
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: 22kAglkBzrrQNCgyg+X2rAikkNMyndDSBBbq/CMBo0I=
Subject key identifier: 7F:DC:A9:F4:AA:C2:1D:71:8C:FF:F4:56:E5:13:EA:6D:81:BB:B1:63
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 019D37522375663F8C671CEA52BE1E862DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: nZWhAwISZ3UA1myTnxj7Ukr/u5OQTjZMQI1mH1QGozE=)
2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:23:75:66:3f:8c:67:1c:ea:52:be:1e:86:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=7fdca9f4aac21d718cfff456e513ea6d81bbb163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:84:3a:eb:83:d0:ad:76:ec:73:99:ed:9a:
9c:26:73:8c:0a:50:e6:c9:0a:0c:d5:a0:0f:11:c0:
0e:75:85:e6:2c:27:6d:ab:b4:ad:cd:7c:01:55:49:
b8:1b:30:30:f1:85:0b:75:67:c5:7b:aa:41:28:76:
0d:02:3d:47:31:06:0b:a5:6c:51:8c:c0:fc:11:2b:
d4:2d:44:08:3d:8c:78:fc:d8:34:68:30:2c:6a:83:
23:b4:8c:5e:42:b3:f3:0d:45:41:2b:c7:c7:87:9d:
c3:c4:37:24:4f:b1:59:5d:3f:fc:08:c3:79:34:f6:
2d:5a:64:44:ab:70:51:90:d1:18:97:c7:7d:b7:6d:
87:49:a9:d4:f6:f6:a4:31:9a:5a:10:60:29:5d:9b:
cb:34:c7:64:13:2e:a7:5e:8a:de:9e:ba:b1:0b:07:
8a:bd:72:b0:10:56:23:58:d7:2f:ba:4a:55:94:98:
6a:9d:d7:ef:83:da:94:b9:8e:a5:7d:dd:30:f8:43:
13:78:f9:2a:d1:31:d2:45:2b:33:4a:f4:85:90:4d:
a5:43:af:4c:b6:b9:1b:e1:7b:1f:1a:d0:8a:7e:d6:
43:1c:2d:07:2d:80:1e:e0:40:27:58:b8:ad:50:94:
53:cb:7e:44:1d:22:68:33:35:fc:3a:8d:93:19:91:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:A9:F4:AA:C2:1D:71:8C:FF:F4:56:E5:13:EA:6D:81:BB:B1:63
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:d9:b2:76:56:ae:ac:5b:5e:be:5d:7e:05:60:57:50:93:
72:c9:c3:fd:2e:8d:f1:9b:02:80:74:3c:82:d5:67:2e:84:d4:
c9:ce:c2:18:4b:93:30:ff:c6:4b:03:df:76:34:82:43:fa:a2:
e9:ac:c3:49:be:26:d7:95:23:59:fb:34:3f:2c:15:6c:e4:1f:
c8:4c:7c:18:60:90:f5:7a:7b:5b:3f:d0:8c:c8:cf:30:43:c0:
30:7d:7d:bf:c0:d2:38:04:e1:81:cf:db:17:3c:ad:e2:d4:5f:
02:81:e7:ed:20:59:24:7a:ba:86:e3:87:df:15:e3:4b:09:7e:
d3:7a:e8:82:78:cd:a5:2f:ce:64:5f:f7:89:ff:e7:68:45:0d:
24:4b:90:a8:32:0f:89:5c:7d:20:38:27:a2:29:83:72:45:bb:
97:ef:93:d9:7a:a6:cb:f2:e8:16:8a:ad:d2:d0:87:5f:5c:14:
a7:df:be:21:69:5c:0c:94:1c:ea:2c:83:f0:30:85:88:00:45:
41:94:f7:e4:56:02:64:89:05:29:b7:6e:61:ba:d0:12:6e:2c:
2e:c0:90:84:dc:b9:cd:ce:6e:06:6b:66:bb:31:b0:59:dd:ff:
dc:f9:24:2a:a7:2b:27:61:83:69:61:44:6c:e8:8b:c4:72:13:
88:32:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client