
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: 74BJ8fWmuIzOMDG0hrfMMeYqvQgHImCmbbijSQjRbbs=
Subject key identifier: DC:40:E1:05:84:EC:D3:06:E1:AE:79:A9:19:CD:98:0C:34:23:39:9A
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 01A00101AE45D8BE4D20A4196DAA3A1CAFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 16:01:22 +0000
Manifest this update: Fri 14 Aug 2026 16:01:22 +0000
Manifest next update: Sat 15 Aug 2026 16:01:22 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: 6LT89IzDAdGlMlpnl+b4+amFAa61eFHQD4DlwxXBdcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:ae:45:d8:be:4d:20:a4:19:6d:aa:3a:1c:af:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Aug 14 16:01:22 2026 GMT
Not After : Aug 15 16:01:22 2026 GMT
Subject: CN=dc40e10584ecd306e1ae79a919cd980c3423399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:61:f0:09:67:97:f2:e1:70:11:3e:61:4d:
50:d6:41:73:97:08:b0:d5:5d:14:55:5d:54:53:f9:
36:e1:a5:60:6b:db:e5:0f:c0:47:7e:4b:33:93:9b:
a7:d1:6f:4a:06:0d:26:8a:2d:e4:2f:96:95:4b:1b:
9a:72:85:61:a1:42:06:42:95:a8:ce:7d:02:7d:41:
3f:05:67:65:11:4e:8c:9e:6b:39:03:0f:c0:c8:81:
ee:3b:59:e7:fd:93:b0:09:55:40:6b:83:55:dc:8d:
e7:27:7c:1b:83:09:bd:4f:fe:27:ee:2d:9b:cf:58:
04:e4:d9:5f:65:bf:2a:ee:f6:5f:5f:33:74:72:df:
fe:ee:8b:5f:90:46:58:14:61:01:5c:9e:f2:79:9a:
51:06:bc:ad:47:c7:8b:c9:d3:c0:64:b4:58:59:ae:
2a:bf:1a:83:97:61:ef:4e:80:97:68:85:75:96:01:
83:f1:a5:47:d6:04:b3:2a:01:d8:a8:f8:94:14:39:
52:c5:5f:74:e8:1a:ad:47:b9:05:c8:f9:cf:6d:6f:
94:63:a8:35:d1:92:4b:76:cd:03:56:29:da:35:0e:
e4:26:90:5d:bb:3c:ad:61:01:0d:e1:3f:67:f6:bb:
38:c0:b7:bf:62:79:11:06:26:06:de:a6:b0:3f:c7:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:E1:05:84:EC:D3:06:E1:AE:79:A9:19:CD:98:0C:34:23:39:9A
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:68:89:eb:f4:3f:54:58:1d:1e:c7:34:09:05:c3:56:48:
25:da:b0:4e:c3:e3:96:46:ce:71:b5:0c:7e:e2:36:c5:63:95:
95:79:f8:3b:26:ca:bc:a6:34:45:4c:29:11:e8:03:a6:6d:06:
27:c1:9c:bb:97:24:4d:9e:80:92:1f:43:35:c8:70:a3:8c:c7:
1e:fa:15:57:0f:52:43:2f:9b:26:bc:0c:92:8e:b7:31:90:f6:
b6:4b:b5:21:72:02:6d:5c:ca:b4:88:e2:90:cf:14:70:0b:28:
94:79:08:47:f1:94:ca:cd:54:78:7b:46:8a:d1:08:f1:b2:12:
35:52:e4:8a:c3:98:84:46:1c:ea:9f:68:22:30:65:69:cd:9b:
0b:1c:e3:d6:5f:be:83:4d:89:cb:fe:78:92:99:72:76:8e:c6:
fd:f7:55:5e:3b:78:e4:08:e8:54:d6:8d:1a:75:b6:91:fd:ac:
ab:e6:4e:da:b9:26:2a:f0:9c:58:43:24:59:ab:bd:e8:64:ad:
23:68:73:0c:b5:f7:7a:2a:dc:bc:d5:d9:4c:4a:da:7f:90:c0:
88:5b:99:31:8a:d0:92:f7:fd:15:71:9d:93:95:56:a9:73:9a:
93:43:40:22:05:c0:68:6a:c4:4a:cf:4c:1e:c2:3e:df:90:50:
be:86:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client