Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: zRHer7EPasWxOlfKvO+kd+D+2iLfDuZEOEVSeNRBqZc=
Subject key identifier: 94:6F:BE:00:77:D2:22:EA:03:A0:9A:87:06:DE:3E:0D:9E:A0:0D:B4
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019D992B6EA89E1A69DDF17EC180E3A8DFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: /uhiu037THKZDtRr6ZHuSLnL/yQECO08UiBh/mJcCT8=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6e:a8:9e:1a:69:dd:f1:7e:c1:80:e3:a8:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=946fbe0077d222ea03a09a8706de3e0d9ea00db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:60:fb:27:5a:46:71:f3:a1:4f:58:d4:cc:
ca:91:8f:3a:c6:e8:e0:60:74:6c:4b:a2:85:e7:7f:
98:8c:94:27:56:d5:2a:58:33:88:5a:af:34:32:c6:
c8:e0:1a:7e:99:8a:e4:cb:5f:71:80:81:ce:c1:6e:
92:21:25:3e:85:e3:cf:21:f3:26:b0:0e:47:53:82:
07:7f:75:9d:b7:71:29:c7:56:d3:f4:78:a0:30:ca:
b3:3c:95:cf:a5:a1:bd:03:72:1a:55:c4:2c:d8:42:
45:6d:b9:1c:5e:27:67:99:c3:2e:c4:09:da:a7:88:
23:7d:e3:53:dd:c6:fe:d6:0e:e0:be:bc:24:18:64:
cc:83:cb:01:97:2a:0f:b2:62:50:bf:47:88:56:78:
eb:12:d3:6c:70:ce:36:5d:50:8f:d0:b6:04:3e:7f:
b3:b0:4d:2f:43:57:a2:04:a4:0f:da:5b:22:43:3b:
1b:fc:c3:fa:e7:be:e5:cc:fa:5c:e0:70:de:b3:9e:
57:76:a6:8c:1c:55:e7:88:bc:32:8d:eb:ac:0b:22:
4e:53:59:bb:ff:e3:03:e5:ea:f0:b9:58:b3:8c:c5:
d0:3a:44:26:93:09:7f:60:f6:d9:f1:2e:60:dd:9f:
e9:a6:4e:dd:d7:d6:cd:30:44:b4:c7:9a:55:38:67:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:BE:00:77:D2:22:EA:03:A0:9A:87:06:DE:3E:0D:9E:A0:0D:B4
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:48:ca:33:71:7f:36:9b:75:cf:23:69:5f:95:d3:ef:19:
8a:d9:81:85:7b:fa:8e:1a:54:39:ec:98:5d:b2:5d:4b:2d:44:
f9:2b:1c:de:82:7c:45:55:9c:73:18:c1:ac:4d:49:cf:60:bf:
58:a6:bc:60:50:91:46:6e:dd:92:cc:fb:db:f9:44:6d:87:7e:
f1:22:be:59:2c:c8:29:46:77:f1:06:b9:9a:0f:8c:f4:c4:d9:
45:b8:ac:b9:8c:21:0d:84:b1:5a:1c:f0:97:cd:a7:c3:94:df:
18:83:ab:bf:50:21:38:cc:97:ab:96:ab:0e:32:c8:0f:43:66:
94:ea:62:e9:33:fe:cf:9d:ee:9b:e0:c4:89:f9:a1:43:eb:31:
46:48:a6:2d:f5:79:4e:af:a4:e2:f4:dd:e8:a0:5c:d8:ee:09:
66:41:fb:90:2a:20:15:24:d1:14:05:66:c8:58:8f:f0:e4:f2:
4b:57:96:2e:f3:3d:44:ee:80:d8:bf:40:a4:ee:40:03:dc:d7:
39:b1:c4:e7:36:1f:59:5d:cc:2a:16:2d:76:60:02:73:b1:2f:
6b:1d:68:cd:9c:44:36:8f:29:bb:ae:26:fa:1a:ba:f9:77:2e:
80:7b:74:6e:3b:bd:b1:3b:40:d0:ca:f2:3d:86:01:17:26:50:
11:b8:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:32 2026 by rpki-client