Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: d5ujle4MVmR5fe9WDY9mYrxBRYWrGBizawG7Bkkmuk0=
Subject key identifier: C6:8B:07:C1:AA:81:A3:5A:75:34:E0:69:2A:68:01:23:40:3B:4E:65
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 01A0C8FD701EBE5E1D5B00072442CFBC4E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 12:00:47 +0000
Manifest this update: Tue 22 Sep 2026 12:00:47 +0000
Manifest next update: Wed 23 Sep 2026 12:00:47 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: dbeVqKWwIEGdpeF7AEq0IqR5kYMoN4hDXQ346Cw5MUE=)
2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:70:1e:be:5e:1d:5b:00:07:24:42:cf:bc:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Sep 22 12:00:47 2026 GMT
Not After : Sep 23 12:00:47 2026 GMT
Subject: CN=c68b07c1aa81a35a7534e0692a680123403b4e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:e7:d7:71:fe:74:34:64:06:fc:06:0f:28:
a5:10:a7:51:b1:a6:da:10:3f:95:c3:6b:ae:02:b6:
f6:db:14:47:f8:c3:6f:54:32:18:72:ac:6f:e6:71:
7e:98:39:37:ea:ff:8a:25:96:67:23:8c:ab:db:59:
44:a7:71:a7:63:f1:87:97:17:2e:00:da:94:22:5d:
90:2f:d6:ea:35:61:71:de:f1:0d:c3:46:1f:b8:89:
35:eb:6f:ec:28:e7:03:50:0b:99:e9:5a:3a:06:0c:
ea:7b:fe:b4:95:a1:f7:59:3b:82:65:06:e0:39:73:
11:83:b7:02:76:ef:94:bc:b3:cf:c4:c8:22:03:5e:
30:1f:4f:70:3a:a1:41:43:91:62:4f:8f:15:8a:2f:
67:c8:c0:58:d9:9e:98:dd:a0:2c:22:ab:1d:63:c9:
63:68:58:1a:53:44:7c:c0:46:71:7b:5a:1f:c7:4e:
c5:5a:d2:c6:46:53:f9:e2:5c:ea:30:2d:11:91:58:
a6:47:89:e7:26:70:1a:fb:9c:da:28:59:2c:b5:cb:
bb:6f:b1:1d:c1:41:82:84:f8:1b:20:81:a7:bd:37:
db:eb:40:2e:a2:3f:8a:8f:7f:19:f1:30:a7:a1:d5:
c7:c6:c0:0d:66:06:bd:25:86:3d:8e:d1:43:5d:c3:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:07:C1:AA:81:A3:5A:75:34:E0:69:2A:68:01:23:40:3B:4E:65
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:24:aa:db:a5:1d:ca:6f:14:f9:9b:27:70:70:8a:7b:37:66:
a5:fc:14:e8:cc:c0:9f:30:29:88:63:c6:7b:46:47:c3:42:b0:
85:d4:df:5d:71:e6:55:fc:96:41:2d:72:fb:1d:0c:8f:2d:3a:
e8:f5:a0:75:0f:c0:2c:3d:f1:fd:9a:fc:83:7b:57:36:84:ac:
c6:31:48:43:6c:4a:2e:98:e3:9c:a6:cf:8c:b1:f6:ad:e6:c4:
73:ad:0e:96:69:b1:65:52:fe:35:0c:7b:76:fd:bd:92:34:c1:
08:29:0b:76:be:fa:bb:bd:4f:97:43:c3:7d:1c:ad:58:47:30:
ae:30:c0:b9:85:d5:8a:81:0b:33:55:25:9f:82:bc:84:8d:d4:
15:cf:03:be:92:88:4b:db:d7:01:7f:db:ea:94:57:87:6f:d1:
99:96:6d:a1:72:cd:50:cf:42:82:a9:9e:89:28:88:13:3a:fc:
f3:29:8f:ef:81:35:99:21:1a:f1:ae:b6:1c:b1:81:55:77:e7:
ef:fb:51:b7:2d:8a:c4:86:f7:bd:a4:02:5f:3b:ca:ca:b3:f0:
a0:2c:bb:77:36:45:43:af:ca:26:53:c1:5c:1d:da:ad:56:19:
63:40:d3:0b:2e:3d:8c:e6:b1:3c:a2:e8:9c:07:7d:21:16:14:
82:f0:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:01:24 2026 by rpki-client