Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: fkNH5Vba4zVYV09PG7YNkqfkdwTsDpu2WVfqY/D2sXA=
Subject key identifier: 33:BD:DF:83:FF:F5:21:2D:DC:A2:F6:29:42:4B:DC:58:D7:75:5A:D0
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 019F11F832D656A833719E556AECB565AF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: 33
Signing time: Mon 29 Jun 2026 06:01:46 +0000
Manifest this update: Mon 29 Jun 2026 06:01:46 +0000
Manifest next update: Tue 30 Jun 2026 06:01:46 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: Y/PtUvshhHuIpJDaFptbBIKgFBcihOs9KgISYoRhuYI=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:32:d6:56:a8:33:71:9e:55:6a:ec:b5:65:af:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Jun 29 06:01:46 2026 GMT
Not After : Jun 30 06:01:46 2026 GMT
Subject: CN=33bddf83fff5212ddca2f629424bdc58d7755ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:d2:b6:74:41:72:7d:87:1f:ce:81:d7:79:
52:0a:9f:ce:94:5c:11:a5:db:af:8c:72:29:31:09:
9f:ea:60:a3:f1:4a:d1:3f:22:3a:3d:82:4f:e9:4d:
53:0a:8a:90:39:8d:c9:a5:13:d1:00:ee:89:f1:03:
ca:fa:0a:52:8a:a0:04:46:7e:63:51:2f:25:ab:c5:
b5:c7:fd:06:a2:ec:6b:bd:f5:9c:d3:67:b2:65:fd:
35:ec:00:e7:64:72:98:7d:68:80:e6:a8:7f:39:9c:
b9:b2:40:73:87:6f:04:94:2a:84:5f:8d:d7:db:2a:
75:96:b4:2e:36:92:64:4c:39:d2:93:75:27:a3:9d:
cb:3b:ed:ba:df:4b:13:3c:f3:54:86:f2:9e:b6:f4:
f1:cc:f6:83:3f:b9:49:26:d9:aa:37:3a:f3:78:cc:
fe:df:87:68:f1:44:9d:09:9e:bc:a4:e5:89:13:1e:
99:18:19:0e:cf:0f:eb:2a:00:0c:33:04:06:4c:4d:
0f:a2:d7:09:46:00:4b:d8:7e:99:a2:7d:01:e7:e5:
1b:20:ef:b8:29:3f:a4:1c:ad:40:52:11:3b:75:c5:
c1:07:38:47:5c:1c:84:d6:6f:17:fe:c8:fb:e5:1e:
e0:d9:7d:c1:8f:56:3f:ae:82:53:fe:8b:ee:84:ba:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:DF:83:FF:F5:21:2D:DC:A2:F6:29:42:4B:DC:58:D7:75:5A:D0
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:11:e6:4e:bb:3c:41:87:5a:5f:63:63:c2:f6:6b:2a:ec:a1:
d7:1b:73:c9:a2:98:f1:92:41:a1:4c:b0:cb:fc:10:6b:fb:6f:
e9:6f:b0:88:13:e0:e8:19:df:48:0f:89:20:fd:e9:a5:a4:0b:
4b:53:ff:7b:de:65:09:6c:8b:a6:af:84:c1:b7:a9:df:f6:57:
30:f4:b7:b3:01:99:45:0f:99:3a:af:9b:1a:26:b5:e3:98:af:
b3:b8:fe:c3:9e:45:d5:17:84:bc:1e:cc:c9:32:72:2c:9e:81:
13:e2:b3:39:8c:42:d9:17:ba:e5:37:8d:f4:ec:80:1b:34:7b:
bb:96:8b:83:18:37:ef:e0:d6:0f:a1:24:d8:52:4c:0c:62:bc:
d4:29:9b:a1:0f:ac:81:5b:c2:76:89:ec:20:9b:59:6c:ca:e8:
61:ca:ce:8d:26:ad:54:3b:f7:79:7b:cb:90:40:0e:64:26:9f:
9e:71:d9:2b:07:2e:71:b4:0c:ae:db:5c:83:f5:86:48:d3:e6:
c6:4d:60:0a:4c:56:d6:f2:65:0d:62:5d:b1:9a:d6:c3:04:94:
23:71:e5:82:ed:93:d2:3e:5f:d8:9f:2f:f7:4b:c7:25:d3:af:
0a:6c:cf:40:29:07:2c:ed:a4:26:ed:cb:c8:28:01:08:ed:4d:
3a:d8:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:32:00 2026 by rpki-client