Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: MtfBrInpmmUIbx3MyqdliEsRKq/vxDqeqV8/Ig/8rBs=
Subject key identifier: 6F:E5:90:68:63:7B:99:70:4E:78:5A:03:3D:E2:DE:22:33:4D:B0:B6
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 01A0C4449B0AD8A7457DA44B32ED796502FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 14:00:25 +0000
Manifest this update: Mon 21 Sep 2026 14:00:25 +0000
Manifest next update: Tue 22 Sep 2026 14:00:25 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: ehw5+/VhixObAdso0t8zCJTuOojI9e1SHlYx2q9aWls=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:9b:0a:d8:a7:45:7d:a4:4b:32:ed:79:65:02:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Sep 21 14:00:25 2026 GMT
Not After : Sep 22 14:00:25 2026 GMT
Subject: CN=6fe59068637b99704e785a033de2de22334db0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:a9:5d:15:cc:08:63:9c:00:fd:8c:c4:00:
27:f4:81:1a:cb:02:52:17:ef:a2:b7:d8:2a:54:a5:
bf:93:3f:e7:39:7a:8b:71:22:d4:32:16:e8:ab:7b:
bc:2f:31:43:04:f8:88:ed:56:a8:b5:91:28:e0:3c:
bd:a4:be:5e:3a:23:f6:d6:62:64:5f:0e:57:87:06:
92:f0:e3:47:3b:4f:08:26:b2:51:1e:bf:68:b6:b5:
d4:4f:3c:97:a3:65:b3:4a:89:17:98:dd:ba:2a:18:
30:17:52:a2:ea:43:2a:5a:d1:65:c3:7f:a2:e9:c6:
32:7e:2e:01:0c:38:4b:7d:d1:10:60:d1:90:c5:42:
23:11:22:f0:71:f1:4c:37:d4:bc:a5:ea:a0:48:95:
66:fd:f3:09:04:6f:63:29:3b:05:81:4f:56:0a:cf:
5c:9e:61:96:f6:05:fb:7f:a9:6f:b8:7e:cd:be:5a:
45:67:98:90:09:c4:bd:90:fb:48:2c:2a:e8:64:ba:
4a:7d:bb:19:f1:01:7b:52:37:b3:24:68:22:c2:f4:
36:e5:0e:69:cd:a7:25:cc:85:8b:15:93:d4:9b:a2:
9a:bb:62:25:01:fd:6e:e9:a4:96:6a:4a:59:54:aa:
dc:3b:3f:22:98:2d:75:46:aa:a8:a0:8d:fc:a6:2f:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:90:68:63:7B:99:70:4E:78:5A:03:3D:E2:DE:22:33:4D:B0:B6
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2e:f9:8e:9d:3b:c0:87:21:cc:ac:5d:df:62:58:84:87:1b:
79:85:f4:a4:2d:62:e2:c2:4c:30:f6:2b:be:0a:99:5a:ad:80:
74:0f:7a:42:eb:36:95:9a:8f:ee:6d:77:02:51:7b:5b:f1:6e:
d3:48:08:9f:00:d4:95:a4:55:84:37:63:95:54:b1:b3:c9:e1:
83:13:10:e4:2c:85:42:cf:7c:a8:0c:d0:4c:b7:cc:06:0c:58:
09:f6:c6:3d:9e:3c:5d:66:b9:5e:90:6f:5f:b6:1b:6c:ec:d7:
09:79:18:bf:18:6f:b8:3e:cd:dd:ba:9a:42:2f:7a:ea:ac:20:
36:85:9f:13:56:1f:1e:b8:2b:7b:cc:9c:e9:3b:de:18:ae:4f:
8e:f1:08:cc:f2:f4:a5:d8:15:2c:dd:0d:65:c5:75:e7:87:5f:
98:32:22:63:f6:1c:bf:d3:8e:c5:0c:97:79:0d:8e:67:72:79:
0a:01:e8:51:6c:75:a1:1e:57:df:c2:db:6a:b8:5a:4d:18:96:
9b:42:48:bf:4c:01:a0:1b:ac:c5:5c:d9:bd:80:02:f2:a9:a1:
10:3a:09:29:f4:e9:17:7b:0d:a1:fd:06:19:cd:a6:ca:3b:61:
46:fd:a5:39:d5:1a:99:56:43:95:46:04:74:03:d6:58:6e:3a:
d3:17:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:04:20 2026 by rpki-client