Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
File: EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft (raw, json)
Hash identifier: HzI+yPL//6+cYflZvR9qWg3HIGxxemd+6RGOqi7fS5I=
Subject key identifier: A4:C4:EB:05:FA:4A:02:63:0E:3A:79:70:05:B2:51:78:4F:F7:72:AA
Authority key identifier: 12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
Certificate issuer: /CN=12d82a254867a52e680e411bbff5abc20acd623a
Certificate serial: 019FAA881516A5BB3F877093972A1F180B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:12 +0000
Manifest this update: Tue 28 Jul 2026 21:01:12 +0000
Manifest next update: Wed 29 Jul 2026 21:01:12 +0000
Files and hashes: 1: 0CXMCUKQ4CdjBlvAt5pm0hEnETo.roa (hash: q7VCvKAGi9XQDJti9raevgXGzbHYgG1g/0cCScoRD+k=)
2: 2Z06w-6aRdtV0QK4J8t70JdDrjs.roa (hash: k7e4lEr8W/EMx7CcjgiyyJjZ/itKU+JMkO7hCLhiTdA=)
3: EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl (hash: wj/YT3v92EQdsIheybPYwtXNZfGQpEsGwGKi08YdMQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:15:16:a5:bb:3f:87:70:93:97:2a:1f:18:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d82a254867a52e680e411bbff5abc20acd623a
Validity
Not Before: Jul 28 21:01:12 2026 GMT
Not After : Jul 29 21:01:12 2026 GMT
Subject: CN=a4c4eb05fa4a02630e3a797005b251784ff772aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:57:be:e3:ac:6f:23:c9:44:a3:d5:9d:72:
9f:81:a8:a9:3a:c7:22:7b:ce:90:9a:bf:dc:43:5d:
b9:44:0b:70:f7:c6:33:04:8d:ab:86:e0:92:56:d4:
df:9a:bf:2d:c7:f6:d3:1b:d6:e8:6c:04:e5:a9:10:
cf:60:82:0c:45:78:c9:71:da:2c:48:6a:ae:ee:f4:
b1:e1:ea:99:6f:7f:8c:cd:ff:93:a4:f7:d4:06:eb:
db:48:e2:9e:78:be:c8:c7:96:a9:0d:7a:4a:02:e6:
b4:ad:d7:d8:f1:2e:ec:2b:66:47:75:35:ae:e4:f4:
d9:2d:26:42:cb:76:8a:dc:65:20:b3:4b:1e:68:c6:
8c:cd:23:a0:e0:e2:88:42:f9:ce:b1:05:85:08:33:
81:84:88:3c:c8:16:2f:3e:3c:12:d4:20:c6:44:24:
9b:a0:1c:bd:e4:73:3f:d0:fa:bc:51:02:b7:7b:d1:
ca:1d:3d:26:ef:e9:1e:cd:63:98:30:da:65:48:19:
7c:22:0f:1b:47:2c:97:fc:f8:f0:09:8f:2b:88:6c:
e3:0b:db:6a:2a:33:5b:7a:bb:32:83:aa:da:0b:70:
b9:6f:55:03:f5:8f:ee:80:39:28:fd:1d:62:3f:41:
da:a8:51:e6:1f:93:fa:9d:9b:b2:d8:63:27:32:b2:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C4:EB:05:FA:4A:02:63:0E:3A:79:70:05:B2:51:78:4F:F7:72:AA
X509v3 Authority Key Identifier:
keyid:12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:78:0a:77:b2:e2:5a:58:ca:6a:bb:9c:0b:83:88:cc:f8:7a:
cc:64:7b:93:7e:1c:a9:3a:4c:76:5c:45:4e:08:59:dc:18:fc:
1f:8b:94:64:90:40:a9:d7:45:cb:18:9f:9e:8c:3e:fc:d7:96:
70:0d:ce:20:c9:01:c6:09:0f:39:4a:f6:b2:2c:ac:80:ab:cf:
3b:54:ed:5c:f7:f8:3a:cf:8e:ee:3b:3e:a8:e0:9b:f1:5b:bf:
35:fe:dc:b8:e4:52:9e:51:a7:b5:2e:56:66:59:8a:a4:14:44:
10:40:1f:eb:4b:80:a0:83:e8:a5:15:2a:70:51:a7:fd:df:10:
16:2c:72:e6:ee:93:90:63:bc:59:a7:94:66:6b:17:26:bf:c8:
dc:97:33:36:52:1b:08:75:ee:ee:54:a0:9d:9d:a0:f3:d5:dc:
51:9a:00:1b:3a:74:c4:12:31:32:8d:07:67:89:4b:76:b9:3a:
67:4f:13:fb:4b:57:23:f9:66:b3:ab:14:12:e6:26:4a:62:c0:
f9:e3:e7:c3:72:95:90:50:c2:51:48:14:cc:d8:d5:9f:27:0f:
37:2d:76:1e:7f:0c:aa:d8:8e:a7:0e:79:15:19:bf:48:b5:98:
48:21:77:65:05:ed:01:5f:64:c3:02:e8:76:94:07:c3:fe:3d:
07:84:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:34 2026 by rpki-client