Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
File: EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft (raw, json)
Hash identifier: xuqk+hQzE3b34aYPQGGIp+0Q9XTe4WLPrQv8WSCnBRg=
Subject key identifier: 54:05:68:85:94:67:AA:5C:AC:8A:49:8B:1C:39:49:65:9C:F1:8E:CA
Authority key identifier: 12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
Certificate issuer: /CN=12d82a254867a52e680e411bbff5abc20acd623a
Certificate serial: 01A12EB2F8807D3A1A3AF747BF6BD381B4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
Manifest number: 0116
Signing time: Mon 12 Oct 2026 06:00:43 +0000
Manifest this update: Mon 12 Oct 2026 06:00:43 +0000
Manifest next update: Tue 13 Oct 2026 06:00:43 +0000
Files and hashes: 1: 0CXMCUKQ4CdjBlvAt5pm0hEnETo.roa (hash: q7VCvKAGi9XQDJti9raevgXGzbHYgG1g/0cCScoRD+k=)
2: 2Z06w-6aRdtV0QK4J8t70JdDrjs.roa (hash: k7e4lEr8W/EMx7CcjgiyyJjZ/itKU+JMkO7hCLhiTdA=)
3: EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl (hash: r3Lnd6w7xkiWKO3nc8YvRR9i0uyWjG9rrNtAg2AqMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b2:f8:80:7d:3a:1a:3a:f7:47:bf:6b:d3:81:b4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d82a254867a52e680e411bbff5abc20acd623a
Validity
Not Before: Oct 12 06:00:43 2026 GMT
Not After : Oct 13 06:00:43 2026 GMT
Subject: CN=540568859467aa5cac8a498b1c3949659cf18eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:e8:a3:5c:08:36:7f:b4:93:ab:e3:fb:6f:
cb:3c:63:ec:04:fc:29:10:fc:8b:47:aa:af:97:d1:
1b:94:d6:de:d9:67:b8:df:43:6c:3b:42:b8:05:96:
98:3e:7a:64:cc:cf:3d:b0:f8:89:98:2c:8f:07:d4:
40:19:cb:21:e5:17:a7:8b:5e:f0:0a:85:c1:68:8a:
56:4a:70:ba:eb:50:a7:77:16:c9:c0:8a:43:43:0b:
e6:0b:af:7e:22:72:cc:1d:f4:f9:9d:37:b4:f9:2d:
2d:f4:42:3e:5d:ae:8e:57:a4:84:df:cf:77:b9:9f:
c2:9b:03:3d:6d:c2:3d:27:ff:52:7c:e9:86:bf:88:
22:00:06:7a:e1:78:6b:8f:99:21:fb:37:62:fd:98:
90:f2:f3:36:2a:fe:dc:d5:52:5d:52:08:6c:a5:09:
ac:a9:15:b5:ce:a3:a3:d6:de:d3:74:ea:72:26:87:
92:fb:71:ee:bf:c4:c7:e1:83:85:89:8d:73:21:bd:
4a:a1:b0:5e:5e:11:30:03:b0:8a:b5:14:47:e2:fa:
61:fd:1a:6b:66:46:7f:01:ea:fd:4c:fb:12:e8:85:
b7:b1:ba:0f:28:b9:4b:29:ff:4f:ce:ac:b1:6a:a7:
9a:81:74:28:6a:7d:93:0d:7a:ed:b6:57:6e:29:23:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:68:85:94:67:AA:5C:AC:8A:49:8B:1C:39:49:65:9C:F1:8E:CA
X509v3 Authority Key Identifier:
keyid:12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f7:4b:40:93:32:66:59:d6:ce:90:21:dc:08:fd:94:6c:d4:
1b:3a:03:21:66:6a:89:6a:03:4f:cc:85:41:5e:af:ff:cc:4c:
33:5c:48:17:d1:7d:b9:b4:24:ca:6d:69:51:8a:de:5f:fb:3a:
cf:ec:9d:b4:f5:99:81:ae:24:e5:0d:25:db:a0:bf:d2:a7:40:
47:f4:b4:a2:f3:9e:66:91:2c:b4:71:23:6b:a9:b5:9b:08:3e:
b5:ff:74:39:49:7e:15:e4:cc:93:84:0a:40:5c:6e:d8:59:3b:
4b:4a:97:d6:ea:1c:13:12:6a:23:76:6b:b5:3b:c3:a0:d0:b2:
a6:46:14:ff:a6:bb:db:4b:4d:6f:2a:af:5c:ec:69:9e:00:13:
40:f7:47:6e:a9:ac:b9:37:30:57:a2:77:5e:70:d5:34:ee:aa:
89:8e:aa:fc:5b:e3:7e:fb:9b:40:33:25:3c:eb:49:74:27:13:
c9:4e:2e:14:05:27:66:d7:73:11:71:a3:b3:22:15:03:12:4e:
4c:9f:a4:ec:1d:c5:0b:e7:7b:12:1e:d1:a1:93:da:f9:3a:93:
3d:b8:b6:52:7c:6d:d9:a0:47:99:ca:8a:0f:3d:50:d4:d2:62:
b9:95:4a:38:86:d9:2e:9f:f3:81:19:8c:90:ed:46:dc:3b:6a:
5d:07:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:03:26 2026 by rpki-client