Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: ucnYAQTqPkBPkgtR4FNnjteCm+SzrqGX/x5bhyRTfB8=
Subject key identifier: 2C:53:B8:A5:0D:06:FE:31:B8:B5:DC:04:D2:A5:C0:E3:3F:69:22:14
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 01A0D9BA8277856AC34F56BB8BDDA5D0CDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: 011F
Signing time: Fri 25 Sep 2026 18:01:13 +0000
Manifest this update: Fri 25 Sep 2026 18:01:13 +0000
Manifest next update: Sat 26 Sep 2026 18:01:13 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: acYbUtSXe79XNH+lB7BsSAK2NuaClL3q9SHFyEaGDMA=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:82:77:85:6a:c3:4f:56:bb:8b:dd:a5:d0:cd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Sep 25 18:01:13 2026 GMT
Not After : Sep 26 18:01:13 2026 GMT
Subject: CN=2c53b8a50d06fe31b8b5dc04d2a5c0e33f692214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:19:f8:5a:93:ef:53:75:17:32:14:a9:82:
45:00:0a:ad:36:68:4e:45:e9:72:1d:ad:d0:05:81:
41:75:cf:fe:9a:1d:d3:d3:20:7a:d9:7d:e3:5b:36:
33:d0:15:4c:75:d0:02:5a:dd:7d:3c:b3:9c:62:58:
39:c6:80:c1:43:35:6d:02:0d:d0:67:5c:50:7b:dd:
2c:10:fe:32:bf:d5:23:dd:36:2f:9e:bd:15:34:30:
e9:e7:08:51:1f:b8:99:ad:3e:8b:ed:9f:d8:dd:96:
f5:8f:e5:ea:56:78:24:28:6b:86:40:ff:c5:d4:93:
30:97:43:56:2e:ba:f1:65:fb:63:77:83:cf:45:5e:
ff:35:8d:0e:27:0d:8f:e3:5c:2f:ac:c8:1d:88:27:
df:4a:8a:91:92:02:aa:46:12:80:ad:e3:4e:fd:b8:
bc:f8:d6:ca:c4:ac:75:54:86:39:c0:96:25:41:2b:
a1:e2:67:b7:b2:a1:d0:95:c8:68:79:b5:89:dc:31:
51:37:aa:03:48:54:8a:65:48:f9:ba:5c:6c:10:3d:
29:f7:2d:2d:cf:04:bb:66:49:a2:49:58:0a:62:25:
0a:9d:1f:8f:af:c5:82:78:93:46:7f:db:a0:94:49:
a6:e0:4f:a7:91:7c:b4:26:24:94:97:33:4b:3d:64:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:B8:A5:0D:06:FE:31:B8:B5:DC:04:D2:A5:C0:E3:3F:69:22:14
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:b6:31:63:85:f8:b2:bb:fd:c1:d7:b6:f3:ff:98:6b:7f:
f5:67:a4:bb:67:07:cf:b5:94:38:b1:f1:17:ee:f0:43:75:e8:
ee:97:39:bd:0c:76:25:57:e7:c9:84:09:6b:1c:90:40:90:60:
14:41:32:fd:dc:b6:2c:dc:36:ac:99:78:52:d2:cf:27:e1:4a:
3c:b6:c1:65:85:31:49:8a:ee:42:85:ad:90:ba:61:11:c0:1e:
95:e4:5f:7c:f6:f8:18:d9:8b:e9:57:99:94:df:c7:c7:1c:ef:
ae:4a:68:e3:77:0d:fb:9b:a3:d8:53:ce:32:8a:2e:80:23:54:
b4:0e:18:6e:09:d7:f6:8e:7a:f2:b3:0a:8f:a8:ec:c3:82:de:
c1:80:03:71:c7:d6:cc:7a:61:b9:ae:e4:9e:05:0f:09:42:c2:
25:13:1e:ba:09:c7:6a:b7:d7:93:c6:55:d8:05:d2:4f:f3:99:
01:e9:ae:73:18:02:8d:47:c0:09:f9:92:2a:de:b8:b8:c1:4d:
6c:36:80:1f:3c:09:95:5c:e3:0f:09:95:ff:fb:c8:95:e1:81:
24:92:54:aa:7d:a6:a2:19:ff:53:9d:53:96:ad:ca:96:4c:1c:
46:e1:ab:94:c0:a9:ca:18:48:93:5c:dd:32:30:c0:e1:16:89:
98:cb:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:37:29 2026 by rpki-client