Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: X1qLog8n4aHzEtyUFLDpYbwW+1MPoJaIbX31dqgwGoQ=
Subject key identifier: 82:F9:57:53:C2:2A:97:60:84:1A:95:B9:76:20:28:84:A6:35:31:83
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 019FA82B4A0F35E5E882E0B63C13351D5EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1961
Signing time: Tue 28 Jul 2026 10:00:36 +0000
Manifest this update: Tue 28 Jul 2026 10:00:36 +0000
Manifest next update: Wed 29 Jul 2026 10:00:36 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: NzFXVJ3fXpXqI3PzQjUaByGLiKAjNOw5YTBUCqh8DVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:4a:0f:35:e5:e8:82:e0:b6:3c:13:35:1d:5e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Jul 28 10:00:36 2026 GMT
Not After : Jul 29 10:00:36 2026 GMT
Subject: CN=82f95753c22a9760841a95b976202884a6353183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:a1:b3:eb:ad:bd:2a:66:13:4a:e4:3c:bb:
51:82:76:0a:8a:72:b7:e1:65:5e:4a:42:24:bf:04:
0e:82:c5:69:fa:87:f5:75:4c:f2:bb:b1:f7:4a:d5:
d5:ee:1f:df:2e:14:df:8b:3b:c4:42:ca:d3:20:69:
59:ca:1c:44:ce:d0:26:34:93:48:42:26:ec:7a:0b:
e5:04:b0:b7:89:79:92:61:12:94:ef:91:53:7f:50:
16:da:c4:a7:31:61:29:d4:08:b5:c3:df:ab:4b:2f:
aa:ca:c7:c5:19:cc:c2:19:25:01:97:cd:70:60:7c:
98:05:b4:1c:b9:ef:56:fd:e9:db:bd:f0:12:f4:1a:
2d:f1:b8:7b:68:65:ed:e7:b5:91:29:3b:8a:24:b0:
6d:96:98:0d:ac:96:02:bb:da:a3:8e:ef:87:fd:71:
0a:fc:b0:92:ae:a3:24:34:36:da:69:75:7c:88:ff:
5c:a5:01:b2:0f:ec:83:65:73:d9:66:ec:d8:66:fb:
af:52:8b:75:7e:02:3a:5f:64:02:94:25:c7:8a:9e:
af:b3:69:9d:c5:0f:f6:df:77:7b:09:cd:a3:a3:0e:
3a:f4:36:49:96:be:d4:2e:1a:21:48:f0:d6:fb:d2:
cd:8f:64:95:16:1e:25:14:15:e6:f4:70:c5:87:19:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:57:53:C2:2A:97:60:84:1A:95:B9:76:20:28:84:A6:35:31:83
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b0:a3:aa:f6:14:83:bb:26:8d:e6:dc:e3:f2:b7:53:c3:37:
f4:f8:30:e6:8f:5c:ea:ec:65:7d:f1:85:48:d6:bc:61:60:28:
1a:d6:51:24:12:cc:e5:7f:15:b1:8c:97:00:b4:d6:4e:89:ed:
bc:d0:f9:b3:6c:ac:b9:30:c2:5c:f0:cc:54:2f:26:b7:00:eb:
26:02:e5:f1:0a:c5:c9:d9:d5:73:7c:27:a9:ac:ed:0f:a7:5c:
20:34:3f:63:4f:bf:58:0f:f2:ca:6b:79:cc:eb:1b:1c:3b:12:
5c:83:f9:26:e5:40:9f:e7:c0:24:bc:33:8a:b4:01:af:3d:64:
f3:ae:21:c9:5e:e6:84:ea:30:75:07:de:ef:7e:53:4b:68:36:
9b:16:d0:23:f4:4a:7b:76:b6:00:46:56:b2:2a:a6:18:ae:9c:
8f:18:00:5f:64:d3:d3:21:d7:a7:33:c7:be:9f:24:7c:1d:bf:
3e:bd:2d:20:fa:bd:dc:1e:dc:ba:4e:72:77:25:5c:df:f2:04:
51:06:4e:ea:6f:d4:e4:e1:7e:c7:c0:a2:d5:c6:44:7c:4b:0d:
df:61:11:9b:5c:cb:14:7f:da:6e:62:0e:81:2a:fc:39:11:04:
a6:fc:99:15:bf:a9:55:be:68:d1:07:ed:aa:e4:49:5f:8f:c4:
3a:cc:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:35 2026 by rpki-client