Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: 3rUgHGqD+egTASM1KnA3mbO/OxNv2zMvmTgOoRuHpJw=
Subject key identifier: E5:4D:31:69:94:9E:50:92:7A:3C:65:55:03:EA:55:AC:1E:D7:C8:62
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 019F95B722E7126C3427687807FB650EE70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 20:00:34 +0000
Manifest this update: Fri 24 Jul 2026 20:00:34 +0000
Manifest next update: Sat 25 Jul 2026 20:00:34 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: LjlmEYqIYtgBZDJ7gyRI1gIa34WcgbUQR8VqceDQLfw=)
2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:22:e7:12:6c:34:27:68:78:07:fb:65:0e:e7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Jul 24 20:00:34 2026 GMT
Not After : Jul 25 20:00:34 2026 GMT
Subject: CN=e54d3169949e50927a3c655503ea55ac1ed7c862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:cd:5b:b9:a7:45:64:b7:d9:58:f7:5b:a6:
0e:27:6e:9c:78:69:28:a9:37:2b:ea:a3:f1:6c:96:
15:82:73:9b:6a:74:d1:40:0a:e7:e1:4e:f3:02:52:
d1:d5:e5:70:27:ff:aa:8a:16:2b:a3:6d:19:3a:10:
45:86:aa:6f:11:39:5a:4c:b7:9f:b3:5a:c0:93:86:
be:f6:d9:e9:e9:f9:22:29:d5:60:c3:fc:ab:c3:d2:
fe:01:7b:ce:7f:33:20:d3:8d:47:e1:3d:4a:36:f9:
d1:13:7e:f5:83:40:6c:d7:fe:72:e4:34:8d:fe:43:
be:54:4c:fe:1b:f0:ab:c0:9f:67:53:82:d2:8c:eb:
5c:37:82:45:83:c1:66:08:35:77:fa:c5:6d:cf:f1:
57:6e:fe:9b:e3:5c:e5:16:c8:6c:c7:96:ef:8b:1e:
af:be:07:b9:00:23:63:70:08:be:47:5b:fb:75:06:
64:74:12:60:97:6d:8e:7c:32:31:80:38:fc:b9:6d:
e6:24:3b:9a:73:24:a4:66:03:71:ae:34:a8:02:25:
18:89:77:51:cb:bc:ee:42:46:30:45:c5:b2:0f:98:
dc:a8:08:c3:71:cb:54:eb:e5:f5:5b:42:90:c7:98:
75:9b:50:49:9b:f7:b9:09:a9:fc:fa:c8:20:0d:90:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:31:69:94:9E:50:92:7A:3C:65:55:03:EA:55:AC:1E:D7:C8:62
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:01:6a:99:ec:73:0b:74:2b:ca:db:77:0c:6a:45:1d:61:c5:
4e:fc:84:95:af:3a:69:f0:1f:93:93:2e:7a:f8:6d:1d:2c:c3:
46:60:85:6d:be:b8:1e:1a:b9:82:99:71:aa:53:03:08:c5:18:
c0:ae:7d:96:85:91:a9:36:9b:8e:b4:cc:e9:ab:65:e1:16:5c:
e4:b2:53:39:bd:d8:f4:94:99:ad:b6:b4:b5:6b:a6:e3:13:03:
10:dd:1d:a3:91:27:92:d9:73:83:ee:00:b1:e8:38:a1:b8:35:
d7:f6:4d:cb:1f:48:df:b5:5b:a7:c0:ac:f7:d1:0f:90:7d:c7:
de:ee:4d:89:a1:0d:fb:d6:9f:7a:37:f2:40:59:1a:9d:c4:dd:
a9:5f:2a:12:54:97:05:4a:26:50:f1:70:ef:ca:c0:97:9c:09:
19:bb:86:a1:22:ff:52:40:a0:73:b1:e4:a3:67:49:e0:11:56:
1a:2b:f2:ff:93:de:70:c1:3e:9e:6b:14:3d:d4:44:ae:dc:44:
71:a8:d8:0b:9b:46:5f:29:87:f7:b6:24:4f:53:fe:a5:ac:9f:
a8:c5:81:72:92:3e:b3:04:18:1d:2d:5b:50:f2:4c:57:2a:19:
9f:b0:ab:39:50:64:37:38:d4:ef:5e:5e:b2:8a:81:42:03:25:
a6:a3:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:12 2026 by rpki-client