Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: eeIJWjk7FN2oSMFlExgcuviWzHYhW8uhzblkcbmycw0=
Subject key identifier: 17:7E:CC:DC:5C:00:3B:44:D7:1D:AF:C8:1C:0E:A9:98:31:8C:59:AA
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019D3A8B0B7643BEC90A65D68B5B8049BA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 17:01:23 +0000
Manifest this update: Sun 29 Mar 2026 17:01:23 +0000
Manifest next update: Mon 30 Mar 2026 17:01:23 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: hzMCb0RtTT9YE7FYeXpd8RfH/61Q7S/1I0rXCO4pflQ=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:0b:76:43:be:c9:0a:65:d6:8b:5b:80:49:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Mar 29 17:01:23 2026 GMT
Not After : Mar 30 17:01:23 2026 GMT
Subject: CN=177eccdc5c003b44d71dafc81c0ea998318c59aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:a6:a5:b8:fa:1c:33:7c:35:8e:fa:76:40:
5c:e4:26:03:14:0d:bd:7a:a1:3b:84:9e:8c:d1:70:
62:b3:1b:ae:df:fa:42:1c:90:7c:ef:8e:b2:08:13:
df:9e:6a:e0:74:49:0c:be:74:d9:36:52:dc:75:9e:
b9:c6:23:7c:71:50:c3:1a:f0:80:fc:b5:63:68:83:
1c:40:b8:02:5a:44:fb:a1:98:2f:10:46:3a:71:f5:
97:15:73:5a:1d:7c:c8:eb:92:fd:4e:b3:54:61:08:
2e:45:fd:9b:3e:7b:a9:54:10:f5:8a:b0:77:5a:33:
bd:ce:eb:a7:10:cf:57:aa:a5:42:28:9e:37:5b:bd:
c7:72:ab:fc:cf:90:c1:34:87:ae:b7:8c:64:95:b8:
bb:54:09:54:de:23:46:a1:9d:99:2a:e4:b0:0e:b7:
64:dc:d5:27:85:90:43:be:9e:29:d9:78:4b:5b:50:
e0:f7:42:47:86:0a:09:60:88:a3:07:67:3e:d3:00:
d9:f1:b2:d0:b4:8c:b1:1a:3a:40:91:31:47:f2:a7:
5b:09:68:8e:83:3d:9e:33:01:e9:d8:c9:2f:d0:33:
4d:ea:6e:e1:a4:24:d3:63:f2:9d:66:7d:92:d0:4a:
9a:b9:44:dc:7f:ac:af:25:9c:ba:b2:a3:a5:18:60:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:CC:DC:5C:00:3B:44:D7:1D:AF:C8:1C:0E:A9:98:31:8C:59:AA
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:30:50:88:75:5e:aa:34:23:27:a8:e6:91:5e:60:a9:26:
3b:2f:37:86:6a:58:0c:70:79:71:64:c3:74:5d:58:b5:b4:9a:
82:45:52:a5:99:c0:7c:16:ae:77:cd:44:66:8a:65:15:3f:cc:
1f:c8:44:6d:c0:89:fa:f7:0a:ba:22:e5:de:68:8c:6a:9d:cc:
a3:a2:7d:f0:13:32:a5:1b:c3:2b:ec:30:1d:48:19:88:5e:9d:
39:19:f6:87:2b:03:19:91:b9:7a:c7:ca:02:12:0f:a2:0b:a3:
38:d2:e0:5d:a7:f2:06:b0:41:2b:ea:9f:20:e0:af:73:61:12:
73:1d:58:0e:ab:ae:82:0f:b0:52:bd:54:05:1c:e7:ad:bc:81:
bf:69:7c:c2:fe:0f:ac:03:f8:16:23:55:dc:4d:84:58:bb:1b:
21:bb:d0:54:42:83:aa:4c:24:c5:96:79:04:33:67:a3:f1:ba:
42:a1:60:1b:c3:01:cd:ed:73:d4:1d:0b:47:36:23:7f:b1:32:
bf:62:bd:57:3a:07:1d:07:7c:52:4c:23:e5:2f:91:9f:e1:a8:
0b:46:24:14:b5:2b:0d:c9:8a:d0:bd:af:0f:a3:92:a8:23:e3:
4e:a0:47:d4:21:5c:af:45:64:25:88:19:96:14:9c:bb:cd:e4:
43:c1:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:28 2026 by rpki-client