Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: vJJZEAxt9w96j+nDZO7oHkUcvOl/fPpOVFtjXbY9Bzw=
Subject key identifier: 5C:B4:20:31:54:02:DF:93:86:BA:79:88:6F:7C:BB:8B:15:F5:17:F9
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 019FA898F5516BE19210A8840969B1E929F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: 81
Signing time: Tue 28 Jul 2026 12:00:24 +0000
Manifest this update: Tue 28 Jul 2026 12:00:24 +0000
Manifest next update: Wed 29 Jul 2026 12:00:24 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: 6IxhFnUNHX0eGQVdg8y7kCGmHJhK2LvCbxCO70hWlQs=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f5:51:6b:e1:92:10:a8:84:09:69:b1:e9:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Jul 28 12:00:24 2026 GMT
Not After : Jul 29 12:00:24 2026 GMT
Subject: CN=5cb420315402df9386ba79886f7cbb8b15f517f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:92:0a:72:eb:9d:2a:84:c0:77:95:6f:6f:
2a:02:14:34:be:e6:cd:3b:bb:4b:39:8d:47:c4:77:
b7:f7:2f:33:71:9a:1b:5d:46:27:19:9e:b5:e4:53:
3a:43:6f:13:72:37:c3:7b:7f:4b:f6:92:35:8f:6d:
69:d8:f4:ce:de:cc:76:c9:1e:9a:96:98:c2:d9:00:
d6:67:a8:d7:1e:a8:a7:84:18:42:a7:88:68:9c:c6:
c7:92:92:9b:04:74:b0:c4:7b:e2:c8:25:bb:66:12:
fb:98:cc:62:6b:3e:1a:61:2a:ff:4b:d0:1f:6a:92:
11:c3:23:b3:2d:31:8f:b0:75:a2:b6:14:68:a5:5e:
9a:a1:72:ca:6b:dd:08:f3:2b:93:11:61:b2:55:08:
a1:1e:e9:36:be:2b:9f:fa:16:a6:97:e6:2d:aa:58:
40:5e:8b:0b:92:84:50:27:1a:23:75:a9:d7:20:f9:
43:94:fe:59:a7:36:2e:fa:8b:4d:df:1b:ff:01:f4:
81:6f:88:4c:59:10:72:79:72:55:74:ee:91:ce:a9:
5f:b7:0d:9a:3c:ac:1e:ea:cb:48:87:a0:c9:ff:71:
c0:52:cb:d5:d1:c8:23:3b:93:f5:88:75:58:ea:da:
52:e4:b9:5f:36:df:18:14:b7:51:07:ca:7d:02:90:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:20:31:54:02:DF:93:86:BA:79:88:6F:7C:BB:8B:15:F5:17:F9
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:23:76:f7:96:3b:10:8c:7d:01:7e:14:a2:48:4d:f7:42:36:
e1:aa:af:d8:76:24:74:9e:98:3a:cd:39:8d:66:e2:15:02:37:
35:78:38:17:5e:d1:99:8d:cf:9d:53:a5:46:2e:a7:fe:67:4f:
11:5d:b3:e9:8a:a8:64:86:3c:f6:95:0f:43:c1:f6:94:03:9d:
fa:e2:bc:2f:bb:d6:7d:a7:80:66:11:18:7b:47:32:5b:7c:ea:
ab:42:4c:e6:37:16:93:df:72:14:1c:3d:ad:c9:52:49:9f:f5:
34:d4:0e:a8:c8:ad:e2:ea:73:33:62:8e:93:82:8e:29:c3:6d:
cf:36:bb:20:4d:6a:6c:a9:bb:df:e4:33:14:1c:24:e2:09:2d:
ae:92:c7:e5:b6:52:42:9c:22:3f:b6:d5:05:1f:04:7f:f9:03:
2c:9f:4e:51:ba:0b:19:a1:90:9d:99:d6:a1:61:f2:9b:ea:a9:
29:2e:dd:a5:e6:38:f4:c5:25:52:84:b0:62:51:26:e3:89:dd:
71:c8:06:da:5f:25:9d:00:3c:62:b5:5b:83:df:f3:2e:60:d3:
f0:7c:0c:a4:95:93:ee:37:c4:b9:03:a4:e2:47:f7:19:73:87:
79:4d:96:72:d5:0f:97:36:84:c2:d1:d4:3b:8b:b0:bf:5c:09:
82:31:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:24 2026 by rpki-client