Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier: XxOKeD6yC/coudrhesXa1lfCGLwNbXZC9ZlVPJ4DLvg=
Subject key identifier: 17:2E:2C:0A:3F:B7:9E:77:0D:E9:2D:6A:73:58:46:D8:48:B9:24:8A
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 019CE3D9B01A5548ABC04C0A0B84FBD7D77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number: 7C
Signing time: Thu 12 Mar 2026 21:00:20 +0000
Manifest this update: Thu 12 Mar 2026 21:00:20 +0000
Manifest next update: Fri 13 Mar 2026 21:00:20 +0000
Files and hashes: 1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: +HYQfq30M5Y1mlT45rtns6HqdN73J2tDwKiUjex/jTo=)
2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:b0:1a:55:48:ab:c0:4c:0a:0b:84:fb:d7:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Mar 12 21:00:20 2026 GMT
Not After : Mar 13 21:00:20 2026 GMT
Subject: CN=172e2c0a3fb79e770de92d6a735846d848b9248a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:41:ba:27:2f:c8:45:57:3a:7b:5d:7e:ab:
79:1f:0b:d9:80:af:d4:bf:d1:cf:4c:69:e4:92:6a:
f4:c7:bf:70:c0:f7:b5:81:22:dc:ab:c7:5c:46:e5:
8d:d6:fe:14:8e:6d:7b:22:e9:5f:83:b7:0b:6e:04:
27:42:3f:c2:2b:8c:c1:3c:a5:d9:a2:d6:82:30:aa:
cf:da:64:7f:9d:6a:fd:43:be:fc:25:92:99:0b:15:
ac:b0:a8:94:ba:50:3b:fc:18:8f:78:fd:27:8c:3c:
70:84:7a:af:4b:0e:82:b7:0e:f3:7f:dc:d6:83:47:
c3:1a:c7:3e:0b:a0:e8:79:31:ff:80:51:77:ec:f9:
da:3f:2e:18:05:d1:ec:0c:41:5f:22:b6:1d:bd:01:
66:36:8f:bc:40:e9:b8:c0:2f:ab:9f:bc:f6:76:7b:
6e:70:a2:79:d1:8b:3a:7d:44:7c:54:89:ec:af:6f:
0a:32:ec:f3:2e:50:3b:b1:5e:ac:c6:d3:e9:34:16:
10:d7:4c:de:9c:e0:c1:8e:4d:30:cc:2f:ad:11:06:
47:4a:b2:91:f2:7d:c3:9a:c5:73:38:54:5f:88:22:
f1:f1:9f:5b:9d:af:81:85:7b:00:b8:88:3c:f6:f1:
c4:84:32:12:5f:40:58:ff:a5:48:a8:35:5b:2d:ac:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:2C:0A:3F:B7:9E:77:0D:E9:2D:6A:73:58:46:D8:48:B9:24:8A
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4d:83:30:ee:69:61:43:1d:cf:fe:0d:91:42:6f:84:c5:23:
7b:05:a0:ee:75:8a:07:55:61:b9:89:c8:7d:19:b0:b5:f9:5b:
bb:6f:0f:80:d0:f1:2e:92:e1:1b:16:83:31:3d:8f:4b:22:91:
be:78:3e:5e:0b:61:39:fa:f4:85:19:b4:ee:77:c7:02:66:f9:
7f:30:07:75:64:e9:0d:5d:1b:18:6b:20:f5:82:6f:2e:b1:35:
de:a4:b0:46:22:83:eb:11:80:97:5e:88:77:98:a2:26:8f:67:
fa:2e:2b:a9:d3:d7:0f:ff:e8:23:3f:52:50:88:1f:1b:43:5c:
20:35:eb:5f:34:a5:7a:ea:c6:17:1b:41:69:0c:77:e0:b5:66:
87:80:8f:9a:f9:98:82:52:ce:46:46:31:dc:97:6d:f0:55:e6:
14:cc:52:70:19:e0:91:90:d7:8f:62:3a:82:f4:dd:a0:29:25:
43:58:9f:42:c3:54:44:5f:95:f3:f8:97:c4:db:c7:4f:06:17:
c6:56:7b:f3:83:0a:c4:85:b7:47:fa:a1:54:10:99:d6:19:6e:
14:f0:a9:00:37:b7:7a:80:a0:0e:f8:1c:e0:8c:6b:cf:64:96:
ca:a0:9a:a3:dc:70:26:d7:8a:3f:34:59:07:71:e6:e7:b4:76:
c1:d9:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:56:17 2026 by rpki-client