Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: CjG+vYnjKurLPAMZLHazAPDFX8/g/dn3M7z7LJlawUc=
Subject key identifier: 72:94:09:9E:B1:B6:F2:DA:20:08:01:CA:0D:F6:81:21:FC:0D:54:BD
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019D99CFF43FD268D5E1DAB104A93EF187E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 0775
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: eSQsg9nhHgFSKq+8o8tpmgf/zCuPvcJyCHl+BSQ7tGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f4:3f:d2:68:d5:e1:da:b1:04:a9:3e:f1:87:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=7294099eb1b6f2da200801ca0df68121fc0d54bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:4a:1c:b1:28:cc:b6:13:b8:8a:1e:93:7c:
db:d4:01:fd:0d:b5:bf:24:ea:02:ed:73:09:d0:c9:
3f:43:cf:9b:1d:60:3f:4b:06:e8:30:e6:47:b1:03:
29:24:e0:0c:1a:16:0d:a0:4e:3d:b3:50:2a:10:6d:
e1:d3:08:20:6e:8c:be:66:9b:b4:73:2b:62:ce:41:
45:46:c0:d2:6b:c2:43:4a:33:7a:4f:7e:e9:bd:a4:
ad:28:6e:cb:25:5b:4f:41:93:de:66:06:bd:52:89:
ec:4b:13:de:2c:0c:6d:f6:ea:e7:6a:fc:dc:2e:12:
d9:03:bf:ec:be:74:5a:34:e0:1b:12:73:bc:ae:a8:
5b:bd:53:71:57:9f:c7:fa:51:d3:72:21:bc:29:89:
10:28:21:e7:6c:e3:bf:b5:f0:54:b9:79:10:e3:97:
a4:f5:73:13:e9:8c:84:db:c3:6d:bd:35:5b:7f:16:
e8:1a:d1:db:19:2c:30:64:f1:d8:3e:79:a5:c1:fc:
19:a4:35:e7:30:98:a7:1d:49:0e:ce:f8:89:04:49:
2f:8d:7e:27:ba:33:e1:6b:4b:81:b1:78:5f:2a:fd:
8e:df:5a:05:ab:3a:d9:2f:f9:6d:f2:78:92:7d:2c:
8a:1f:61:54:d3:37:f4:63:a2:57:47:5f:36:02:d5:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:09:9E:B1:B6:F2:DA:20:08:01:CA:0D:F6:81:21:FC:0D:54:BD
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7c:60:63:f3:74:a2:13:68:4d:07:fb:f9:16:e7:df:ca:c2:
df:16:3d:59:53:3e:eb:b1:f7:93:66:55:a9:6f:66:95:1e:e7:
93:82:09:75:f0:d6:73:19:c2:8a:48:4e:92:8e:0d:c0:24:53:
4c:2f:6c:c7:2e:4a:e0:39:58:28:8a:fc:b9:56:6a:1b:e5:6a:
0e:e9:49:ca:15:bd:67:94:1c:29:f7:56:a8:bc:a3:94:75:38:
f4:11:30:c3:11:32:d1:6c:ae:a2:8f:1b:75:6e:be:ee:b6:55:
94:be:a7:f1:9c:ed:44:56:ba:53:cf:62:50:9e:8b:0c:40:e2:
96:59:c2:8b:81:1a:72:8e:d5:0c:3b:a2:2b:58:26:28:5f:d1:
7d:58:12:2b:c1:9e:08:9f:6c:c8:f1:fd:93:e6:fd:2e:b1:98:
4f:43:71:30:da:d6:ae:86:63:68:24:08:9b:5b:af:c9:fc:04:
ff:60:78:79:75:f0:7c:00:b2:67:b4:a7:e1:de:94:6c:8d:de:
70:6d:80:8f:39:8e:d4:48:20:bf:36:5c:5e:b5:88:3a:50:71:
9a:3c:6e:93:25:46:d3:62:13:05:4b:0d:dc:06:7b:db:3e:cd:
cb:15:9d:4d:13:aa:a9:d1:a6:08:e1:f3:83:97:1d:8f:f3:1f:
37:22:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:57 2026 by rpki-client