Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: 24+BGUS9ndv9Ng+pWLDueu6+IvoQmeQr58kcAbW+7g0=
Subject key identifier: 97:FA:D3:FF:26:C9:8C:9A:D7:BF:1D:B5:67:34:A7:C1:5F:DB:87:B1
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 019DA3AF17D1BEFDF8F42CAC8C1632B0BE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:00:54 +0000
Manifest this update: Sun 19 Apr 2026 03:00:54 +0000
Manifest next update: Mon 20 Apr 2026 03:00:54 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: Fc9WG21LYeNdKnQdAIk/qF8/b+boaqNLMrFvVDE6MKg=)
2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:17:d1:be:fd:f8:f4:2c:ac:8c:16:32:b0:be:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Apr 19 03:00:54 2026 GMT
Not After : Apr 20 03:00:54 2026 GMT
Subject: CN=97fad3ff26c98c9ad7bf1db56734a7c15fdb87b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:ce:56:9c:c4:a5:a1:48:aa:4c:89:74:cb:
64:94:be:1d:92:4a:16:5f:ef:71:26:39:17:96:2f:
e5:cf:f4:c2:24:8b:9c:3f:7b:a4:c6:45:f8:52:30:
9a:15:e0:6e:b9:8b:69:a1:eb:57:02:72:6c:31:3a:
88:aa:ce:13:cf:a7:49:8e:70:b3:f6:81:41:2b:dd:
0b:81:8e:b7:77:bd:29:b1:2e:b7:d5:75:52:83:7e:
56:55:ec:69:19:dc:29:c7:cf:51:4b:76:52:48:9d:
d8:d9:a5:76:c9:d1:ff:02:5b:44:e6:61:26:2b:35:
28:2a:23:2c:52:d0:33:ba:fd:e0:12:fa:db:3d:97:
3d:de:68:cf:1f:f9:1d:86:c1:f2:9f:3c:1f:6d:ec:
38:98:81:87:42:c2:97:0e:45:21:d3:74:24:f6:68:
37:32:76:83:d6:72:2e:7c:98:97:0e:6b:85:85:e5:
b3:80:ed:e6:04:ce:3d:02:e4:22:9f:d2:75:1c:b5:
71:42:93:7e:52:75:a8:8b:88:30:d0:0e:08:95:1e:
50:bc:2e:08:9d:0c:7b:b9:ba:9a:a5:ff:71:7d:b5:
67:19:32:f2:74:2d:c7:5a:a6:6c:91:0c:85:55:cd:
88:a8:a5:8d:6c:66:02:b8:61:75:eb:93:27:c0:ff:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FA:D3:FF:26:C9:8C:9A:D7:BF:1D:B5:67:34:A7:C1:5F:DB:87:B1
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:03:5d:94:5d:99:84:7f:e6:d4:db:54:8e:c0:22:c0:cd:8c:
23:6b:91:31:f4:3b:a3:ed:45:5d:06:2b:22:c5:e9:70:a9:da:
4a:cf:13:e0:d2:51:11:ab:9b:1c:54:38:bc:c4:82:d8:22:3a:
c7:1a:1f:06:54:3c:db:63:4d:3c:bc:92:c2:22:d4:e2:69:aa:
5a:8e:96:f9:66:08:92:38:f8:d3:ef:9a:52:a4:09:a1:16:a9:
0d:91:e8:56:dd:b8:11:56:c9:75:d6:f8:28:14:1d:15:aa:54:
97:a5:43:88:2f:09:e0:2a:29:09:ff:3c:0a:13:3e:09:7d:2b:
29:91:54:9e:a3:e6:b4:6f:dc:7b:88:73:36:80:5e:65:3e:bb:
dc:3e:e3:86:f3:18:d0:f3:29:01:2c:37:61:3d:8f:cf:83:4f:
6c:5e:65:4f:ac:7e:ec:cc:60:7e:e8:f4:80:56:16:95:d8:94:
ee:f7:15:23:4f:8a:90:1e:56:55:f4:61:32:b7:2e:94:95:b5:
29:3f:45:2e:ef:e0:4d:75:b1:0c:35:5d:5c:0c:63:8b:9d:74:
79:9d:87:50:d6:a6:c9:5c:74:8c:7e:e8:7d:3c:21:24:00:ee:
9b:de:1c:21:85:8f:88:85:72:55:a4:75:39:92:ea:fe:dc:81:
e0:3a:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:07 2026 by rpki-client