Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: zkdUlJOXMTcv3xo773P0yqkZ+e5kI7VChyUGJ8PpFEk=
Subject key identifier: DB:7B:75:EF:93:1A:07:7F:FA:B9:41:61:0B:0A:B3:48:99:1F:1A:7A
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 01A0DC4DA24214E03E6EC39C52837B0C8923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 06:01:10 +0000
Manifest this update: Sat 26 Sep 2026 06:01:10 +0000
Manifest next update: Sun 27 Sep 2026 06:01:10 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: 6zwPQXT7NcqgUjvEr+BIT/RIflNK+5wbQ3X8bIuFnHU=)
2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:a2:42:14:e0:3e:6e:c3:9c:52:83:7b:0c:89:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Sep 26 06:01:10 2026 GMT
Not After : Sep 27 06:01:10 2026 GMT
Subject: CN=db7b75ef931a077ffab941610b0ab348991f1a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:7c:d8:71:13:1b:b1:6e:a1:61:90:8d:4b:
3c:e9:5b:0a:c5:a3:70:f9:fb:08:1f:53:66:cd:de:
76:83:9f:ac:6a:d3:f5:85:86:f5:2c:42:27:21:92:
19:5d:32:ea:9d:eb:6f:61:95:c8:2d:b6:24:25:16:
0f:8d:54:26:fe:9a:d0:70:94:3c:47:19:0a:5c:97:
3b:d3:63:e2:46:2b:80:98:85:5a:1c:82:31:1c:fd:
cb:13:20:01:09:73:46:ef:23:29:e0:8a:2b:47:fe:
f8:7b:da:a5:32:dc:95:cf:4d:b2:33:4c:56:ec:13:
ea:0b:5a:67:ba:b2:38:9c:90:9a:a3:f4:b9:6b:ed:
ac:f2:dd:4f:66:e3:da:25:ea:aa:63:b3:26:f3:e3:
ec:13:3e:29:2a:60:f8:e3:32:f0:cf:a1:ad:a5:6e:
2a:bb:38:ee:cc:d5:51:83:c2:6a:41:8d:c9:df:b6:
8c:c3:bb:28:4b:eb:2e:0c:73:59:f2:cd:8e:32:5b:
91:b1:50:95:c2:71:13:ad:f4:f6:84:99:fa:2d:e3:
7f:4a:b8:c6:64:4f:7d:42:a2:43:b7:83:7b:6a:e1:
b5:8d:7b:ca:1d:21:34:45:c8:64:2b:1a:d6:33:ff:
6d:ba:30:56:d7:c5:02:64:44:7b:b3:b3:6e:83:c5:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:75:EF:93:1A:07:7F:FA:B9:41:61:0B:0A:B3:48:99:1F:1A:7A
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5b:04:b3:a7:fe:6a:e9:e4:40:2e:a0:30:44:c6:6f:4a:87:
d6:af:d5:b9:90:1e:0a:7e:61:da:cb:4d:e6:bc:8c:ca:3e:fa:
6c:0c:54:60:a2:cd:3c:4b:5a:d5:31:fb:b1:30:29:3b:a0:a9:
1d:c9:ae:b1:f9:f7:ea:19:3b:dc:11:a8:12:fa:94:bd:8c:ed:
ed:f1:a6:5b:46:73:4d:25:70:1a:1a:a5:6d:40:f1:90:0a:12:
12:ed:58:7c:7f:c9:eb:37:c2:92:05:d4:87:00:3a:83:17:ee:
d9:09:89:19:81:0b:40:52:d0:0e:da:b6:02:05:23:ee:44:db:
20:20:96:45:e2:2e:32:62:05:31:95:c1:0b:08:19:10:6b:64:
f3:fa:06:f8:1e:0a:a7:3a:88:c1:b6:1d:fd:3d:eb:9e:13:60:
8a:5e:0a:35:cf:6e:fd:6b:1a:7e:6e:cb:56:3f:da:0a:7c:be:
37:06:06:05:88:8e:af:d0:17:f7:6f:0c:25:dc:9c:2d:38:13:
72:e9:98:40:ab:b1:91:91:21:2c:2d:06:d8:4f:ad:be:18:f9:
26:ea:49:4e:fb:78:16:2d:67:13:4c:bf:97:c8:e9:0c:90:27:
68:92:7b:13:ae:5c:b3:a3:a3:84:87:63:ab:5c:cb:ec:df:b9:
db:55:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:49 2026 by rpki-client