Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: Jj43tA7Ae73c06+kEH1eSMGUZydw3hwnv/u+83rJsqc=
Subject key identifier: CC:39:F0:29:63:F3:6C:FF:21:F2:90:ED:8A:E2:EC:90:70:01:04:DF
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 01A0DB3BE84ECEA443AA9E13DD6046522458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1A00
Signing time: Sat 26 Sep 2026 01:02:11 +0000
Manifest this update: Sat 26 Sep 2026 01:02:11 +0000
Manifest next update: Sun 27 Sep 2026 01:02:11 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: 0pCpRMzhlMPXvTD71AvqGVgqv29a66yALrzcYrZelDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:e8:4e:ce:a4:43:aa:9e:13:dd:60:46:52:24:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Sep 26 01:02:11 2026 GMT
Not After : Sep 27 01:02:11 2026 GMT
Subject: CN=cc39f02963f36cff21f290ed8ae2ec90700104df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:ad:2a:0f:61:3f:07:af:b5:8a:6c:5e:ca:
c9:fd:bd:54:93:71:fb:bf:ff:e5:b6:56:cd:a0:3a:
5d:30:67:54:95:24:f9:da:b4:03:b7:3e:08:57:6c:
d4:d9:3b:93:75:d3:bf:3a:05:97:f1:5e:0b:48:c8:
4b:99:5d:1f:d0:d8:68:41:e3:e9:3f:9e:49:ab:a0:
cc:2f:ba:62:79:83:e4:08:33:1a:1c:45:b5:5b:36:
27:0a:b9:75:bf:d3:71:1b:22:20:6a:fb:28:de:02:
23:b1:83:04:12:9b:08:04:90:81:47:8b:08:eb:87:
86:0a:95:9f:74:95:be:f2:45:64:05:a4:dc:31:01:
d4:dc:9a:7e:de:97:fd:c9:d6:9e:5c:37:f7:65:c7:
9e:08:af:3a:25:97:97:be:7c:1c:c9:9d:bf:3c:03:
10:b5:c0:95:28:8c:27:4d:41:a3:b8:45:e6:ee:0a:
11:3c:87:9e:d6:0f:57:08:b2:3f:f1:10:de:f2:f8:
78:08:37:4b:6a:63:15:1e:02:8c:0b:7b:5a:a6:8f:
cd:2c:64:3c:e0:76:48:4a:48:5d:34:19:ee:36:2f:
61:97:33:15:e7:7f:d9:19:da:0b:c7:d8:0a:91:3f:
a4:a6:ef:93:72:5a:fb:e8:82:f1:56:8b:c9:d0:c8:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:F0:29:63:F3:6C:FF:21:F2:90:ED:8A:E2:EC:90:70:01:04:DF
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ad:36:ca:a5:dc:3a:ed:18:c7:9a:b7:01:e3:68:23:9f:d7:
3f:27:d9:d5:01:a1:92:b2:69:43:c2:3e:be:11:e9:4f:43:48:
4d:e4:7b:d5:10:7a:0a:58:ed:ba:d8:c7:31:9c:78:cf:34:f1:
4f:7f:20:82:94:96:6c:72:e1:b4:94:11:fc:13:63:01:3a:4a:
65:fa:70:01:ae:9a:16:ab:da:7f:ad:91:d4:f9:bc:f3:e8:4c:
4b:a0:56:cf:da:19:61:e0:33:cb:4e:52:86:b5:53:22:93:c6:
b5:ee:ba:65:73:e8:eb:cf:58:1e:5f:d3:0c:a6:25:67:64:10:
f2:eb:77:12:ed:ad:40:51:96:c4:a8:74:f8:a5:37:66:59:78:
97:68:19:63:67:a4:f3:db:6e:da:d6:be:5d:0c:ff:15:c9:4f:
cb:5d:2e:1c:2b:7c:e2:19:4c:11:f0:00:51:8c:3d:52:c0:ab:
21:4b:cb:4d:c3:8f:c5:09:f8:ad:ef:bc:5f:97:4a:6f:18:db:
65:1c:57:d1:57:10:ec:a7:0d:ca:c0:93:6a:d0:3a:1b:b3:f0:
31:ba:0d:25:df:6e:a7:0e:6b:6e:c7:e7:20:67:aa:d2:8c:fa:
07:a2:d1:63:a2:e1:de:01:31:d3:67:3a:56:d8:13:8d:72:b4:
c1:84:bf:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbO+hOzqRDqp4T3WBGUiRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzRlMWQ3ZDdmOTU5MDZjM2E4M2U5MzBkOTc0ODcxY2M3
NDRjYmUwHhcNMjYwOTI2MDEwMjExWhcNMjYwOTI3MDEwMjExWjAzMTEwLwYDVQQD
EyhjYzM5ZjAyOTYzZjM2Y2ZmMjFmMjkwZWQ4YWUyZWM5MDcwMDEwNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXatKg9hPwevtYpsXsrJ/b1Uk3H7
v//ltlbNoDpdMGdUlST52rQDtz4IV2zU2TuTddO/OgWX8V4LSMhLmV0f0NhoQePp
P55Jq6DML7pieYPkCDMaHEW1WzYnCrl1v9NxGyIgavso3gIjsYMEEpsIBJCBR4sI
64eGCpWfdJW+8kVkBaTcMQHU3Jp+3pf9ydaeXDf3ZceeCK86JZeXvnwcyZ2/PAMQ
tcCVKIwnTUGjuEXm7goRPIee1g9XCLI/8RDe8vh4CDdLamMVHgKMC3tapo/NLGQ8
4HZISkhdNBnuNi9hlzMV53/ZGdoLx9gKkT+kpu+Tclr76ILxVovJ0Mgk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw58Clj82z/IfKQ7Yri7JBwAQTfMB8GA1UdIwQY
MBaAFBE04dfX+VkGw6g+kw2XSHHMdEy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzVhMTEtZmQxYi00OTMwLTk4ZDMt
OWI1Zjg2Y2YzNTNmLzEvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzVhMTEtZmQxYi00OTMwLTk4ZDMtOWI1Zjg2Y2YzNTNm
LzEvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq02yqXc
Ou0Yx5q3AeNoI5/XPyfZ1QGhkrJpQ8I+vhHpT0NITeR71RB6CljtutjHMZx4zzTx
T38ggpSWbHLhtJQR/BNjATpKZfpwAa6aFqvaf62R1Pm88+hMS6BWz9oZYeAzy05S
hrVTIpPGte66ZXPo689YHl/TDKYlZ2QQ8ut3Eu2tQFGWxKh0+KU3Zll4l2gZY2ek
89tu2ta+XQz/FclPy10uHCt84hlMEfAAUYw9UsCrIUvLTcOPxQn4re+8X5dKbxjb
ZRxX0VcQ7KcNysCTatA6G7PwMboNJd9upw5rbsfnIGeq0oz6B6LRY6Lh3gEx02c6
VtgTjXK0wYS/NQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:05:23 2026 by rpki-client