Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: 7EM/5K4Xh28TY22TL86TlEkXSQJNDULQfSEJi+I/ztU=
Subject key identifier: AC:30:19:8F:DD:2A:1E:DC:1D:A7:6F:19:48:07:ED:94:CB:CD:EF:C3
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 019DA34143A3A0C12F4C486F5191883A5F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 06DB
Signing time: Sun 19 Apr 2026 01:00:56 +0000
Manifest this update: Sun 19 Apr 2026 01:00:56 +0000
Manifest next update: Mon 20 Apr 2026 01:00:56 +0000
Files and hashes: 1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: bdz36kN45F1GBNm5kcI4TzpmWeHcXpErkk4JtIdsh4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:43:a3:a0:c1:2f:4c:48:6f:51:91:88:3a:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Apr 19 01:00:56 2026 GMT
Not After : Apr 20 01:00:56 2026 GMT
Subject: CN=ac30198fdd2a1edc1da76f194807ed94cbcdefc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:de:ef:67:00:7c:3d:d0:55:de:ce:6d:3b:
92:dd:cc:5c:8b:2b:38:32:bd:19:05:d1:8e:6e:14:
7b:53:01:08:78:5e:ac:4a:b0:49:a9:fb:32:56:f6:
bd:85:dc:ea:07:c2:08:2c:25:1c:e4:7c:37:7e:0e:
56:29:e3:5d:c2:83:e3:1e:e0:34:db:2a:db:4a:6b:
78:51:6b:69:5b:8a:65:5c:7f:9a:c5:e5:2c:e8:7b:
3e:27:e1:44:e1:0f:8e:00:ef:ee:17:a1:82:e0:88:
bc:1c:6c:1e:69:a4:da:5e:89:12:65:db:5c:d5:fb:
8b:21:94:94:8a:57:15:88:88:b1:88:7d:84:c7:e0:
fc:3d:09:78:de:ce:1c:18:d0:d6:11:d1:a1:4d:17:
22:1e:07:a9:07:a3:10:7c:e4:ea:57:fb:6b:0e:98:
a1:d9:90:3b:98:4c:da:ff:cf:9d:7d:a3:70:23:c8:
8e:78:5c:99:c8:ee:3a:d1:ca:52:08:9b:a0:c4:60:
6c:6f:7f:88:3b:e8:a3:59:23:f2:a7:6d:58:32:f4:
c6:1f:7b:e0:20:64:7c:db:7a:e2:31:d0:8d:09:d5:
a5:93:00:97:06:8e:f1:dc:2b:f7:d1:08:8c:13:fe:
84:ef:15:04:33:79:93:b5:94:66:e1:35:65:eb:ae:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:19:8F:DD:2A:1E:DC:1D:A7:6F:19:48:07:ED:94:CB:CD:EF:C3
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:39:af:1a:6b:a1:e2:d6:6c:8f:d0:0e:e1:4e:db:31:a9:cb:
17:4d:0f:cb:41:6f:3a:1c:e4:96:5a:a8:75:52:da:dd:6f:03:
79:ad:6f:88:ef:09:94:a7:96:f8:36:f9:7a:2b:e5:1c:06:09:
dd:fb:67:8b:9f:3a:3e:67:7c:b9:8c:51:31:c0:d6:ea:e5:6f:
78:1b:b0:47:ac:96:51:ee:13:ac:a7:6d:cd:6e:02:df:c6:c6:
95:83:71:78:b7:29:65:12:e3:12:33:19:2c:37:da:7c:c6:28:
96:d3:46:09:b5:8c:56:78:d9:29:46:8a:42:45:05:a2:60:02:
61:c3:a7:27:8f:f2:e8:d2:fc:c6:86:51:72:21:a8:f1:38:6b:
3d:18:42:36:2a:a1:be:89:1d:f4:0f:3a:e9:e9:d8:40:c8:64:
e6:61:44:03:a8:ea:92:f4:ff:29:94:96:6c:16:48:5a:e7:0f:
c0:c9:6c:fb:cb:e4:8e:3b:57:d4:20:89:26:b6:5e:85:dd:a5:
be:dd:a9:a6:83:31:2e:76:ba:cb:94:09:ad:d0:aa:15:fe:29:
80:ae:9d:fd:4b:fe:1b:83:f0:21:71:f8:d5:d1:17:8f:23:df:
72:c3:95:41:1c:2c:b1:db:2f:9f:a3:f4:62:ca:fb:0c:aa:2c:
0c:71:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:29 2026 by rpki-client