Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: ze8dw3eCM1cRaYz9LhsMtZihWhAqbZv7YHAeKODsQyk=
Subject key identifier: 8B:06:1D:5D:6D:76:E2:2B:D9:06:3E:AB:14:43:BE:F8:E5:F8:5A:21
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 01A1DE70B60E138EEA38CF20480A24D2EE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: 01A6
Signing time: Sun 15 Nov 2026 09:01:30 +0000
Manifest this update: Sun 15 Nov 2026 09:01:30 +0000
Manifest next update: Mon 16 Nov 2026 09:01:30 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: 2+a/5e3PLo7O+QenqWGkHWDr6CI1PF9rYSvSM5pOe6c=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:b6:0e:13:8e:ea:38:cf:20:48:0a:24:d2:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Nov 15 09:01:30 2026 GMT
Not After : Nov 16 09:01:30 2026 GMT
Subject: CN=8b061d5d6d76e22bd9063eab1443bef8e5f85a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:d6:86:6b:b3:0e:09:6b:86:16:1c:ef:3a:
b9:be:74:28:cc:1f:f2:a8:36:80:41:ac:36:f5:05:
9d:1f:a7:cc:e1:0c:1f:75:36:cc:8a:cf:23:eb:e2:
c8:aa:d4:fb:93:10:1f:24:8f:02:b4:09:56:99:b2:
79:f7:58:c7:ce:f3:38:3d:22:fb:dc:d4:44:d0:96:
4f:d9:bf:b1:62:cf:5c:3e:b0:d8:88:dc:21:d4:0e:
02:5e:62:3b:6e:6d:c6:73:3c:44:2e:dc:d9:6c:ba:
ee:31:96:2f:fe:1e:63:1c:ba:58:80:b7:98:3e:87:
ad:30:9c:17:f1:5c:03:03:37:4f:3c:c2:a2:01:12:
54:e0:4c:2b:88:10:f3:bd:a3:8e:78:59:33:0d:bc:
ce:c7:b5:19:78:9c:03:7c:7c:fa:10:de:92:e0:0d:
31:06:56:f4:25:11:a8:18:b6:6b:bd:ac:60:8a:a7:
9d:1c:ca:c8:50:f4:90:4b:b3:d1:9c:30:37:22:6f:
47:26:7d:04:2f:02:56:6f:00:68:12:d7:a5:db:9d:
da:84:7f:53:c7:ab:7a:39:95:f7:42:1c:49:28:66:
35:c2:98:a4:8a:c6:c9:6a:81:cc:a1:97:c8:08:85:
c7:15:de:d2:0e:c3:fb:f6:58:0a:8f:d5:9d:6d:d5:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:1D:5D:6D:76:E2:2B:D9:06:3E:AB:14:43:BE:F8:E5:F8:5A:21
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:cc:4e:a9:9e:81:69:16:37:b8:ee:3c:8f:e1:d8:ec:63:
82:0e:96:33:0e:2e:6f:05:2c:d8:6e:3e:5c:c6:b4:c2:76:db:
47:33:0c:69:c0:75:67:75:ca:a0:81:80:a0:2d:6b:11:84:2d:
8f:d6:8c:99:8f:af:be:b2:9e:08:5e:78:30:66:1e:f8:47:40:
d1:57:a9:d4:4b:39:e5:50:63:4c:22:a6:d9:c5:2d:a2:4b:87:
53:b4:a4:79:21:8e:4f:3f:3d:15:8f:ab:06:19:a1:16:2f:dc:
5a:8f:3d:b7:8d:d3:84:f1:13:a5:8a:29:84:5a:a3:99:69:74:
a1:15:83:be:f7:6c:c2:62:f5:ab:a6:50:97:81:79:b2:fa:6f:
fe:ef:7e:38:af:27:98:5f:2e:a0:e2:17:ad:97:86:e6:84:00:
94:23:3a:dc:7d:9f:85:99:54:c3:0d:75:35:8d:ef:ed:bb:9f:
99:d4:47:38:92:eb:99:f7:e3:7b:7b:7e:bf:32:75:c5:00:9b:
78:98:b5:f9:de:f6:0f:2b:bf:41:b8:1b:5d:9e:0f:f0:5c:a7:
f4:dd:0a:b5:c7:6c:89:98:74:43:bf:27:21:39:94:c4:38:69:
ed:2b:18:ab:3a:da:fc:06:e3:f4:2c:25:1e:6c:86:66:ee:88:
ac:92:73:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecLYOE47qOM8gSAok0u4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VmNDc0MjdiMDM3NjFlYmMxMzgwODYyZDA4Njk1MDgz
NTMxYTkwHhcNMjYxMTE1MDkwMTMwWhcNMjYxMTE2MDkwMTMwWjAzMTEwLwYDVQQD
Eyg4YjA2MWQ1ZDZkNzZlMjJiZDkwNjNlYWIxNDQzYmVmOGU1Zjg1YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9XWhmuzDglrhhYc7zq5vnQozB/y
qDaAQaw29QWdH6fM4QwfdTbMis8j6+LIqtT7kxAfJI8CtAlWmbJ591jHzvM4PSL7
3NRE0JZP2b+xYs9cPrDYiNwh1A4CXmI7bm3GczxELtzZbLruMZYv/h5jHLpYgLeY
PoetMJwX8VwDAzdPPMKiARJU4EwriBDzvaOOeFkzDbzOx7UZeJwDfHz6EN6S4A0x
Blb0JRGoGLZrvaxgiqedHMrIUPSQS7PRnDA3Im9HJn0ELwJWbwBoEtel253ahH9T
x6t6OZX3QhxJKGY1wpikisbJaoHMoZfICIXHFd7SDsP79lgKj9WdbdXqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsGHV1tduIr2QY+qxRDvvjl+FohMB8GA1UdIwQY
MBaAFBE+9HQnsDdh68E4CGLQhpUINTGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82OWVjY2UtM2YyMC00YjdlLTlhM2Yt
NDA5NWQ0NDMxOWMwLzEvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82OWVjY2UtM2YyMC00YjdlLTlhM2YtNDA5NWQ0NDMxOWMw
LzEvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/TMTqme
gWkWN7juPI/h2Oxjgg6WMw4ubwUs2G4+XMa0wnbbRzMMacB1Z3XKoIGAoC1rEYQt
j9aMmY+vvrKeCF54MGYe+EdA0Vep1Es55VBjTCKm2cUtokuHU7SkeSGOTz89FY+r
BhmhFi/cWo89t43ThPETpYophFqjmWl0oRWDvvdswmL1q6ZQl4F5svpv/u9+OK8n
mF8uoOIXrZeG5oQAlCM63H2fhZlUww11NY3v7bufmdRHOJLrmffje3t+vzJ1xQCb
eJi1+d72Dyu/QbgbXZ4P8Fyn9N0KtcdsiZh0Q78nITmUxDhp7SsYqzra/Abj9Cwl
HmyGZu6IrJJzdQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:53:33 2026 by rpki-client