Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: W15Ib4wVgzIAl7JQMf7vQ1nGC4RXkkCDeXpDWoVtY8o=
Subject key identifier: 45:6A:35:7D:6E:E9:14:03:17:D2:26:02:9E:50:5C:3A:2F:77:3D:44
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019D27E0016A1337A6BFE9473EC84A5A77DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 073A
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: Yz/nhi3cAAskmAmv3gV7Z88FORC2UXUvxnU/2+WziOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:01:6a:13:37:a6:bf:e9:47:3e:c8:4a:5a:77:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=456a357d6ee9140317d226029e505c3a2f773d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:4f:8c:44:36:4d:dd:b2:a6:8f:bd:ec:e0:
96:38:fb:dc:5f:db:d2:78:a9:15:a3:41:ad:9d:f7:
14:dc:0d:8d:74:2d:d2:8b:42:8e:a6:8a:11:8c:be:
6d:6a:b1:30:69:9d:94:7d:97:79:73:5f:19:e8:55:
e9:51:5d:0c:a9:ff:94:6b:7e:8f:d5:5b:0f:87:6c:
52:77:8b:c2:2c:b5:0d:85:57:86:c5:15:af:99:a2:
f8:23:c5:3e:31:9d:a9:6b:69:8b:81:93:75:83:62:
a2:d0:cc:ce:9c:20:0a:7b:3b:f9:70:bd:7c:35:d1:
23:b1:62:3d:49:74:85:25:a1:6a:68:c8:28:c6:9c:
51:ee:05:fd:dd:ea:1c:94:f6:46:b2:7b:c1:fe:f1:
26:f0:9a:5b:c6:ca:22:b4:c4:67:45:93:ae:a9:f9:
2e:92:d8:4e:b6:3a:15:3a:69:72:44:cf:f5:fe:8a:
f3:cc:2d:5c:95:c8:d9:24:52:81:e4:46:39:98:33:
f8:56:1e:e5:1c:36:77:0e:f6:ae:92:13:9a:43:d1:
ad:52:63:76:ca:92:28:16:2f:59:54:28:77:a2:bd:
a5:e1:26:c9:04:e8:6a:b3:77:c6:cc:62:a7:ad:77:
65:4a:6a:98:c0:96:c1:5c:13:6c:e5:27:ef:ff:a2:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:35:7D:6E:E9:14:03:17:D2:26:02:9E:50:5C:3A:2F:77:3D:44
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:87:db:6e:c4:66:24:76:ef:cd:30:62:c9:6a:a5:a3:08:f1:
1d:e8:3c:8a:30:d6:0b:a8:d2:bd:63:93:88:83:0f:7d:8e:ba:
f8:91:d2:33:57:66:0a:1e:65:98:59:d5:53:4c:1a:de:03:95:
86:b2:bd:c0:28:62:60:31:a1:83:c4:c9:8a:32:95:a6:80:15:
f1:1e:96:ac:2d:8f:30:93:63:83:80:65:a9:93:6f:e5:f0:0a:
97:37:a7:66:bd:8c:03:4a:67:5b:bb:de:6b:6a:36:d3:71:d7:
2a:eb:c0:9a:c2:7b:43:55:94:0a:f4:06:83:b7:d4:e2:81:b0:
9a:c4:38:fa:e4:27:47:db:d9:34:02:2a:c5:3d:d0:8b:74:26:
ea:d0:5a:e7:ce:e2:ba:23:74:96:c2:ff:12:c6:7b:2a:93:98:
c5:d2:8a:61:ea:ac:65:8b:6d:d3:c8:50:7c:5a:f9:4a:5f:6c:
6b:cd:d0:68:35:64:84:9a:58:17:50:28:00:8d:97:1a:a1:77:
61:3d:14:4c:c9:f6:89:5f:44:62:94:51:94:f4:87:36:0e:ed:
a6:7f:55:08:98:81:16:b3:4e:ab:9e:ac:0e:eb:5e:54:13:95:
8a:20:8b:20:8b:ed:23:bc:be:9e:f8:1a:78:c4:b9:a9:9a:f4:
7a:b1:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:05 2026 by rpki-client