Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: cUj1o3Ys/gVEY1a0hgJdzaO8WJuZfwfhrrEr86vhTn0=
Subject key identifier: E1:71:CC:21:6F:A8:EB:87:B1:40:8F:9F:AF:2B:DE:A5:93:85:0E:78
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 019D9B50E3391ECA4D52EB5A5BB15E96EA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: DB
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: f3yseJ2DgBf2zBC3xNRu0+Cnv03IYsk7J/96KGE4d4w=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e3:39:1e:ca:4d:52:eb:5a:5b:b1:5e:96:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=e171cc216fa8eb87b1408f9faf2bdea593850e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:c9:07:80:bb:b2:73:33:c1:40:38:11:12:
2d:1f:d3:d4:98:8d:57:e2:4e:18:d1:d4:a7:ad:af:
c4:40:1d:99:29:f2:78:09:de:e4:57:86:18:f4:c4:
b6:5c:75:c1:91:ad:ef:4e:67:6c:e4:e4:84:0a:a5:
1c:ef:41:59:bf:71:ee:bd:c8:63:79:a2:d7:76:a1:
a1:79:fb:21:ae:98:30:4d:2a:0b:83:86:b4:f9:da:
6d:43:34:6b:dd:08:37:43:a2:bd:a8:86:04:24:c3:
28:5f:d2:c8:52:66:25:2d:da:23:d1:7d:b9:75:a8:
79:4f:56:9d:97:b9:d8:09:03:c9:27:41:ef:e9:03:
1d:32:f7:61:57:4e:24:69:1a:ed:6d:1b:03:1c:0e:
d9:c0:37:be:0f:fc:bd:c0:79:72:0c:f8:3f:19:81:
06:c8:27:a9:0c:5e:09:49:0f:0a:35:eb:7a:fa:28:
73:40:1f:76:81:88:86:87:26:1a:34:b9:97:34:26:
7b:1a:cd:59:8c:19:0c:40:1b:61:94:65:69:7c:7d:
ed:90:30:5f:ef:d9:e0:a3:94:e8:a5:63:5d:b8:b2:
f0:72:33:36:0f:da:4c:f2:d5:6c:5a:4f:9b:ee:d4:
63:7c:87:38:54:ca:84:b7:3c:bb:14:ab:b3:07:e0:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:71:CC:21:6F:A8:EB:87:B1:40:8F:9F:AF:2B:DE:A5:93:85:0E:78
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ff:71:f0:a3:c5:a2:9e:4e:79:27:18:6e:7e:54:d5:54:7d:
7c:30:fe:9c:82:d4:5c:56:fe:1f:e6:ec:c9:33:7d:26:5e:19:
e9:d9:87:d3:91:f6:f8:d5:21:0e:f7:be:04:64:8e:af:28:91:
9b:9b:f5:1e:15:a3:a9:3a:90:f8:4d:c9:87:3f:75:6b:f4:44:
8a:e8:f0:bf:07:a9:97:74:c9:48:68:23:9a:22:a5:71:d6:b0:
bb:4d:05:af:2b:1b:49:12:8e:b2:b9:93:e5:81:d1:f2:ff:b6:
ff:b0:be:40:30:6f:46:c3:96:34:91:19:5e:b3:c5:aa:90:66:
3a:b2:63:71:12:9d:65:24:17:38:36:e0:2c:d5:72:66:19:77:
1d:15:e1:64:11:55:9d:0b:f8:2c:b0:08:0a:1e:d5:a4:08:bd:
e7:04:5d:24:25:80:4d:73:eb:6b:9a:08:ff:02:ba:b6:90:58:
ec:71:5a:98:66:9b:ca:c0:a4:1f:f2:c0:b5:d7:02:ac:c2:2f:
6b:b4:a0:9f:75:f7:0d:cd:df:88:fd:c6:60:90:bb:37:c4:78:
6a:f2:02:8a:dc:f6:91:04:3f:f5:cc:24:c0:86:a3:0c:b0:c6:
24:38:0f:4e:19:46:2d:51:0c:c7:c2:e5:a0:a4:d7:7c:9a:22:
8f:b9:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:01:50 2026 by rpki-client