:fc:ee:51:14:fe:e6:e9:f3:51:25:94:56:0b:32:ea:e5:97:
93:01:f7:47:76:4a:42:2c:25:cb:c3:35:2a:2b:e4:d0:1d:5a:
20:32:74:df:a2:bb:58:be:9a:ee:bb:66:25:26:df:d9:8c:72:
50:76:ad:89:70:e6:63:db:9d:06:a2:f2:85:d0:4c:34:47:90:
54:56:2b:e7:4f:6f:c2:82:ca:21:e5:99:f2:e5:4b:b0:93:c7:
f0:7a:da:80:a2:7c:b4:27:a1:ad:2e:c2:d1:ef:cc:4f:f6:a2:
39:b9:d1:40:e7:4a:ac:6a:22:22:ee:48:ce:f8:c2:ae:44:6c:
8a:fe:dc:ab:5a:2f:d0:63:c2:3e:40:a9:9d:85:bc:c8:56:1d:
8b:d5:d4:bd:a3:fd:44:9f:9a:00:f8:9a:16:ae:18:f1:8d:f6:
f8:80:64:65:74:2e:b6:e0:95:1d:c3:1d:00:8c:96:9f:57:06:
7c:73:b9:8d:c4:0b:c9:10:08:1e:17:36:a3:1c:77:ef:1a:f8:
a7:43:67:26:71:53:03:c2:5a:1a:67:16:cf:09:6b:51:ad:08:
fd:dd:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:52 2026 by rpki-client