Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
File: EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft (raw, json)
Hash identifier: 0BJL61kW2TY3xIhxhn6TPkwf0s/BcNyfZdMUatcfHn8=
Subject key identifier: 11:AA:80:57:82:BC:36:11:BE:CC:BD:50:33:1C:F0:3A:3E:B6:96:7C
Authority key identifier: 12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
Certificate issuer: /CN=12d82a254867a52e680e411bbff5abc20acd623a
Certificate serial: 019F916D405A063DA2C655EAC3B8591910C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:23 +0000
Manifest this update: Fri 24 Jul 2026 00:01:23 +0000
Manifest next update: Sat 25 Jul 2026 00:01:23 +0000
Files and hashes: 1: 0CXMCUKQ4CdjBlvAt5pm0hEnETo.roa (hash: q7VCvKAGi9XQDJti9raevgXGzbHYgG1g/0cCScoRD+k=)
2: 2Z06w-6aRdtV0QK4J8t70JdDrjs.roa (hash: k7e4lEr8W/EMx7CcjgiyyJjZ/itKU+JMkO7hCLhiTdA=)
3: EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl (hash: SFnxn/0bpBfAtusIm6e7rP7lAmfb0gMQpC/cCIMSJL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:40:5a:06:3d:a2:c6:55:ea:c3:b8:59:19:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d82a254867a52e680e411bbff5abc20acd623a
Validity
Not Before: Jul 24 00:01:23 2026 GMT
Not After : Jul 25 00:01:23 2026 GMT
Subject: CN=11aa805782bc3611beccbd50331cf03a3eb6967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:ef:f6:8a:24:b4:4f:96:bb:9a:2d:96:f1:
d3:31:2b:4a:a6:a7:67:24:e4:2f:fa:ac:ad:ae:f1:
b5:84:a2:15:47:eb:1b:fc:ab:75:84:b8:ac:69:68:
a4:51:4b:a6:cf:e6:3b:0e:f1:89:39:64:83:b2:ed:
85:81:14:9d:fa:12:aa:15:0a:80:22:5a:b9:45:63:
ef:66:ef:e2:c3:65:2b:e6:b6:40:8e:38:a4:16:ee:
16:8b:17:85:eb:9f:42:a3:57:41:15:57:78:c3:90:
62:04:90:50:ac:c7:fa:54:bc:9e:51:0e:4a:eb:49:
54:6f:0f:7c:77:1b:40:35:7c:3b:0e:67:86:0b:97:
de:90:87:78:c6:21:65:e0:2d:95:4a:6f:93:93:b4:
c4:1d:b4:d0:ee:0f:05:e5:45:a6:a2:fc:df:73:cf:
53:a2:f5:2c:0d:4d:8e:b1:e3:a8:b5:83:9b:3b:7c:
f6:15:77:d6:cc:eb:13:7d:a7:72:c6:a8:6c:bf:73:
15:a6:3b:1f:40:44:68:38:1e:77:59:e9:24:d0:09:
cf:34:9e:39:ad:45:9e:bf:51:36:e7:aa:5b:7d:16:
1d:ef:86:26:00:ee:82:f3:db:f9:83:a9:3a:86:02:
c9:59:e3:c2:25:13:ba:b1:48:5b:b4:d9:ba:64:2c:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:80:57:82:BC:36:11:BE:CC:BD:50:33:1C:F0:3A:3E:B6:96:7C
X509v3 Authority Key Identifier:
keyid:12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:b2:a3:c7:8d:e1:81:b7:a3:a2:59:6b:c8:13:89:aa:97:
32:3b:81:23:e2:38:00:06:22:4b:bf:ca:b0:1d:08:fd:6f:c0:
31:32:b3:5a:f6:68:e0:25:19:5c:40:ab:68:a7:ae:d0:7e:65:
7a:2f:db:9e:1e:f4:85:8c:d9:ed:ac:3b:c3:db:63:4d:1d:81:
a2:e7:c3:09:b6:44:81:08:f5:49:8d:1e:e0:1f:33:09:63:b9:
31:02:2c:fc:2d:c4:eb:37:00:27:b4:9b:14:0e:51:90:99:43:
91:99:7b:c4:32:cd:0e:df:ad:78:0b:9e:51:71:15:14:08:fc:
88:9b:16:93:e5:23:78:12:d4:ac:d6:b2:e4:71:5e:d4:61:65:
79:01:f7:60:5d:bf:75:dc:cd:48:ee:9f:77:9e:2a:28:8e:cf:
76:d9:7d:da:7d:62:a1:5d:f1:19:63:1a:55:43:e3:33:8f:30:
95:ba:d7:3a:08:4b:10:a5:2e:ac:cb:20:77:5f:a8:77:48:71:
28:f4:b1:2d:72:1f:87:a3:bc:fb:1e:47:62:59:0e:a7:5e:06:
c4:36:27:0c:40:d9:ba:92:1c:0c:2b:67:02:54:3e:1d:dc:12:
5c:c0:e1:e0:40:e8:83:c2:03:d2:2d:eb:13:c1:5f:c1:43:3e:
03:21:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:21 2026 by rpki-client