Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: ZfHXICzYzgRMRY+asUiviRH4tuGwpwl2IgmP0EDhFkA=
Subject key identifier: D8:23:0B:3E:63:1A:44:80:07:99:ED:FE:50:97:13:FA:73:92:52:08
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 01A12C8DDBA7DDB1382FAED32A92B799E141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 20:00:56 +0000
Manifest this update: Sun 11 Oct 2026 20:00:56 +0000
Manifest next update: Mon 12 Oct 2026 20:00:56 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: +slE3MiLBlzW9kzVkwmr7Pp2V/1dCSWP/4ZdD0ngfV4=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:db:a7:dd:b1:38:2f:ae:d3:2a:92:b7:99:e1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Oct 11 20:00:56 2026 GMT
Not After : Oct 12 20:00:56 2026 GMT
Subject: CN=d8230b3e631a44800799edfe509713fa73925208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:9c:a7:44:04:39:7d:b5:6e:37:c6:15:a0:
50:4c:39:ee:81:13:76:18:cb:51:c6:6a:58:2e:f7:
c3:4c:96:fc:c8:5f:12:cd:7d:e5:49:8c:fd:7d:8d:
a9:b1:ff:0d:fa:cb:c7:7e:17:15:ee:4b:29:d9:91:
d6:57:3c:b4:ce:86:2c:9c:41:10:26:f7:6f:28:03:
aa:bb:67:db:22:e2:53:12:4b:6a:e5:21:9b:87:56:
45:87:7c:6d:e4:3d:ff:a8:15:69:99:ac:ba:38:7a:
cd:e2:8c:a8:4f:d2:62:e5:5e:52:e2:ce:09:44:e4:
e4:3e:28:2c:a5:a5:71:bd:e6:57:4f:ce:3f:95:17:
c8:ef:92:49:b6:db:c5:e8:7d:2a:60:38:3b:93:3f:
c0:4f:a4:6e:53:28:2e:b7:ce:54:b4:f9:de:85:ff:
b1:2d:f6:90:09:90:0b:ea:9b:8b:c2:1f:27:f7:fe:
5b:a7:5c:e4:35:50:5f:07:83:62:2b:ca:40:f0:1a:
43:d9:97:55:8f:2e:ae:07:2e:55:c8:6f:8d:09:70:
cd:20:e2:0e:50:6b:ea:2e:54:c2:34:da:bd:35:42:
9c:9a:4a:d1:2b:6d:32:04:69:58:a9:0a:0a:71:49:
9a:7b:24:eb:1c:b1:7d:c5:99:ea:35:93:38:51:d4:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:0B:3E:63:1A:44:80:07:99:ED:FE:50:97:13:FA:73:92:52:08
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1d:36:8c:bd:85:50:8b:9b:4a:0e:d4:fb:61:7e:50:6d:d0:
ec:06:ae:ff:90:dc:7d:f0:90:b2:da:06:b3:ae:0f:85:6d:f1:
6e:ea:6b:15:fc:f4:a6:96:c0:bd:a7:c1:8f:e3:c9:96:ee:08:
4b:52:53:fd:94:38:0e:fd:b4:86:93:df:d9:5b:dd:e0:ca:af:
48:e8:50:a7:92:60:05:7a:1c:e2:94:a6:c7:89:ec:77:09:99:
1e:72:41:8f:0d:36:a2:a7:96:c0:36:86:80:75:81:76:86:33:
e1:98:c1:69:ca:62:ae:02:7b:50:62:a4:62:97:a5:fd:de:b5:
b1:54:2f:93:bc:64:4c:12:e4:2e:a9:d7:4b:0a:ed:ca:17:a5:
77:30:fe:e1:37:70:e2:9c:31:db:07:5a:13:20:f3:ed:a3:30:
fd:7c:c5:63:55:4a:6b:86:3c:6b:9a:15:26:49:12:84:f8:d2:
cb:ba:d8:78:17:c8:11:1f:e6:1c:de:ce:08:a3:85:f4:f0:20:
5d:06:b9:c8:2b:64:ca:ee:4c:b3:92:8d:49:4a:e3:8e:27:03:
71:21:89:c3:2c:67:07:9e:ab:7a:75:a4:10:2b:01:6b:95:ba:
b5:ef:44:5d:0f:b0:6e:c0:c7:a9:98:12:60:f6:fc:29:36:97:
f0:e2:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:04:16 2026 by rpki-client