Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: wlah9DctIZTsVhkLK9sFd0MRhigTekE/G8vIJUyqx+0=
Subject key identifier: 5A:29:6A:89:20:65:26:56:C5:DE:1E:CF:B7:AC:2F:31:8A:79:CE:64
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 01A0D45D9F12B82B791E179145A27D2EE9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 17:01:40 +0000
Manifest this update: Thu 24 Sep 2026 17:01:40 +0000
Manifest next update: Fri 25 Sep 2026 17:01:40 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: TXUOq5qffdacaKZDa7Fiwy1iLIUTlJEaIzAx0N5nQBg=)
2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:9f:12:b8:2b:79:1e:17:91:45:a2:7d:2e:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Sep 24 17:01:40 2026 GMT
Not After : Sep 25 17:01:40 2026 GMT
Subject: CN=5a296a8920652656c5de1ecfb7ac2f318a79ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:70:df:d2:6b:9e:2b:a8:34:1d:ea:57:0f:
2f:cf:af:e3:46:54:68:b8:48:ae:31:ba:d9:3d:c2:
33:a9:1c:96:ef:28:66:43:9a:42:01:ac:27:c8:9f:
ef:5c:62:25:ae:46:74:ef:6c:17:12:d6:2b:02:13:
3c:6d:9c:5f:a6:91:57:65:8f:a4:8d:cb:5a:33:25:
d5:ec:6c:d8:d0:10:af:55:76:4b:7f:74:b2:8d:26:
50:9a:dc:51:45:b2:9b:b4:a0:ce:98:a1:c1:e1:01:
ab:7c:7c:ee:b8:4d:af:01:16:be:07:ee:2e:ff:13:
9b:23:23:25:37:a5:e5:a3:c9:be:fe:94:74:5a:3e:
bb:86:17:59:da:c7:57:c7:4d:a3:53:ab:92:7e:62:
b0:a6:fe:28:79:a4:33:0f:fa:fc:7f:4c:df:67:af:
9c:3f:2c:43:49:15:29:3e:af:c3:63:9b:de:8c:af:
30:1d:32:3f:23:51:b6:1d:95:eb:66:de:0c:07:57:
72:85:ef:fa:50:fa:0c:68:f6:35:81:3a:ad:bf:a8:
29:cc:95:23:be:73:36:26:6c:cf:d2:bf:94:dd:ec:
92:78:96:53:c0:61:83:42:2c:33:2e:ac:ca:15:a0:
4f:d4:73:b9:ba:df:a6:a3:d5:7c:7f:92:45:e9:de:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:6A:89:20:65:26:56:C5:DE:1E:CF:B7:AC:2F:31:8A:79:CE:64
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:35:af:2c:e7:23:0f:9a:9f:2b:f7:02:11:21:e7:4b:66:c5:
52:6f:c8:0a:4b:44:9e:62:ca:ec:6d:35:33:4b:20:42:23:3a:
2d:25:32:d3:31:29:3e:3c:31:64:f6:90:2c:7c:28:90:dd:49:
f7:69:12:2a:86:e9:67:a1:8e:08:81:02:a4:40:d7:0a:06:ce:
a1:9a:aa:1f:1a:5e:f0:bb:50:ab:82:97:22:b9:c0:15:08:59:
39:6a:4b:9f:8c:17:be:83:90:39:17:2e:a7:84:c4:49:08:fb:
db:17:c1:3d:2e:9d:6a:a0:ec:4e:b4:40:bd:54:df:42:ba:f2:
24:a4:37:24:67:7f:09:15:62:39:92:6e:f4:1c:26:a2:29:03:
45:ad:ab:69:4b:9b:80:80:8e:9f:c1:54:3b:de:c2:94:02:e1:
17:d5:56:7a:b2:ca:00:27:bb:4a:57:6f:fe:2c:48:23:fd:80:
86:95:2e:5f:43:3d:4f:84:e7:0e:7c:aa:11:af:3f:d7:a1:75:
dd:ac:6f:7a:43:51:93:03:1f:4d:64:d2:2e:52:c1:44:9f:3a:
5c:81:ac:64:e3:00:83:95:43:ec:9c:01:b9:25:24:b3:84:aa:
4c:17:50:eb:ae:6e:19:c6:04:58:28:75:d3:e1:77:6c:35:a8:
73:b8:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:15 2026 by rpki-client