Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: /WGF0YBD2Zk+mNFxLqpzdPVnCV/M3THLmIZYcWZpE4s=
Subject key identifier: F4:8A:C4:B1:2C:5F:2E:13:52:6D:FD:9B:72:E8:3D:43:EB:4E:1C:C8
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019D29298982631B2C72A22BBE39972DABB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: V+osnNn3/+9HshekihzRkygep7uwstkQIHMFxqLU+94=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:89:82:63:1b:2c:72:a2:2b:be:39:97:2d:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=f48ac4b12c5f2e13526dfd9b72e83d43eb4e1cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:e0:05:a0:10:86:f1:9a:4e:8e:e4:65:e8:
62:d7:c5:7a:7d:f0:3c:1f:ac:27:96:e7:21:23:5b:
ce:18:5e:a2:30:e4:b9:9f:ab:05:ba:bc:0f:ed:9a:
5c:7c:96:0b:b5:f4:8d:d3:ba:69:d1:8d:b4:02:40:
61:dd:f8:aa:00:d2:b0:fb:0b:bd:56:09:42:df:13:
7e:a6:15:73:82:eb:10:81:46:32:7a:e3:49:00:d6:
05:1a:fc:5e:a9:86:d0:69:94:d9:f4:db:7e:6c:0c:
53:30:39:3b:76:4e:3d:b2:a2:76:22:f4:f5:83:6a:
a9:e3:23:65:63:4b:62:68:e1:2a:52:ba:27:b5:d6:
a4:56:a7:16:99:96:65:fe:70:27:a8:f4:b9:a5:b7:
fa:b9:1a:72:0a:70:1f:b0:dd:11:0e:dd:be:a6:85:
80:da:a4:a6:81:3f:6a:e4:06:ed:1e:f5:6f:d0:e9:
16:a0:27:de:89:18:f5:b5:4d:1b:4f:7d:25:10:7f:
1e:33:d8:4d:9a:bc:30:51:63:83:34:89:87:d7:69:
26:eb:b8:a0:31:c3:93:48:3a:15:48:ee:d4:1c:2a:
2d:09:cb:14:34:fe:2a:a8:fd:13:da:b5:ca:b3:4a:
61:24:6c:a5:7f:2f:9f:b9:0c:f1:b2:e2:7a:c9:3e:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:C4:B1:2C:5F:2E:13:52:6D:FD:9B:72:E8:3D:43:EB:4E:1C:C8
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:bc:e4:dc:d6:82:e5:e4:4a:d1:c1:d8:32:22:c6:5d:f8:
cd:33:b7:eb:c6:b7:cf:28:4b:36:49:d0:9b:aa:27:35:d4:ce:
d4:d5:73:ec:59:1c:05:c7:89:2c:99:45:13:43:6a:ff:85:71:
a7:fb:5f:d4:4f:3f:20:f0:2e:cf:cf:4b:56:e3:c0:9a:26:87:
ec:e8:cf:ef:f8:fd:25:19:e8:31:c4:5f:19:67:32:7b:c5:4a:
33:eb:18:e1:c2:04:f9:08:f2:52:b8:d1:19:ad:4c:6a:25:b4:
fe:6c:48:62:b3:02:52:10:e9:04:0a:04:7b:54:44:3a:f6:97:
75:ac:f1:e5:23:ea:6b:0e:26:07:a5:e9:8d:61:18:06:94:42:
df:2e:7f:3d:5b:fe:92:54:91:40:d9:af:b3:2d:b1:9b:9c:49:
30:cc:d6:09:8a:ed:8d:59:11:93:a3:03:af:a4:c5:d3:79:7f:
a7:03:16:8e:6d:bd:32:eb:9f:ee:53:ba:08:91:d2:ef:bd:07:
69:f0:56:b7:0f:e4:fd:f5:f8:fc:c8:43:84:00:74:8b:3d:c4:
de:38:bc:94:8f:c9:92:50:a8:62:d0:7d:90:4a:1d:53:82:e6:
e6:d0:e1:0f:54:60:be:2b:e4:1d:36:79:7c:9f:0a:09:c2:94:
13:e4:09:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKYmCYxsscqIrvjmXLau4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi
YzI0NWYwHhcNMjYwMzI2MDgwMTIxWhcNMjYwMzI3MDgwMTIxWjAzMTEwLwYDVQQD
EyhmNDhhYzRiMTJjNWYyZTEzNTI2ZGZkOWI3MmU4M2Q0M2ViNGUxY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sfgBaAQhvGaTo7kZehi18V6ffA8
H6wnluchI1vOGF6iMOS5n6sFurwP7ZpcfJYLtfSN07pp0Y20AkBh3fiqANKw+wu9
VglC3xN+phVzgusQgUYyeuNJANYFGvxeqYbQaZTZ9Nt+bAxTMDk7dk49sqJ2IvT1
g2qp4yNlY0tiaOEqUrontdakVqcWmZZl/nAnqPS5pbf6uRpyCnAfsN0RDt2+poWA
2qSmgT9q5AbtHvVv0OkWoCfeiRj1tU0bT30lEH8eM9hNmrwwUWODNImH12km67ig
McOTSDoVSO7UHCotCcsUNP4qqP0T2rXKs0phJGylfy+fuQzxsuJ6yT5L+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSKxLEsXy4TUm39m3LoPUPrThzIMB8GA1UdIwQY
MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct
NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw
LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAe85NzW
guXkStHB2DIixl34zTO368a3zyhLNknQm6onNdTO1NVz7FkcBceJLJlFE0Nq/4Vx
p/tf1E8/IPAuz89LVuPAmiaH7OjP7/j9JRnoMcRfGWcye8VKM+sY4cIE+QjyUrjR
Ga1MaiW0/mxIYrMCUhDpBAoEe1REOvaXdazx5SPqaw4mB6XpjWEYBpRC3y5/PVv+
klSRQNmvsy2xm5xJMMzWCYrtjVkRk6MDr6TF03l/pwMWjm29Muuf7lO6CJHS770H
afBWtw/k/fX4/MhDhAB0iz3E3ji8lI/JklCoYtB9kEodU4Lm5tDhD1RgvivkHTZ5
fJ8KCcKUE+QJeA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:35 2026 by rpki-client