Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: e6FuFsx7mnqYPXSZdKV1KzMRgREkwgxpq2GOjn0qaLc=
Subject key identifier: 44:0C:7B:66:32:11:DF:D4:97:39:94:3A:B8:B8:A3:69:B2:F6:C9:79
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 019D98F5213BF965B8987079743401E6EFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 01:01:34 +0000
Manifest this update: Fri 17 Apr 2026 01:01:34 +0000
Manifest next update: Sat 18 Apr 2026 01:01:34 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: gSyu9X7BPW6MQ2GopCPyoNmVJxfClwjYe8X/qVrytWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:21:3b:f9:65:b8:98:70:79:74:34:01:e6:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Apr 17 01:01:34 2026 GMT
Not After : Apr 18 01:01:34 2026 GMT
Subject: CN=440c7b663211dfd49739943ab8b8a369b2f6c979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:27:79:f0:ea:d6:ca:07:85:61:42:f8:1a:
5c:57:3c:d7:c1:29:32:22:27:0f:4c:17:81:b8:27:
7a:85:b6:8d:a2:f1:3c:3e:6c:85:b6:da:76:ed:58:
e3:08:97:d1:1b:df:49:ad:85:da:ec:7b:b1:b4:1a:
d7:3b:c4:09:e8:50:97:cb:8a:ff:85:59:09:25:74:
64:b2:97:19:96:29:31:97:9a:86:1d:b1:25:06:7d:
5d:ae:37:e3:e8:74:45:0a:02:5c:4b:fc:c2:60:c6:
e9:f8:33:41:ef:f3:a2:ce:88:72:1e:32:74:6a:7c:
24:81:b9:67:bd:5d:82:55:92:1c:e4:24:f6:83:14:
0d:d4:19:b0:52:d8:bf:cc:4a:1f:4f:0a:d9:b7:1d:
1c:4e:73:12:4f:73:c5:2e:e3:5e:10:9d:72:5f:18:
f2:0e:76:c0:a0:a2:89:35:49:e8:40:b0:f2:b1:eb:
3e:ac:17:f6:16:1c:b5:a9:98:4e:9e:44:10:aa:56:
b4:57:e3:f0:f8:a2:f6:c0:83:3f:82:9e:46:78:a3:
6d:4a:23:85:d8:1c:fc:95:8f:75:4e:b8:27:f5:79:
19:ca:2d:dc:59:f1:36:08:a1:64:fe:a0:93:85:5d:
c8:a5:8d:89:13:eb:dd:ee:12:97:30:2d:41:34:53:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:7B:66:32:11:DF:D4:97:39:94:3A:B8:B8:A3:69:B2:F6:C9:79
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:40:a7:e4:b0:0b:a8:ec:40:e6:1d:ee:b7:5a:e7:cd:88:fc:
aa:c2:fc:fe:81:6a:3b:10:56:cd:cf:50:4a:1f:78:bc:9e:d0:
82:fa:e4:08:2a:82:93:73:5c:52:57:5f:b8:8b:bf:da:49:4e:
55:bb:aa:f9:fe:a3:86:17:e0:f4:81:98:e7:95:c6:1b:87:32:
1a:d9:89:e8:c5:b8:55:06:31:d4:28:db:86:c2:2c:fa:27:e0:
73:06:04:7a:a1:83:fc:18:56:95:0c:40:3c:52:f1:04:0a:54:
2b:2e:a8:71:86:14:8e:86:67:e0:60:dd:58:f8:8c:93:07:ad:
d7:09:bd:8a:c2:53:35:d7:32:64:da:1c:e1:52:3f:2b:49:eb:
5a:a7:97:a9:8c:aa:c5:55:1d:39:eb:ba:a6:96:99:d2:af:d8:
06:bc:bd:46:b1:50:04:d9:44:99:e1:71:9d:93:d7:12:8e:60:
14:af:36:b7:f3:b0:c2:d8:36:f1:63:a2:60:70:2d:35:e3:bb:
eb:ed:b7:f2:76:fe:97:8e:74:9c:89:5d:bc:44:53:30:e2:13:
ca:6d:95:43:14:15:ba:47:f8:b8:3a:d9:cd:a9:12:27:23:db:
29:e5:a1:94:7c:c0:e4:f7:97:7f:dd:8c:11:cc:a2:b4:2b:2e:
02:57:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:22 2026 by rpki-client