Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: Qc/IsdVJ1jjhsWjSc7IkCfDWe1FC5vxzH6mRBWsNpUE=
Subject key identifier: 72:D2:D8:BD:4D:E0:E7:62:6B:4B:70:C9:83:BF:38:BF:F5:72:6B:8E
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019FAA510EFA9F3284B2ED121D2DBACAB023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 20:01:06 +0000
Manifest this update: Tue 28 Jul 2026 20:01:06 +0000
Manifest next update: Wed 29 Jul 2026 20:01:06 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: 77+MqCXFGFtTCtmVJNVMN3zB7rM0LC43HRVripoYUxQ=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:0e:fa:9f:32:84:b2:ed:12:1d:2d:ba:ca:b0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Jul 28 20:01:06 2026 GMT
Not After : Jul 29 20:01:06 2026 GMT
Subject: CN=72d2d8bd4de0e7626b4b70c983bf38bff5726b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:ec:c8:f8:0a:42:e9:30:60:f5:62:d2:c7:
e5:6c:52:44:01:a5:02:27:59:ce:03:a3:f7:98:7d:
12:03:83:fa:c5:aa:32:fb:f0:b3:88:70:b3:56:e7:
a0:5d:58:23:a6:2b:0d:b0:88:d1:30:2a:0a:b2:d4:
eb:36:63:25:7d:58:63:e9:b4:68:8e:3b:d2:18:8a:
6d:de:2d:b4:d1:f0:4f:bd:61:fd:93:05:b1:06:12:
44:03:54:03:75:c8:0d:af:15:99:31:51:2f:84:5f:
cd:44:85:d0:96:de:ce:87:60:5e:fa:73:44:f2:5d:
b7:39:f3:af:33:33:ee:43:e9:03:ee:17:a4:73:90:
09:bf:e7:d4:da:72:32:33:24:38:64:18:40:93:01:
85:a2:d9:75:c8:df:e7:a1:aa:88:45:27:fe:7c:49:
c4:7b:1c:07:11:57:52:cb:72:60:01:32:fd:bf:d8:
90:1a:db:7e:8e:9c:0b:9d:29:67:7d:76:e3:7a:70:
eb:7a:30:0a:50:a1:1a:7e:c3:46:98:97:c3:4a:26:
b9:5b:42:b5:20:83:ab:7b:1c:6b:22:b6:58:a9:cb:
ac:ee:fc:40:3d:ea:c5:17:14:7f:1d:89:e3:a9:8a:
4d:d3:37:2d:65:2e:fd:a6:2b:b3:e5:1d:2d:4f:58:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:D8:BD:4D:E0:E7:62:6B:4B:70:C9:83:BF:38:BF:F5:72:6B:8E
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e3:83:8d:0b:17:f2:ea:d2:8c:21:c6:48:64:6a:c6:37:9a:
ac:68:34:0a:d9:71:96:d9:e6:19:c7:3a:ae:cf:b6:df:1f:a2:
a0:0d:ca:33:3b:32:b2:f3:74:ff:ba:be:24:98:2f:64:1b:d9:
19:d9:72:f3:17:68:88:79:3e:45:f0:47:ff:67:8f:29:d7:0f:
23:34:3f:4c:1a:93:43:be:33:cc:d1:ef:85:72:01:b6:9b:56:
5e:27:ff:cb:29:ea:fd:82:9f:fd:cd:6e:c9:3d:60:0c:b3:e0:
dd:49:04:8f:84:13:3a:4c:4f:ff:e9:ae:81:16:f0:df:25:b7:
6d:76:08:0d:fc:09:eb:4a:31:59:f5:47:41:07:fa:76:65:4f:
e0:b7:c2:e7:2d:ac:9e:d5:d1:91:f6:73:2f:8a:cd:67:7c:e2:
d1:19:ba:db:05:65:89:cc:a7:93:28:3c:4b:4e:ad:50:85:92:
ba:39:2e:ed:88:72:91:8c:ba:76:bd:ad:42:73:5a:25:2b:a7:
b2:99:c7:2c:29:54:d8:48:b9:dc:9d:a9:9e:87:74:52:38:c8:
82:d3:c3:da:b6:11:9d:d7:c6:f2:3a:7a:2b:05:ae:ee:3f:09:
86:50:18:b7:0a:11:ab:c8:24:c5:6b:d3:7d:88:88:f2:f1:0b:
58:eb:de:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUQ76nzKEsu0SHS26yrAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi
YzI0NWYwHhcNMjYwNzI4MjAwMTA2WhcNMjYwNzI5MjAwMTA2WjAzMTEwLwYDVQQD
Eyg3MmQyZDhiZDRkZTBlNzYyNmI0YjcwYzk4M2JmMzhiZmY1NzI2YjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qrsyPgKQukwYPVi0sflbFJEAaUC
J1nOA6P3mH0SA4P6xaoy+/CziHCzVuegXVgjpisNsIjRMCoKstTrNmMlfVhj6bRo
jjvSGIpt3i200fBPvWH9kwWxBhJEA1QDdcgNrxWZMVEvhF/NRIXQlt7Oh2Be+nNE
8l23OfOvMzPuQ+kD7hekc5AJv+fU2nIyMyQ4ZBhAkwGFotl1yN/noaqIRSf+fEnE
exwHEVdSy3JgATL9v9iQGtt+jpwLnSlnfXbjenDrejAKUKEafsNGmJfDSia5W0K1
IIOrexxrIrZYqcus7vxAPerFFxR/HYnjqYpN0zctZS79piuz5R0tT1htwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLS2L1N4Odia0twyYO/OL/1cmuOMB8GA1UdIwQY
MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct
NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw
LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeODjQsX
8urSjCHGSGRqxjearGg0CtlxltnmGcc6rs+23x+ioA3KMzsysvN0/7q+JJgvZBvZ
Gdly8xdoiHk+RfBH/2ePKdcPIzQ/TBqTQ74zzNHvhXIBtptWXif/yynq/YKf/c1u
yT1gDLPg3UkEj4QTOkxP/+mugRbw3yW3bXYIDfwJ60oxWfVHQQf6dmVP4LfC5y2s
ntXRkfZzL4rNZ3zi0Rm62wVlicynkyg8S06tUIWSujku7YhykYy6dr2tQnNaJSun
spnHLClU2Ei53J2pnod0UjjIgtPD2rYRndfG8jp6KwWu7j8JhlAYtwoRq8gkxWvT
fYiI8vELWOvePg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:27 2026 by rpki-client