Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: gBH2hln+0zwlKayqENr7RoM4CTq8EC/FB+Jzxjc/0Zg=
Subject key identifier: AD:90:B1:6B:D5:42:3E:05:37:43:9C:4A:27:74:B7:22:30:F9:57:34
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 019F8F7F755F3FA9B735891683FDF2D9FC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: 74
Signing time: Thu 23 Jul 2026 15:02:02 +0000
Manifest this update: Thu 23 Jul 2026 15:02:02 +0000
Manifest next update: Fri 24 Jul 2026 15:02:02 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: UueZQK4rrHxcyt0hcq9lvnpyNHfOQdoNGMkAaf2yYOs=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:75:5f:3f:a9:b7:35:89:16:83:fd:f2:d9:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Jul 23 15:02:02 2026 GMT
Not After : Jul 24 15:02:02 2026 GMT
Subject: CN=ad90b16bd5423e0537439c4a2774b72230f95734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:ce:79:22:b7:bf:70:7f:86:4b:b4:ea:f4:
be:cb:57:d8:19:83:1f:43:98:e1:56:52:a3:8d:b6:
83:d8:00:ff:aa:17:03:3f:4a:76:4f:29:43:6e:af:
5a:b2:d6:4e:73:3b:57:f8:16:02:b1:64:64:c8:ba:
bc:e8:68:f1:65:66:0d:e8:72:35:c6:d5:82:97:d6:
bc:49:d5:39:ec:8b:4e:06:f7:e6:f8:4a:73:6d:c6:
c5:93:eb:89:59:be:b2:3f:bb:d9:10:19:7e:78:d5:
45:8d:e6:9c:3d:64:b6:4e:e5:eb:1f:68:ac:7f:2e:
60:cd:80:c6:11:47:18:37:18:90:c0:45:cf:cf:9a:
14:6e:ac:3b:42:dd:dd:70:7d:1f:c4:a1:21:ef:75:
37:f2:5d:5e:5b:3e:b7:2c:73:ec:e4:eb:43:35:0a:
7b:d1:29:aa:38:bb:fd:71:97:48:ce:da:98:56:db:
7f:fe:c5:06:b3:16:a0:11:79:05:5f:e6:44:1c:11:
b0:97:c6:11:bc:46:0b:f9:34:63:c2:e1:7a:e2:3a:
2b:43:d3:a3:bb:bd:e0:46:5c:15:d5:7d:da:f6:76:
6f:2e:68:4e:df:b0:cf:27:ee:1f:30:e1:90:43:3b:
08:87:8e:ef:83:35:d0:28:6e:3f:16:be:4a:4f:8c:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:B1:6B:D5:42:3E:05:37:43:9C:4A:27:74:B7:22:30:F9:57:34
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:99:aa:c8:30:58:8c:23:6a:12:cc:6e:7b:55:91:c2:09:
9b:a7:b3:0b:0e:f4:83:db:99:c0:42:ce:2d:22:0c:4b:2c:e2:
3d:c5:11:84:9c:92:16:68:91:cb:8b:dc:18:e3:73:22:83:4d:
25:73:14:e9:54:50:38:ba:04:b6:22:40:d7:94:c0:a8:78:e2:
5b:0c:3c:a8:c7:bd:da:e0:64:ed:7f:95:69:b8:30:5c:e0:c0:
68:e4:18:1d:a7:f9:4c:71:7f:e5:c0:bc:5b:1e:b8:94:e0:54:
ab:82:04:34:e9:48:1c:f6:13:26:74:0b:b9:f3:d5:30:07:68:
b6:e5:fe:dc:5e:d0:79:2b:af:59:e6:8c:0a:d1:81:a8:bc:b7:
24:19:99:6f:13:0e:7d:b9:e1:06:ac:29:a1:a6:f7:a8:df:f7:
2d:25:f2:fe:df:b9:cc:01:1d:58:5d:51:53:2f:b4:95:40:68:
9a:d8:3a:ba:77:e0:92:96:1d:b3:54:b8:10:38:fe:be:2d:08:
25:a1:de:26:c4:6f:62:f8:13:50:da:40:85:29:38:73:80:d6:
31:39:47:6f:bd:45:17:13:7b:8d:40:1d:8b:fd:62:ff:37:47:
38:eb:d7:12:29:07:ce:b0:97:41:09:86:f0:5f:29:1e:61:1a:
a6:83:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:36 2026 by rpki-client