Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: S9MHnpfaEZ8ycy2fT/m31hjc6dL4PNzhSIQWQzrJsuM=
Subject key identifier: 97:0A:D0:80:E3:C8:B2:F9:7D:60:7B:BE:34:51:21:4A:F0:2B:AF:97
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 01A0C66A7205C3DD773EEAC7E6286F8A14E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: 0115
Signing time: Tue 22 Sep 2026 00:00:59 +0000
Manifest this update: Tue 22 Sep 2026 00:00:59 +0000
Manifest next update: Wed 23 Sep 2026 00:00:59 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: +lruNaGLa2A8Nzk+6/+7wOZ+MSUGBkX+pSTw9l/Ow3M=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:72:05:c3:dd:77:3e:ea:c7:e6:28:6f:8a:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Sep 22 00:00:59 2026 GMT
Not After : Sep 23 00:00:59 2026 GMT
Subject: CN=970ad080e3c8b2f97d607bbe3451214af02baf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:94:1c:56:88:a8:36:d3:96:7c:83:c7:11:
06:4e:7b:fc:45:56:6d:01:09:31:89:55:5d:34:fb:
ac:dd:88:96:e1:ed:3a:07:7a:e7:79:43:e6:55:64:
aa:76:33:4e:4a:56:17:22:ec:b3:f6:ef:54:6c:24:
53:b9:7f:c7:d5:c2:7d:86:81:ac:06:e3:46:b4:f6:
cc:18:47:fb:d6:e2:a3:d0:77:4e:5d:69:6f:7f:c5:
0f:00:c4:55:81:17:4e:0d:ff:df:f5:77:2b:ab:02:
c9:fb:50:15:ba:61:65:54:df:9f:8a:25:af:ec:80:
22:3e:00:df:89:89:fc:ef:4f:dd:9d:51:76:0a:23:
69:05:87:62:6d:22:db:5a:47:21:aa:33:55:1f:8f:
cf:ec:87:d3:43:c2:87:87:4d:25:9e:c7:35:24:15:
08:88:7e:4b:f2:45:01:1c:0e:a9:ff:50:85:54:e7:
cc:67:2b:00:1e:4f:9f:8a:22:fc:fe:5d:7e:19:bf:
f7:0b:fb:fc:d8:1f:2f:b3:70:63:86:37:ac:ae:c7:
3d:a5:a5:e5:ea:51:78:a5:4f:d3:27:e5:f2:c6:18:
b8:db:12:7c:bd:47:07:b6:40:c5:95:94:17:5a:3b:
9d:29:32:c5:51:26:6c:5e:6c:51:59:d5:3e:37:df:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:D0:80:E3:C8:B2:F9:7D:60:7B:BE:34:51:21:4A:F0:2B:AF:97
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:ed:c4:67:43:d7:19:25:2e:2e:e3:fe:d1:68:22:58:9c:
25:77:82:d7:b6:07:36:e2:c8:c3:d6:a8:88:0f:a1:e0:99:08:
54:f4:12:73:28:e2:5b:9e:6d:92:4b:d9:8d:20:42:8d:02:85:
1a:7c:0b:1c:9e:80:cf:56:15:8e:2d:f8:fd:cc:4c:c1:55:98:
f1:45:c5:8f:19:9c:c3:4e:41:58:bd:c7:5e:85:1b:ec:39:50:
89:7e:02:a4:d1:f3:ec:80:4e:59:e5:76:57:56:4b:b3:bf:3f:
77:fd:96:68:96:eb:a1:91:91:4e:78:bd:04:97:0f:51:a5:c0:
06:fa:4c:12:76:31:f1:27:f4:74:9c:4f:c6:e8:91:12:b4:50:
ac:79:58:41:9a:5f:61:19:ce:1d:16:00:3d:f1:a8:20:5a:32:
7b:b7:e2:4d:29:de:7b:60:2a:74:54:63:01:1e:e0:aa:c7:bc:
96:b8:be:11:f6:7d:f2:e1:f4:14:a7:fe:39:6f:ae:d5:11:8a:
0a:2f:93:d2:55:87:13:1c:45:04:b2:9c:9c:64:36:0f:49:05:
ef:4a:02:c5:75:da:97:b4:2b:67:a2:dc:f0:25:30:cd:b0:a8:
85:c3:c6:54:2b:30:42:14:9a:31:95:5f:ab:29:ec:24:3b:87:
6d:50:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:13:05 2026 by rpki-client