Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: DwjhEhb2QHqQucjl5pMohiDUtMCZVXqmi62PBThcy/E=
Subject key identifier: AE:2A:FC:7C:93:36:32:4B:53:07:C6:28:7C:5F:83:65:10:16:02:59
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 019D2A72B7BB412B308F32CF6D2B08A7FDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 1806
Signing time: Thu 26 Mar 2026 14:00:54 +0000
Manifest this update: Thu 26 Mar 2026 14:00:54 +0000
Manifest next update: Fri 27 Mar 2026 14:00:54 +0000
Files and hashes: 1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: Juos3lH8Bwca9nFsJ/d+h/hTuZhM6Hp01oQH2M4wpXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b7:bb:41:2b:30:8f:32:cf:6d:2b:08:a7:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Mar 26 14:00:54 2026 GMT
Not After : Mar 27 14:00:54 2026 GMT
Subject: CN=ae2afc7c9336324b5307c6287c5f836510160259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:e7:c8:4b:55:e4:69:9e:6f:c2:72:ca:d0:
c6:49:72:a5:67:ec:fc:dd:ae:83:d8:02:07:82:42:
68:85:3c:8a:83:64:15:0a:bb:cc:0e:1c:e3:d3:f8:
06:60:06:11:77:df:74:2d:30:b3:69:ff:0e:94:e2:
15:de:eb:70:10:65:cf:49:e0:c4:97:22:e8:cb:6b:
96:7a:cd:8c:83:97:95:74:56:1b:04:a6:5b:6f:ca:
d7:3a:64:fe:4f:45:0a:55:7a:52:25:be:2f:71:a7:
bd:6e:da:d8:07:01:4d:5a:22:f7:50:b4:15:bf:11:
88:71:8c:2b:58:8a:5a:73:bc:ff:32:24:47:1f:da:
ca:4f:25:7c:95:25:03:64:68:62:4f:89:ef:1f:4d:
2f:2e:c3:de:ec:52:1b:57:31:8c:72:4f:84:a0:ca:
d0:f5:b2:75:a6:1f:ce:e7:28:93:2e:22:75:51:da:
25:66:49:05:a5:27:93:b1:5c:92:7a:14:b0:4c:2d:
22:f4:23:93:72:69:3a:e4:be:d6:5a:89:ac:8a:39:
5f:52:2a:e9:f7:29:16:cd:c5:9a:5c:98:8a:f2:c3:
4d:26:fd:55:66:da:e5:2f:91:fa:da:e5:50:e1:9c:
d0:cc:5c:5a:d9:34:5f:2b:5f:51:24:8d:43:ae:9e:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:FC:7C:93:36:32:4B:53:07:C6:28:7C:5F:83:65:10:16:02:59
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:fd:10:91:ba:8c:33:8b:b3:66:e7:07:75:db:63:1f:54:
4f:0f:d1:73:b5:fd:bf:45:8e:58:e3:2f:2e:68:99:2e:db:30:
a4:8d:b4:74:98:98:64:1e:63:6c:6d:5b:17:81:6a:11:01:a1:
ac:28:34:4e:64:4a:af:65:86:49:6d:e8:36:72:87:ab:50:0a:
83:da:89:28:07:76:2d:d8:89:b4:c6:73:4f:99:41:fb:8b:49:
a2:44:c3:5d:62:08:c7:63:91:fe:90:99:d6:5c:b0:0a:c5:0d:
b4:a3:2e:78:47:a6:b3:23:99:97:1c:df:29:b0:b7:ec:93:1a:
74:02:c8:96:36:a7:db:fd:39:5c:da:8c:5b:f0:ec:0f:8e:dc:
d2:ce:a3:56:a7:ec:70:a7:e8:30:5e:c5:b5:24:6a:12:4f:4e:
0e:28:8b:33:05:17:7d:f8:b4:fd:f7:99:5b:23:df:b1:4e:28:
98:15:71:1d:0e:47:80:3b:1f:9d:4a:b7:8d:ea:cc:e4:7e:95:
88:55:7e:f6:d8:e7:74:b8:82:1e:9a:29:4d:83:8b:4f:15:d1:
9f:3b:6b:e9:0c:24:b5:bf:0e:18:a4:1f:1f:a2:26:ad:f7:02:
96:a6:1a:ed:90:74:6e:59:89:0b:33:e0:15:11:93:46:bf:92:
d2:8c:8f:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcre7QSswjzLPbSsIp/3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MzRmN2VlNWQwNGEwMjYyMjNjM2FhMzE5MTJiZjYxMGQw
MGRiN2IwHhcNMjYwMzI2MTQwMDU0WhcNMjYwMzI3MTQwMDU0WjAzMTEwLwYDVQQD
EyhhZTJhZmM3YzkzMzYzMjRiNTMwN2M2Mjg3YzVmODM2NTEwMTYwMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/rnyEtV5Gmeb8JyytDGSXKlZ+z8
3a6D2AIHgkJohTyKg2QVCrvMDhzj0/gGYAYRd990LTCzaf8OlOIV3utwEGXPSeDE
lyLoy2uWes2Mg5eVdFYbBKZbb8rXOmT+T0UKVXpSJb4vcae9btrYBwFNWiL3ULQV
vxGIcYwrWIpac7z/MiRHH9rKTyV8lSUDZGhiT4nvH00vLsPe7FIbVzGMck+EoMrQ
9bJ1ph/O5yiTLiJ1UdolZkkFpSeTsVySehSwTC0i9COTcmk65L7WWomsijlfUirp
9ykWzcWaXJiK8sNNJv1VZtrlL5H62uVQ4ZzQzFxa2TRfK19RJI1Drp5h4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4q/HyTNjJLUwfGKHxfg2UQFgJZMB8GA1UdIwQY
MBaAFHk09+5dBKAmIjw6oxkSv2ENANt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYt
ZjFkMzQ5ODIzNTA0LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYtZjFkMzQ5ODIzNTA0
LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWH9EJG6
jDOLs2bnB3XbYx9UTw/Rc7X9v0WOWOMvLmiZLtswpI20dJiYZB5jbG1bF4FqEQGh
rCg0TmRKr2WGSW3oNnKHq1AKg9qJKAd2LdiJtMZzT5lB+4tJokTDXWIIx2OR/pCZ
1lywCsUNtKMueEemsyOZlxzfKbC37JMadALIljan2/05XNqMW/DsD47c0s6jVqfs
cKfoMF7FtSRqEk9ODiiLMwUXffi0/feZWyPfsU4omBVxHQ5HgDsfnUq3jerM5H6V
iFV+9tjndLiCHpopTYOLTxXRnztr6Qwktb8OGKQfH6ImrfcClqYa7ZB0blmJCzPg
FRGTRr+S0oyPzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:08:00 2026 by rpki-client