Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: gDAcvWwY36Q2pnSiPHOpXyvXXEtUeGZl1rSg8lbOgec=
Subject key identifier: 9B:D2:51:A0:99:E9:8F:A6:F8:29:0D:DE:D1:05:9C:3C:41:74:CD:89
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 019D9E51EB3D4D883ECB633F7E7B7FBBF941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 1842
Signing time: Sat 18 Apr 2026 02:01:01 +0000
Manifest this update: Sat 18 Apr 2026 02:01:01 +0000
Manifest next update: Sun 19 Apr 2026 02:01:01 +0000
Files and hashes: 1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: VAFvx6rPr7JEk83P/GYCRCSOaQ2VfOEUESlfe1zaeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:eb:3d:4d:88:3e:cb:63:3f:7e:7b:7f:bb:f9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Apr 18 02:01:01 2026 GMT
Not After : Apr 19 02:01:01 2026 GMT
Subject: CN=9bd251a099e98fa6f8290dded1059c3c4174cd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:6c:53:75:38:25:4b:d8:6e:78:dd:6c:26:
89:f4:80:b7:ba:ef:40:b9:af:f5:c8:3d:6e:88:00:
da:ea:af:86:22:40:49:46:51:57:5c:57:3f:cc:60:
12:47:a3:e5:85:a9:57:7b:8c:0e:2a:3f:6c:24:db:
e3:7e:0e:13:9b:57:65:34:dd:a7:57:7b:9f:a2:a6:
93:84:6d:f6:5a:b4:ab:7d:87:d3:1f:6f:ad:1a:d1:
20:0c:78:7c:c3:24:d4:57:2d:8c:9b:ae:58:ae:24:
2b:0f:51:fd:45:d6:53:44:1e:5c:d9:64:b0:66:e6:
c3:f2:15:f1:20:2c:d0:af:72:48:63:a8:fb:bb:67:
6a:16:9f:c2:19:87:f4:ec:fa:ff:33:bd:25:78:db:
68:54:53:7c:9a:f7:72:cf:03:29:bd:3c:b1:16:fb:
9c:a0:5d:25:32:c9:17:4b:49:99:de:f5:f5:61:ca:
ac:3d:23:c2:17:2f:a7:a2:eb:bc:ec:a0:39:5d:56:
1e:4a:cf:c9:84:38:75:c4:cc:4d:76:ac:9b:61:dc:
1a:9b:e9:1d:23:59:3e:d1:cf:9e:b9:5b:54:e4:76:
7a:26:89:a4:5d:7b:67:d2:7f:7a:f5:10:4d:d2:d7:
ea:7a:ae:ce:f3:4b:67:df:03:47:a9:d4:cd:c1:7c:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:51:A0:99:E9:8F:A6:F8:29:0D:DE:D1:05:9C:3C:41:74:CD:89
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:5f:6f:be:7b:cf:75:18:2a:1c:f1:f4:ff:35:1c:8a:45:
c7:f7:03:9b:c9:d3:6f:97:b8:b7:84:c8:dc:6d:fb:2f:80:d8:
0f:17:69:88:01:11:55:6b:1d:c2:df:0c:2d:8c:49:2f:db:08:
01:43:c0:83:24:12:74:0a:05:85:35:a0:ef:76:ff:e0:32:eb:
59:a5:3a:ee:16:b1:13:fe:c7:07:f4:88:e2:5d:1d:d1:bc:ef:
f3:e9:12:55:70:82:d4:67:64:64:59:19:1c:53:fa:57:2f:3e:
52:9d:80:6f:47:84:52:ae:a4:94:d9:27:50:6b:17:15:e9:2f:
7f:7b:fd:a5:40:28:76:be:89:f8:80:e2:11:2c:7a:0c:f3:cc:
7b:8b:0c:d5:56:c3:bf:eb:e0:ee:3b:6a:5a:a7:a6:28:0f:73:
d5:3e:f1:c2:60:ba:3e:c7:d1:4e:01:21:46:38:e3:38:73:ac:
2c:74:7d:a5:2f:f9:e0:c5:ad:5b:df:9e:07:16:c3:56:7c:62:
80:f6:a3:80:24:69:db:36:61:03:b9:7b:c6:fd:50:33:dd:5c:
58:f0:60:0f:2f:b5:e4:d6:c4:5b:1c:58:f1:6b:e3:c2:94:ed:
36:2c:c8:99:5f:53:04:90:79:36:36:76:58:b2:31:e0:10:3a:
60:28:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:09:22 2026 by rpki-client