Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: ka4R0MsJRZlzo4yhknCgnxyto8GojRi/A0P4rLsOjoU=
Subject key identifier: 5C:D5:08:F7:E4:BC:B2:53:02:67:2E:F9:E8:E2:30:01:18:25:7B:66
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 019F927FF1172BCD25A64C77946258B65C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 05:01:26 +0000
Manifest this update: Fri 24 Jul 2026 05:01:26 +0000
Manifest next update: Sat 25 Jul 2026 05:01:26 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: wjvv5jFPT/0kKx3EfaBqI7X0VHgoPZhId3b1nbUQjWw=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:f1:17:2b:cd:25:a6:4c:77:94:62:58:b6:5c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Jul 24 05:01:26 2026 GMT
Not After : Jul 25 05:01:26 2026 GMT
Subject: CN=5cd508f7e4bcb25302672ef9e8e2300118257b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:00:bc:1c:41:48:1c:8e:9a:17:7f:7a:88:
9f:51:da:cc:fb:f4:0c:7a:7e:92:1d:e3:a5:b3:40:
19:91:e0:51:88:6d:8a:56:15:2b:3a:17:0a:e8:09:
d0:48:18:8f:fd:8a:80:5c:6a:bb:b0:ba:43:15:40:
ff:0a:a6:eb:de:5c:c7:cc:2d:ff:00:32:80:30:bc:
92:32:b0:a9:78:00:52:d7:a4:14:50:ef:7f:8e:51:
44:92:22:89:40:48:0e:3d:e5:df:90:45:ec:ba:c4:
fd:27:a3:90:6d:68:08:04:cd:ff:ba:5e:35:7d:35:
b9:c2:66:98:a1:46:62:da:04:7c:ca:80:02:ee:a3:
a0:04:04:3c:b9:c2:d5:ab:45:c5:15:3c:44:2f:96:
ac:fb:31:0f:05:3e:ce:f0:ef:b7:a9:d0:4c:97:5b:
c3:9e:56:3c:aa:46:ed:e1:e5:2c:5b:ae:fe:ee:af:
f5:01:2c:9e:f9:42:1b:41:6c:61:43:c0:39:b2:8b:
11:00:0f:b9:96:74:a6:9f:42:32:f3:d5:ae:41:dc:
2d:f1:ee:28:9f:4c:d4:82:04:75:88:36:08:df:b4:
2f:d1:1a:b3:7b:25:88:af:67:7c:d0:78:f6:f6:7f:
6a:8b:79:b6:ed:ad:2e:c6:a1:e6:79:0f:70:11:b9:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:08:F7:E4:BC:B2:53:02:67:2E:F9:E8:E2:30:01:18:25:7B:66
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b1:b9:fc:ff:14:7b:bc:07:f7:9c:1f:d0:25:05:fd:0f:c2:
02:ee:d3:5d:a0:fa:d3:dc:03:f8:e0:24:6d:c6:f8:02:7c:e2:
8f:ad:8b:42:42:75:6a:ca:37:84:dc:1c:20:7b:0f:fa:ff:9e:
fb:b4:40:0f:59:38:a4:92:3d:1d:f2:34:59:ee:72:ac:76:e7:
6c:19:43:8a:18:af:02:a2:ae:61:aa:ca:d7:0a:28:71:9a:ff:
fc:4c:ef:63:a2:4c:cf:d6:80:1f:d4:e5:85:94:e3:dd:bb:ec:
42:ca:d6:22:93:6a:22:55:3f:a9:db:fd:b9:ec:61:5c:c9:ac:
34:6a:1b:71:ce:c1:c7:29:8b:a3:ff:5b:ab:4f:92:e0:e6:cf:
00:a5:5d:53:b5:bd:0b:a5:61:da:cb:d9:5d:c9:02:0f:47:33:
bf:f6:1a:b5:21:9b:c9:af:d5:ff:ea:41:fa:82:c0:55:82:f8:
43:8c:c7:32:bf:53:d0:3b:45:27:ea:79:c8:36:e1:63:4e:0c:
5b:6d:59:5b:69:01:2a:ac:a8:ed:de:fd:29:2a:34:ac:0d:8a:
af:34:21:88:8b:27:b2:35:81:60:dd:d4:56:43:95:35:cd:0b:
65:67:9f:f0:9c:64:00:3b:43:37:7d:6c:63:4b:4f:ef:a7:d5:
af:c3:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:45 2026 by rpki-client