Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File: ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier: dYlonlIjWnyz2f65OG0g5eJMo21f1RDMeXrTqBhoD18=
Subject key identifier: F6:9B:61:F0:DC:70:C9:9A:67:A1:D9:EF:43:6D:88:66:F1:BE:4E:6C
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 01A03B5F5D3E53E410595010F45262AB7D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number: CD
Signing time: Wed 26 Aug 2026 00:01:40 +0000
Manifest this update: Wed 26 Aug 2026 00:01:40 +0000
Manifest next update: Thu 27 Aug 2026 00:01:40 +0000
Files and hashes: 1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: +ZSjbW7yv9/h5cXhWbGuoD58YE+FHeTJ9R5Ymxx/TJs=)
3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:5f:5d:3e:53:e4:10:59:50:10:f4:52:62:ab:7d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Aug 26 00:01:40 2026 GMT
Not After : Aug 27 00:01:40 2026 GMT
Subject: CN=f69b61f0dc70c99a67a1d9ef436d8866f1be4e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:63:79:e1:cf:93:85:09:5e:96:39:36:bf:
b6:26:ac:80:85:5b:06:04:6f:79:0d:6a:73:ee:1c:
91:6b:18:86:36:f4:1b:db:27:ed:33:4a:db:04:04:
34:72:0b:46:23:a7:e4:b6:f1:86:a2:f7:a2:25:54:
d2:2f:29:3e:77:67:cf:c7:32:67:ac:9c:a1:bf:1e:
92:14:a4:e7:1a:c4:75:96:0d:20:0b:1d:0d:6f:61:
dc:55:67:ba:17:be:f3:7a:ca:aa:48:05:92:54:f9:
b7:06:2d:f1:00:5c:56:d9:7f:e8:6f:52:06:62:6b:
58:ad:e2:07:74:bc:eb:07:60:77:69:b1:80:19:42:
42:3c:c2:2d:e7:70:d6:74:a8:ba:03:d9:28:03:dd:
47:f2:d5:ce:39:12:7c:14:aa:3e:b4:04:35:4f:a4:
66:ff:42:18:0a:32:25:d4:23:60:f1:8e:4f:1f:28:
0f:e5:73:1a:88:40:d6:35:df:f0:89:bf:cd:18:3b:
3a:d6:30:ef:bc:a0:06:24:38:59:21:be:30:d9:97:
5f:ae:ab:70:55:a9:26:7f:30:49:58:af:d2:1c:0e:
32:6e:af:3b:f7:79:01:50:43:25:f2:06:32:ac:43:
30:7a:30:f8:bc:e4:6e:18:8b:a3:79:d8:35:f2:8f:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:61:F0:DC:70:C9:9A:67:A1:D9:EF:43:6D:88:66:F1:BE:4E:6C
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b3:e9:51:5b:11:08:2a:af:96:84:eb:57:13:70:0b:bd:5e:
aa:8b:ff:c1:a5:4a:7c:d8:5d:43:da:5c:8c:53:b8:8f:16:c6:
39:e5:9f:14:63:73:ad:4c:54:9b:67:c3:99:0c:49:6a:1c:3d:
25:de:ed:37:78:a9:b0:56:5e:63:c3:eb:4a:e5:2d:a7:34:cd:
6b:62:c8:74:94:ef:19:9c:81:d3:34:3d:69:37:19:42:6a:e8:
80:53:ae:49:01:8c:1b:7d:8f:82:cf:d3:40:6a:3b:46:73:89:
75:01:b6:c4:f4:3d:5a:7f:62:c8:fb:1e:bc:3e:3f:a7:01:f7:
ff:95:a8:31:f1:e5:12:d2:e7:ba:7f:17:25:7d:e3:55:ec:6a:
19:f5:03:84:04:02:13:e9:c4:19:52:71:46:2f:b3:aa:3f:87:
ff:f4:40:c4:4f:81:77:c7:1c:c0:f7:09:42:d1:60:43:51:39:
a2:90:eb:fc:4b:57:c6:38:42:22:be:5f:24:09:69:ca:2c:6e:
df:d5:47:e5:5c:ae:37:f0:01:45:e4:9a:90:2f:7b:17:35:49:
96:ed:7e:85:40:74:d5:61:bc:60:1c:5a:6b:ca:fe:a5:30:95:
8e:d5:ce:33:1d:45:c2:36:11:0c:8d:4a:3a:58:67:01:42:b1:
c1:84:0a:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA7X10+U+QQWVAQ9FJiq31GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VmNDc0MjdiMDM3NjFlYmMxMzgwODYyZDA4Njk1MDgz
NTMxYTkwHhcNMjYwODI2MDAwMTQwWhcNMjYwODI3MDAwMTQwWjAzMTEwLwYDVQQD
EyhmNjliNjFmMGRjNzBjOTlhNjdhMWQ5ZWY0MzZkODg2NmYxYmU0ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA769jeeHPk4UJXpY5Nr+2JqyAhVsG
BG95DWpz7hyRaxiGNvQb2yftM0rbBAQ0cgtGI6fktvGGoveiJVTSLyk+d2fPxzJn
rJyhvx6SFKTnGsR1lg0gCx0Nb2HcVWe6F77zesqqSAWSVPm3Bi3xAFxW2X/ob1IG
YmtYreIHdLzrB2B3abGAGUJCPMIt53DWdKi6A9koA91H8tXOORJ8FKo+tAQ1T6Rm
/0IYCjIl1CNg8Y5PHygP5XMaiEDWNd/wib/NGDs61jDvvKAGJDhZIb4w2Zdfrqtw
VakmfzBJWK/SHA4ybq8793kBUEMl8gYyrEMwejD4vORuGIujedg18o+JxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPabYfDccMmaZ6HZ70NtiGbxvk5sMB8GA1UdIwQY
MBaAFBE+9HQnsDdh68E4CGLQhpUINTGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82OWVjY2UtM2YyMC00YjdlLTlhM2Yt
NDA5NWQ0NDMxOWMwLzEvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82OWVjY2UtM2YyMC00YjdlLTlhM2YtNDA5NWQ0NDMxOWMw
LzEvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbPpUVsR
CCqvloTrVxNwC71eqov/waVKfNhdQ9pcjFO4jxbGOeWfFGNzrUxUm2fDmQxJahw9
Jd7tN3ipsFZeY8PrSuUtpzTNa2LIdJTvGZyB0zQ9aTcZQmrogFOuSQGMG32Pgs/T
QGo7RnOJdQG2xPQ9Wn9iyPsevD4/pwH3/5WoMfHlEtLnun8XJX3jVexqGfUDhAQC
E+nEGVJxRi+zqj+H//RAxE+Bd8ccwPcJQtFgQ1E5opDr/EtXxjhCIr5fJAlpyixu
39VH5VyuN/ABReSakC97FzVJlu1+hUB01WG8YBxaa8r+pTCVjtXOMx1FwjYRDI1K
OlhnAUKxwYQKRg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:04 2026 by rpki-client