Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: VBtZ8U7VUmZIPv/3bcE34euO4YeZBQVWRSPnjDuV5RU=
Subject key identifier: B6:AB:B6:0D:82:0C:DC:2E:16:8A:98:F8:8A:4F:AD:EF:6A:27:1E:53
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 019D2AE06E6ED73C93F44FD88A6968796637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 16:00:44 +0000
Manifest this update: Thu 26 Mar 2026 16:00:44 +0000
Manifest next update: Fri 27 Mar 2026 16:00:44 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: LGWmv7nTUhgTp+fB2YOXB5tSRgAKIAZyhradCR5g+dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:6e:6e:d7:3c:93:f4:4f:d8:8a:69:68:79:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Mar 26 16:00:44 2026 GMT
Not After : Mar 27 16:00:44 2026 GMT
Subject: CN=b6abb60d820cdc2e168a98f88a4fadef6a271e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:ec:96:20:8a:b1:cf:6e:42:8c:68:de:a1:
e6:92:2c:2f:2c:16:bb:82:56:d8:b5:05:d3:ce:32:
8f:16:e8:d0:51:f3:00:95:89:6a:d3:d5:d8:36:3a:
22:92:f2:c2:e8:6b:fc:7c:86:3b:c5:9b:c7:ed:31:
c8:5d:62:f8:57:74:9c:c6:2d:ce:95:00:74:a1:22:
7e:10:d0:cf:cf:84:83:4c:4e:da:11:2e:cd:86:d4:
0f:73:bd:9a:28:e2:67:32:d7:d4:28:28:6e:32:2c:
03:ad:cb:59:4e:aa:48:9d:7f:3c:62:b3:60:45:7b:
2f:4c:b3:1e:92:b2:64:90:b6:97:4e:ec:9b:e0:97:
b6:cf:84:8d:79:8f:ab:3f:53:57:be:4b:b3:eb:a9:
ac:61:a7:c9:4c:bb:5f:49:92:b5:25:37:85:18:6f:
02:6e:22:ad:12:b9:28:63:b2:7c:a7:5d:e3:b4:b2:
4e:c7:12:75:f0:a4:e6:04:91:01:65:64:b9:b6:8e:
81:f6:c0:34:aa:20:a8:5b:2e:df:70:db:96:23:8a:
fa:43:5b:bf:f5:df:64:dc:b6:3b:9a:bd:8f:50:85:
00:9b:c7:1e:6e:4f:a1:6c:50:d0:70:23:c7:0f:ec:
cc:f0:c4:00:79:9d:2b:4a:da:eb:dc:7e:74:12:76:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:B6:0D:82:0C:DC:2E:16:8A:98:F8:8A:4F:AD:EF:6A:27:1E:53
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:a4:2b:27:21:90:12:90:25:53:e8:23:9b:59:2b:07:b7:
5a:ab:44:30:4f:19:8a:c1:35:f6:26:9a:b4:3b:af:8a:a6:d0:
20:9b:52:7f:92:24:48:57:a2:fc:9a:8b:ef:76:05:45:c9:35:
1b:46:ff:6a:6d:9f:ca:f6:9b:ff:6c:0d:12:fa:37:04:fd:02:
4d:50:f0:be:5f:37:c8:c4:cb:9d:6a:9e:0d:ef:73:ee:ff:2e:
18:d3:61:92:77:78:76:1f:af:f5:65:51:0f:08:56:d0:40:d9:
b4:d3:fb:9d:64:a4:f2:94:cf:79:f4:ec:0f:96:54:2f:e9:f8:
81:c1:f6:62:59:02:4f:0b:b2:a6:95:11:5f:27:f4:83:21:a2:
c5:b8:57:e1:3e:24:a7:06:6d:a8:87:c7:a3:ee:66:e7:47:d4:
12:9b:b7:e0:cc:2a:99:e6:e3:95:de:1d:5d:98:bb:1d:59:43:
35:16:06:98:ac:29:6e:4d:de:48:91:b6:e1:83:4b:b1:41:bd:
0a:5b:12:13:a1:ab:fe:15:ac:7e:75:a1:6c:36:3b:cf:cb:fd:
de:bc:dd:11:d2:6c:52:de:13:02:61:d9:d9:13:e7:20:94:f8:
0d:5d:24:41:df:34:0f:dc:7e:89:81:18:a3:7c:31:ea:ac:0d:
cf:f5:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:32 2026 by rpki-client