Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: AG4nwiLoOE6T712kxeAvKXN6VJuW+FnEoaQu06GI+K8=
Subject key identifier: 32:20:92:F5:E7:48:5B:2B:49:00:2D:61:71:64:78:51:0C:78:70:D9
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 019D2961631D668F984D9E0AC97A89A85336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 09:02:21 +0000
Manifest this update: Thu 26 Mar 2026 09:02:21 +0000
Manifest next update: Fri 27 Mar 2026 09:02:21 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: 4nGhKZ11RjMJ9LhZ/akgptVZAoWUBHZLfk2PGUbyRlo=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:63:1d:66:8f:98:4d:9e:0a:c9:7a:89:a8:53:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Mar 26 09:02:21 2026 GMT
Not After : Mar 27 09:02:21 2026 GMT
Subject: CN=322092f5e7485b2b49002d61716478510c7870d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:48:03:5c:6c:f7:63:b5:cc:97:5c:f1:03:b1:
44:68:af:67:0c:35:3f:51:ff:86:f5:fc:c8:74:f7:
7c:78:00:72:05:82:f1:8a:d1:4f:f0:02:f0:3e:35:
fd:57:9d:b3:77:64:da:5c:25:f3:eb:fe:82:26:f6:
57:a7:18:4a:a3:c0:dc:77:4d:5a:67:e3:7b:dd:59:
a0:70:08:dc:44:2a:79:76:bd:1d:0e:80:4e:2b:39:
1a:c6:7b:9e:12:a3:9f:15:e8:f7:96:51:28:21:fa:
00:ab:8c:3f:f0:88:d0:d4:aa:a8:e5:d4:4f:c5:84:
66:cd:74:c0:0f:c0:e4:03:ba:24:e2:c5:6c:84:3c:
d2:31:b7:36:3b:39:61:be:90:ac:3f:ba:9c:1d:22:
ee:37:e9:c1:47:08:f2:cb:b2:cb:0f:c5:77:64:e9:
a1:85:4d:69:d5:3f:38:f1:f3:b2:9c:7e:9b:65:c7:
ff:25:95:dd:9e:8a:aa:73:ff:92:e6:30:88:90:d7:
c6:23:72:93:35:eb:bf:1b:f6:f9:d8:46:4d:48:b9:
7a:02:81:e4:22:43:d2:6c:3f:b6:0f:1e:44:7e:26:
15:18:af:f5:2a:1f:7f:f9:ae:14:24:4b:3f:bb:da:
53:38:d5:5f:3f:d5:cf:e8:3b:bd:d2:b1:6d:8a:8a:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:92:F5:E7:48:5B:2B:49:00:2D:61:71:64:78:51:0C:78:70:D9
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:01:1d:50:9f:32:6a:b5:a6:68:33:5b:63:12:39:e9:a2:
1d:af:65:85:95:6d:55:3f:d4:fa:da:f2:11:ee:cd:d4:07:5b:
29:9a:5e:38:42:b7:88:b6:03:11:3e:fd:66:15:90:d4:2b:3f:
e9:55:7b:c9:2d:07:1d:6a:8d:71:af:ba:a9:6f:05:28:a2:23:
3a:bc:30:56:5d:58:5d:c4:1a:e8:8f:fc:59:29:2b:fa:d8:85:
b0:99:73:a7:27:7b:49:7a:a3:46:56:25:b7:7e:2d:b4:7c:4a:
91:ce:ac:e9:5e:ae:e5:04:ed:c5:7d:42:d6:7a:fa:2e:6a:7c:
93:d9:27:5c:d7:c7:d0:a9:a7:9a:23:83:f3:51:6c:a3:5b:a9:
e9:e1:7b:d8:e0:1a:2f:b6:e9:a7:ea:4e:56:36:d9:ff:0c:32:
68:0c:a2:fd:90:76:4f:0d:b1:cd:28:a9:da:8b:16:e3:30:25:
e1:68:15:14:6f:c8:93:fd:32:60:c8:f1:45:87:63:ee:1c:c6:
11:bb:1d:30:28:02:7f:11:0c:03:6e:6b:17:fd:d0:96:95:94:
ab:8a:bb:0b:94:df:83:83:18:62:7c:59:6b:dd:21:57:28:a2:
d6:f7:b5:9d:0c:92:e4:ed:8d:e4:2d:1e:bb:d0:0c:1f:3a:fa:
f9:27:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:02 2026 by rpki-client