Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: 3wFMxbjzoOUZJhhs/gdJyJPjvlLQwQKMAoF591mXwyU=
Subject key identifier: C6:AB:49:23:77:CA:AF:8E:B8:81:40:B2:56:F3:AC:44:EC:9F:27:D7
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 01A13FA70C790D5847B2ED042D1382E111A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 13:01:14 +0000
Manifest this update: Thu 15 Oct 2026 13:01:14 +0000
Manifest next update: Fri 16 Oct 2026 13:01:14 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: VOayEZWoKeU9TxjwKGzaCAYevO4r1/INSs6xiGTY9Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:0c:79:0d:58:47:b2:ed:04:2d:13:82:e1:11:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Oct 15 13:01:14 2026 GMT
Not After : Oct 16 13:01:14 2026 GMT
Subject: CN=c6ab492377caaf8eb88140b256f3ac44ec9f27d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:25:96:d0:50:fe:0f:14:39:91:90:30:ae:
b7:80:73:03:33:f2:06:c4:2a:a3:6f:19:45:23:a3:
09:29:f1:28:80:b4:45:3f:a7:e1:cf:91:8b:92:11:
51:8a:8e:2b:d6:90:7e:f1:dd:ba:71:97:91:6c:c1:
ee:34:ef:14:93:1b:52:93:b3:c6:cc:71:f5:92:3b:
b1:18:c3:91:1e:50:ec:f5:eb:dd:dd:c6:71:63:e1:
9a:03:05:14:b8:e5:e4:02:27:ac:a0:c6:fc:df:2f:
48:90:2e:dd:ee:6d:c6:94:08:ec:81:73:d4:57:ef:
43:81:3c:f6:47:a1:df:b0:3f:4a:d1:b9:a1:76:fa:
ee:40:0e:75:55:0e:34:df:ce:a2:86:69:23:2b:b3:
01:ad:39:49:12:0f:aa:7f:20:d4:34:31:8d:3b:4c:
7d:27:9f:90:60:03:2b:e5:71:6b:c6:11:c1:11:d6:
31:6a:dd:bd:05:8a:27:1f:87:f3:57:ff:49:2f:4a:
00:13:09:a9:ae:07:51:fd:66:eb:28:5a:87:7f:c9:
57:d9:b8:6f:a5:bc:56:6b:17:bf:6b:59:35:13:b5:
a6:cc:d5:45:4b:cd:10:9d:ee:5d:25:50:83:e5:bd:
c2:c6:d2:ef:8d:85:43:fe:cd:5c:c6:dd:7c:36:c3:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:49:23:77:CA:AF:8E:B8:81:40:B2:56:F3:AC:44:EC:9F:27:D7
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:7e:f7:7f:e9:a7:0c:2f:09:99:e8:16:8e:5d:a8:1e:2a:
7d:9b:29:99:ea:a6:7c:32:a5:b5:ac:ac:d3:d6:f7:06:bb:c2:
ca:33:94:80:2d:86:c2:29:8f:51:e3:7d:20:99:91:e9:14:51:
ce:94:7c:58:44:d3:6e:62:1f:54:6f:f3:cf:8d:76:36:54:40:
91:91:90:93:b9:55:3a:88:21:7d:09:9f:20:91:f6:02:e6:79:
0e:10:80:c3:ff:20:cf:9a:d3:9f:58:30:f2:e3:7c:33:1f:ee:
6f:a4:fc:55:2e:8f:e2:bf:20:9e:67:06:f8:71:70:42:7b:41:
56:01:02:bb:85:33:66:db:65:94:98:6f:a3:cf:a9:aa:c8:fc:
ef:61:2b:28:62:07:6d:ba:5b:66:14:96:ae:35:7b:d9:8a:63:
87:03:5f:e2:06:eb:fc:c6:82:d3:ab:3f:7c:6b:ec:b5:46:1e:
48:24:a6:17:58:6d:15:77:2e:b7:db:84:84:0e:de:ff:85:e4:
4d:51:f7:b7:87:58:2d:49:2a:2d:0d:65:ac:72:a7:ab:b0:52:
dd:98:cf:9c:52:3d:27:36:5f:d2:5f:a1:21:81:08:e1:48:a7:
91:95:7e:db:a3:71:32:48:22:7f:a3:c4:6f:d3:e2:00:0e:09:
f4:27:bf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:07 2026 by rpki-client