Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: WQ+y7sW+rprBFHkO7gX3YtFCRcH1sbxqXkuw4a3wfG0=
Subject key identifier: 37:4A:8A:5D:9E:90:02:CD:F1:C7:1F:48:15:C2:00:12:07:91:F5:99
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 01A125B0721A6D835FDF2861B5D2C11C4154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 12:01:22 +0000
Manifest this update: Sat 10 Oct 2026 12:01:22 +0000
Manifest next update: Sun 11 Oct 2026 12:01:22 +0000
Files and hashes: 1: BCU0v_cEh5_u0l1M7XIWrBPXE24.roa (hash: jN0EKBaIK6dO26MrW8xkSDiWMnzxQOZ/Xomut2+9qzk=)
2: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: kiL0HBeBH3fKokjBeakJSdwZHokXERIL27RWYlhxKs0=)
3: TDBzNKDN0zcFzzdrha4ku17Bw2c.roa (hash: UKRggR/5hKhCIyEF+Xn/ipp57q4dtFjayf1JHCNIfSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:72:1a:6d:83:5f:df:28:61:b5:d2:c1:1c:41:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Oct 10 12:01:22 2026 GMT
Not After : Oct 11 12:01:22 2026 GMT
Subject: CN=374a8a5d9e9002cdf1c71f4815c200120791f599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:d7:d3:d2:75:e8:f9:c0:6d:69:e5:b5:27:
1e:1d:8a:32:fa:1b:42:17:bd:69:cb:ef:aa:72:d0:
c0:4e:4c:93:55:07:da:af:9b:c6:8e:d4:d2:86:4b:
05:4d:e4:b9:d6:d9:46:cb:54:90:d3:25:63:cd:d1:
f5:f9:9d:50:e9:b2:c0:9d:d0:02:d8:fa:19:49:fe:
c8:91:84:e1:db:07:f7:45:73:3d:18:ef:cf:6a:4f:
41:ea:fb:e7:67:4b:76:a9:f1:d6:e8:6e:7d:a7:eb:
bf:4f:c7:7a:c4:4c:9c:cd:a9:64:25:c0:91:15:57:
59:bb:2e:72:ca:1d:1e:7b:f0:64:c5:c8:6c:a9:48:
4e:ab:b6:6b:0b:f9:47:a5:42:dd:ab:98:69:e4:d8:
e6:8a:0c:c0:ee:07:ca:64:57:88:60:d7:b6:b9:d8:
14:80:49:16:19:70:fd:7e:e4:47:47:9e:a2:69:a1:
c5:ea:0d:5f:4c:a4:70:29:4d:f0:d3:b4:1a:d5:ee:
46:4b:9d:bf:4f:ce:bb:c1:b1:1f:57:be:fb:ca:8a:
0e:b9:9b:56:1d:eb:b2:5b:a7:0d:4e:bf:df:26:2d:
d6:00:f1:ab:20:d5:8f:c2:bc:6c:2f:2c:10:0d:a9:
92:90:49:53:98:94:ca:70:22:92:2f:ea:21:77:f1:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:8A:5D:9E:90:02:CD:F1:C7:1F:48:15:C2:00:12:07:91:F5:99
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:49:d3:19:a3:29:8b:e2:7b:0f:a7:70:fb:e2:65:65:06:77:
ba:07:13:7b:32:06:d8:05:38:02:3f:84:79:c7:d6:d8:c8:29:
b6:23:b1:9b:60:93:22:e9:50:b1:88:d8:35:34:16:75:18:a7:
cf:35:d7:6b:67:5d:eb:95:22:ec:f8:3a:3f:8c:ef:0c:86:42:
74:5a:65:e6:19:37:e5:dd:40:3c:fa:f9:8c:f6:f2:f0:76:9d:
27:7d:ea:0d:ed:94:ac:01:50:01:b1:a8:28:64:05:1c:e3:05:
b8:18:5d:ec:7c:ab:1d:68:67:4e:45:fc:9d:ad:4d:a6:9c:6f:
85:eb:7b:2f:ad:24:c7:b5:63:68:27:64:b5:d1:2b:42:b8:4f:
59:1d:fb:68:68:14:e6:4d:69:76:cf:1f:96:f1:df:45:f5:ef:
34:c8:4c:2d:64:1f:18:67:21:80:08:54:60:ab:9d:b4:7d:e2:
3c:f7:2b:79:fe:af:ef:1f:49:3a:59:9b:e8:87:0c:1c:41:42:
f1:49:d8:5e:4a:33:c2:fa:ec:fa:d3:03:29:48:01:61:af:ab:
30:df:6a:83:05:fa:93:4d:b2:5d:de:7c:6c:14:4d:59:2b:25:
63:b7:42:00:52:af:90:e2:ff:ee:a6:39:bb:9d:11:86:47:c7:
4b:20:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:21:03 2026 by rpki-client