Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: GHdCcx0os/8dobTuvpEUOf1KvUuGQyoD2f0ZZSWtLRc=
Subject key identifier: 23:E8:B2:F3:91:BF:C8:38:56:72:09:F1:93:BB:75:91:29:78:86:C9
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 019D9AAB73FB89201A0E998B5CA59A8C5407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:20 +0000
Manifest this update: Fri 17 Apr 2026 09:00:20 +0000
Manifest next update: Sat 18 Apr 2026 09:00:20 +0000
Files and hashes: 1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: nF9IICsZXKzgpDqldNVmgKMMtvlfDK7+8uWMet5CNMQ=)
3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:73:fb:89:20:1a:0e:99:8b:5c:a5:9a:8c:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Apr 17 09:00:20 2026 GMT
Not After : Apr 18 09:00:20 2026 GMT
Subject: CN=23e8b2f391bfc838567209f193bb7591297886c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:64:fd:3e:ec:9b:48:22:ca:9f:a4:40:c2:
aa:4f:9c:e2:81:52:bb:7d:46:61:d6:a5:af:a6:c0:
62:7a:44:ec:9c:40:b7:8a:51:3d:8a:c4:03:d3:12:
2e:84:ea:ce:cf:b4:5d:71:9d:13:94:2d:2a:e8:f6:
25:f1:f6:82:60:2f:88:b2:a0:95:e8:73:a5:13:e0:
25:18:25:43:0b:8a:eb:9c:cd:c2:3b:6e:49:c4:c8:
2b:0a:0e:72:ab:8a:ae:76:96:bc:6f:b4:fe:c9:db:
d5:d0:d8:ce:20:8d:0e:39:14:61:68:6f:c0:7c:c3:
63:2e:22:d7:d9:77:23:74:20:40:51:ab:b1:81:c5:
d2:7d:4f:e1:ed:96:26:07:42:ce:07:67:64:f1:51:
72:12:5c:d5:89:42:68:2b:08:e8:1e:65:bc:9c:f8:
cc:02:e4:92:d3:82:1c:89:de:c9:f9:22:fc:53:78:
5e:42:76:65:de:02:15:69:b3:95:7b:27:ac:eb:55:
c0:a7:f7:d8:c0:23:0d:bf:9e:ed:5e:5c:8d:16:46:
de:2d:fa:47:9e:78:86:eb:0f:ea:40:7c:a6:3b:df:
db:89:b5:53:a5:ea:e4:07:f3:63:d8:3e:61:de:85:
a5:a0:b6:fb:54:35:88:cf:3e:76:ca:73:cf:04:2d:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:B2:F3:91:BF:C8:38:56:72:09:F1:93:BB:75:91:29:78:86:C9
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:67:2b:88:84:e7:d2:d7:71:3c:fd:fd:f3:34:08:bf:d0:99:
7d:21:0f:7d:73:ad:56:bc:34:46:14:cc:c1:fc:4b:94:73:2e:
31:18:f6:34:ed:e0:63:11:41:a3:32:73:35:ef:2a:bd:85:ef:
53:03:cb:9d:de:8f:46:43:ee:04:77:66:df:ed:5e:ba:be:c6:
95:ef:79:32:26:2e:ce:50:81:cd:41:7e:89:9b:c9:5b:08:7e:
31:82:83:a6:77:0c:c4:de:5b:65:d2:47:2a:16:dc:a3:cf:c1:
c7:96:db:8c:e2:21:12:2e:f8:1e:ee:e0:73:a4:1a:11:67:18:
58:6f:e0:ae:1e:c8:20:11:46:d1:59:e7:a4:6a:fa:8c:fe:1f:
d0:82:ca:e0:08:fe:bd:45:65:0e:46:88:27:8c:b9:8a:d4:b3:
0d:3f:42:63:55:2b:18:99:d2:3e:7b:8c:74:bf:6f:fc:ce:6d:
96:77:78:14:96:56:e1:03:7d:74:51:dc:a5:da:fa:03:22:31:
9b:31:3d:1f:f2:b8:b2:e6:dd:2c:22:5c:2f:30:52:f8:a3:a0:
a4:03:90:aa:23:62:4a:3a:68:7c:0f:12:f0:b8:9a:b0:5d:5b:
28:a8:e4:0b:32:12:f0:82:08:7a:d5:27:11:98:4f:c9:45:ad:
cd:f1:15:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq3P7iSAaDpmLXKWajFQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1
NTE0MDIwHhcNMjYwNDE3MDkwMDIwWhcNMjYwNDE4MDkwMDIwWjAzMTEwLwYDVQQD
EygyM2U4YjJmMzkxYmZjODM4NTY3MjA5ZjE5M2JiNzU5MTI5Nzg4NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9E1k/T7sm0giyp+kQMKqT5zigVK7
fUZh1qWvpsBiekTsnEC3ilE9isQD0xIuhOrOz7RdcZ0TlC0q6PYl8faCYC+IsqCV
6HOlE+AlGCVDC4rrnM3CO25JxMgrCg5yq4qudpa8b7T+ydvV0NjOII0OORRhaG/A
fMNjLiLX2XcjdCBAUauxgcXSfU/h7ZYmB0LOB2dk8VFyElzViUJoKwjoHmW8nPjM
AuSS04Icid7J+SL8U3heQnZl3gIVabOVeyes61XAp/fYwCMNv57tXlyNFkbeLfpH
nniG6w/qQHymO9/bibVTperkB/Nj2D5h3oWloLb7VDWIzz52ynPPBC2yzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPosvORv8g4VnIJ8ZO7dZEpeIbJMB8GA1UdIwQY
MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct
MWE1ZDhmNTA1MThmLzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTctMWE1ZDhmNTA1MThm
LzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA52criITn
0tdxPP398zQIv9CZfSEPfXOtVrw0RhTMwfxLlHMuMRj2NO3gYxFBozJzNe8qvYXv
UwPLnd6PRkPuBHdm3+1eur7Gle95MiYuzlCBzUF+iZvJWwh+MYKDpncMxN5bZdJH
Khbco8/Bx5bbjOIhEi74Hu7gc6QaEWcYWG/grh7IIBFG0VnnpGr6jP4f0ILK4Aj+
vUVlDkaIJ4y5itSzDT9CY1UrGJnSPnuMdL9v/M5tlnd4FJZW4QN9dFHcpdr6AyIx
mzE9H/K4subdLCJcLzBS+KOgpAOQqiNiSjpofA8S8LiasF1bKKjkCzIS8IIIetUn
EZhPyUWtzfEVMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:36 2026 by rpki-client