Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: trovdUd35PIMfuN5gQpLPKElg+nRcjY/K8JBlmWOqak=
Subject key identifier: DA:B3:7A:FB:1F:7D:12:59:5B:53:D4:2B:46:24:CC:D7:FE:12:B2:45
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 019D24DF106810014F275CF4622A4FD612BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 12:01:31 +0000
Manifest this update: Wed 25 Mar 2026 12:01:31 +0000
Manifest next update: Thu 26 Mar 2026 12:01:31 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: KrUTytFqPs+ow2X0wchOS5vZUVbawP3gE1y3SHb5c8c=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:10:68:10:01:4f:27:5c:f4:62:2a:4f:d6:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Mar 25 12:01:31 2026 GMT
Not After : Mar 26 12:01:31 2026 GMT
Subject: CN=dab37afb1f7d12595b53d42b4624ccd7fe12b245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:fc:04:80:75:68:61:2d:c3:19:13:db:d2:
6f:be:59:78:92:35:cd:b0:26:eb:4f:cb:e5:4c:6e:
cb:76:6f:ad:2b:45:62:e2:c2:f0:f1:ad:57:64:61:
29:e5:19:7e:55:86:88:b3:b2:a5:38:54:7a:72:89:
5d:7c:dd:45:1f:1b:40:57:8a:98:5f:69:15:d9:81:
bb:bf:6d:92:f4:98:4a:ab:50:6b:23:0a:2a:d5:f7:
59:61:90:a0:d2:9a:b8:dc:35:1b:98:2c:3d:07:b5:
85:e3:be:2a:2b:c3:f9:11:dc:c0:e0:49:be:a2:3d:
20:d8:13:80:ed:16:c4:f2:e3:d9:94:4b:b2:1b:f0:
ce:ab:51:87:b6:45:8a:12:54:c7:62:89:59:51:80:
2a:69:33:3a:5e:65:72:ec:1e:60:5b:7e:f7:ff:08:
86:59:8c:1c:85:ca:ca:58:c1:2f:44:be:47:73:60:
d4:87:70:b8:6a:65:e5:6a:21:fa:80:c9:9a:7a:31:
56:6f:0f:08:f0:ba:d2:65:ed:d7:78:9b:f0:50:57:
7c:f4:84:1c:78:65:bf:dd:13:1a:6d:54:7f:de:98:
49:aa:2c:e9:e3:2e:ba:7c:ba:e7:40:15:aa:f7:55:
ec:21:da:33:7b:0b:e4:98:41:56:77:be:65:97:e1:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:7A:FB:1F:7D:12:59:5B:53:D4:2B:46:24:CC:D7:FE:12:B2:45
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:56:d7:61:33:25:b6:51:63:cb:7f:b4:57:da:4e:2d:d1:
ed:a3:0d:67:48:97:c8:c9:15:43:87:62:b7:5a:18:62:65:79:
8d:b9:2f:e5:8f:b3:d5:98:0d:45:78:bd:51:d9:92:c2:9f:0c:
27:76:ee:50:7c:b3:0c:72:b5:a3:50:e6:07:5f:61:d0:98:6e:
3e:fe:d7:23:89:a7:b5:a4:5e:20:f3:20:c3:e9:55:26:f4:ba:
c1:18:0b:58:b3:3b:1c:7f:43:3b:90:4a:05:cf:fc:43:c7:48:
5a:54:d9:a0:e0:8c:2a:b6:b8:ec:38:62:f4:f5:ee:93:88:26:
7c:d3:f7:e3:46:18:79:16:13:1d:b9:4b:ce:f9:49:e6:5b:87:
93:08:ac:60:01:18:f2:6d:02:30:c6:65:96:7b:39:2b:8c:cc:
5b:fd:1b:d6:2a:29:c6:f8:55:1d:92:56:20:db:17:76:4c:6a:
f3:f3:77:2e:67:3c:c9:12:18:a1:42:a5:72:25:2e:f3:e2:56:
b9:e3:53:9d:0a:5e:e9:7b:cf:ea:b2:b8:29:4e:a2:92:3f:11:
1f:24:25:8f:09:2b:4b:07:bf:c5:17:97:43:18:e2:45:bc:27:
ea:d3:40:fa:89:10:c5:b7:e3:b1:c0:90:54:a5:45:65:c8:a5:
0c:f2:87:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0k3xBoEAFPJ1z0YipP1hK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1
NTE0MDIwHhcNMjYwMzI1MTIwMTMxWhcNMjYwMzI2MTIwMTMxWjAzMTEwLwYDVQQD
EyhkYWIzN2FmYjFmN2QxMjU5NWI1M2Q0MmI0NjI0Y2NkN2ZlMTJiMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnn8BIB1aGEtwxkT29Jvvll4kjXN
sCbrT8vlTG7Ldm+tK0Vi4sLw8a1XZGEp5Rl+VYaIs7KlOFR6coldfN1FHxtAV4qY
X2kV2YG7v22S9JhKq1BrIwoq1fdZYZCg0pq43DUbmCw9B7WF474qK8P5EdzA4Em+
oj0g2BOA7RbE8uPZlEuyG/DOq1GHtkWKElTHYolZUYAqaTM6XmVy7B5gW373/wiG
WYwchcrKWMEvRL5Hc2DUh3C4amXlaiH6gMmaejFWbw8I8LrSZe3XeJvwUFd89IQc
eGW/3RMabVR/3phJqizp4y66fLrnQBWq91XsIdozewvkmEFWd75ll+HfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqzevsffRJZW1PUK0YkzNf+ErJFMB8GA1UdIwQY
MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct
MWE1ZDhmNTA1MThmLzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTctMWE1ZDhmNTA1MThm
LzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkP1W12Ez
JbZRY8t/tFfaTi3R7aMNZ0iXyMkVQ4dit1oYYmV5jbkv5Y+z1ZgNRXi9UdmSwp8M
J3buUHyzDHK1o1DmB19h0JhuPv7XI4mntaReIPMgw+lVJvS6wRgLWLM7HH9DO5BK
Bc/8Q8dIWlTZoOCMKra47Dhi9PXuk4gmfNP340YYeRYTHblLzvlJ5luHkwisYAEY
8m0CMMZllns5K4zMW/0b1iopxvhVHZJWINsXdkxq8/N3Lmc8yRIYoUKlciUu8+JW
ueNTnQpe6XvP6rK4KU6ikj8RHyQljwkrSwe/xReXQxjiRbwn6tNA+okQxbfjscCQ
VKVFZcilDPKHHA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:42:09 2026 by rpki-client