Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: 1j1nOPyCXW+KVJmQlhDNDcIGR+tkH+uxpNhVyHkgX/Y=
Subject key identifier: AA:9C:73:58:43:3F:83:DA:BA:AE:43:5E:0A:38:08:75:1F:BA:0E:CA
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 01A17C9763B917F2B16E73816FF739BA652A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 09:00:58 +0000
Manifest this update: Tue 27 Oct 2026 09:00:58 +0000
Manifest next update: Wed 28 Oct 2026 09:00:58 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: 1MVUHIM+3dIyfzA2C+4CpdOsCwXcmWaEKL69U1E36o0=)
2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:63:b9:17:f2:b1:6e:73:81:6f:f7:39:ba:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Oct 27 09:00:58 2026 GMT
Not After : Oct 28 09:00:58 2026 GMT
Subject: CN=aa9c7358433f83dabaae435e0a3808751fba0eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c7:c5:e6:9f:4d:10:12:d7:2a:07:64:95:ec:
77:db:67:c4:4c:ff:b7:88:32:8d:16:53:41:89:2b:
60:6c:98:4b:52:38:ad:b1:c3:cd:94:d7:21:9a:80:
47:79:70:be:a2:e0:10:6f:5a:1b:16:35:cc:f5:f0:
6e:d8:54:24:75:40:13:a2:6f:f4:3d:2c:a3:53:97:
be:9c:4e:e9:da:e8:b8:fb:f3:51:5c:98:4e:b3:f6:
6b:d6:40:d9:9c:7b:4b:0b:af:c2:52:d5:a3:36:0f:
52:e3:ad:c8:38:36:f8:e4:a2:2a:88:d3:fa:5b:80:
3e:a7:b7:31:6e:f8:ec:7a:33:33:2f:0f:b9:ef:74:
c3:39:ec:4f:49:fa:f4:40:c9:e4:94:5e:31:b0:d5:
f3:37:c2:bc:2c:8f:89:68:a3:16:6a:e6:fe:03:f0:
7b:27:13:07:13:05:86:43:a9:50:a0:3a:cd:8a:fe:
9e:0e:e2:6f:e5:66:2f:46:a4:b2:76:28:30:87:80:
e7:c4:4d:05:2c:42:bc:95:3a:06:4c:07:75:d3:2f:
37:ac:1e:14:0a:fc:3b:78:ec:37:a8:40:0e:d8:9c:
82:73:00:c2:93:99:85:60:ba:38:b4:03:db:79:e1:
40:6f:e0:49:04:f9:6c:fa:ab:3f:32:27:5e:cc:67:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9C:73:58:43:3F:83:DA:BA:AE:43:5E:0A:38:08:75:1F:BA:0E:CA
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:b0:cd:29:dd:72:d2:c9:3c:1d:16:d9:06:d2:d3:b9:2d:
83:c2:7c:76:7f:d7:f0:00:65:c6:df:45:ae:d3:17:1e:34:6b:
1f:c5:08:12:b0:23:c1:d7:77:a5:88:02:c8:b6:c5:c3:3d:2c:
fc:99:06:7e:c7:d1:d4:05:e3:47:c3:17:48:f8:0f:1b:2d:17:
d9:3f:5b:a9:2a:cb:b1:af:80:5c:9e:60:b7:02:71:0b:3a:e1:
48:a3:da:48:8f:a1:47:57:b4:61:30:fb:f4:d9:9f:5c:39:75:
30:7e:b8:c6:2b:5f:5f:b7:4a:2e:9c:4a:98:a4:36:3d:0b:11:
12:8a:6e:0b:f9:c5:65:3e:87:20:1b:d3:b2:4d:7f:9c:5e:b2:
ba:f2:13:e5:66:4b:7f:8f:06:5e:96:1c:c6:c6:bd:d9:1b:25:
a6:a0:73:06:a8:76:f8:54:ff:19:46:33:a4:17:5c:c2:08:01:
dd:74:86:a6:b9:ae:50:b1:1b:6e:94:f6:b6:78:4f:dc:d9:1f:
05:a2:4f:d9:1e:64:f7:dd:a1:b8:37:06:64:4a:19:11:17:35:
2c:be:69:58:ef:0d:19:8a:a7:03:df:73:22:d4:a6:c0:9f:03:
ea:3a:d3:9f:5c:f8:8f:6f:b8:bd:77:10:8d:c9:8c:d6:c3:7f:
be:92:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:37:23 2026 by rpki-client