Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: txzm821s5+IVFFZh251yItyLobE45DXaT54fpJ/XO3c=
Subject key identifier: 25:1B:D7:A8:1E:68:5A:7F:9C:69:87:1D:FF:F8:B7:34:3D:E7:54:20
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019F13AEB01A4B8D23211442B5F051976CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 14:00:43 +0000
Manifest this update: Mon 29 Jun 2026 14:00:43 +0000
Manifest next update: Tue 30 Jun 2026 14:00:43 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: ypQ/4Bu9r3kkBH4jdZY1HTLyxrXeJ8272L7gp8udrAg=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:ae:b0:1a:4b:8d:23:21:14:42:b5:f0:51:97:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Jun 29 14:00:43 2026 GMT
Not After : Jun 30 14:00:43 2026 GMT
Subject: CN=251bd7a81e685a7f9c69871dfff8b7343de75420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:f5:2a:27:a6:ab:f5:b5:ba:30:df:39:ac:
5f:ce:d3:2b:6e:14:f1:fb:27:88:c8:cf:99:12:9d:
3c:e9:7b:2c:16:46:ea:dd:23:9e:76:93:3d:aa:cd:
82:8d:b8:c2:93:5d:ab:ed:62:f5:79:70:c4:3b:cb:
2d:27:02:4d:59:a6:d0:6d:ac:14:1c:b6:cb:01:6c:
52:a5:f0:3b:6b:f4:82:29:e5:63:f9:d1:64:9e:26:
06:70:30:e1:73:6a:0c:d4:40:25:ec:1f:73:46:6d:
0c:42:50:d0:4d:2c:09:1f:eb:34:47:e4:7d:4d:80:
0b:f8:b0:9e:ab:c5:b9:12:31:06:ef:45:13:42:d4:
5b:7c:c1:17:28:c6:f5:e7:73:e6:3b:04:3a:57:c5:
30:a0:0e:db:bb:b8:19:ec:df:93:82:f0:57:01:5a:
1f:a1:ba:51:ab:7b:ad:dd:ec:75:29:23:a5:0f:99:
27:e6:f6:88:a9:82:fa:22:e7:c3:e8:bf:f7:ac:34:
26:97:20:f5:f0:df:af:27:87:3d:87:b8:d5:41:1d:
93:45:7f:de:46:b3:64:c5:ba:a9:81:d2:7e:49:da:
ac:c8:1b:df:7e:1d:c3:b9:96:c3:8a:df:21:25:c1:
12:55:5a:96:94:cb:92:3f:ab:dd:45:51:ae:dd:50:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:D7:A8:1E:68:5A:7F:9C:69:87:1D:FF:F8:B7:34:3D:E7:54:20
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7f:89:f8:db:fa:1e:06:c3:85:d5:1f:4b:93:59:75:b0:5a:
59:a1:12:d0:4f:dc:6b:b4:cd:38:1d:61:6b:68:76:52:83:67:
80:f9:8b:46:bb:73:70:72:dd:ae:d7:e7:d4:77:50:e1:42:ff:
e2:98:3f:05:3d:a5:bb:2b:a1:f7:ff:3b:1c:63:72:d9:54:83:
d2:f9:f5:b3:86:c5:02:af:7f:86:56:8e:05:29:6d:0c:79:dc:
22:46:65:aa:dc:80:e6:17:dc:6a:8f:0a:a1:29:1c:e2:ba:35:
a8:45:c3:b5:d1:9c:d5:d3:46:de:67:aa:3f:23:1c:3d:6d:7b:
a4:7c:fe:49:96:d0:69:26:7b:3e:62:51:6f:27:e6:ab:4e:ff:
ce:06:44:0f:e9:47:94:7c:42:c8:4e:9f:38:8c:02:e5:62:e8:
8e:d9:cb:41:56:a5:90:f4:71:53:cc:25:58:6d:65:49:25:77:
c7:b8:4b:6a:d2:7a:ce:ba:57:b3:a9:5f:88:20:c5:75:fd:12:
ce:3b:21:1e:3f:34:5b:d0:02:8c:70:ab:da:66:8e:c4:9c:da:
e1:51:41:a1:03:2c:73:49:87:77:3d:e8:f5:b3:b3:f1:05:71:
75:86:25:c6:04:a2:ce:b8:a8:88:50:8d:0d:12:c2:07:05:e9:
ef:78:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:35:26 2026 by rpki-client