Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: 1dZA93eeuqGtnCozQ2CuaPAoXaqJmKl8K3xBMKEujkI=
Subject key identifier: 01:B6:13:22:3A:7F:37:79:CD:81:72:DC:C9:CA:3D:15:24:83:0C:7B
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 01A104369E8A0D0163D5BC9C7A50343C9715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1A16
Signing time: Sun 04 Oct 2026 00:00:50 +0000
Manifest this update: Sun 04 Oct 2026 00:00:50 +0000
Manifest next update: Mon 05 Oct 2026 00:00:50 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: 4Zcopf1oCkKKooxlWvttoMHymT3oou9Jgz41LEJYC8A=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:36:9e:8a:0d:01:63:d5:bc:9c:7a:50:34:3c:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Oct 4 00:00:50 2026 GMT
Not After : Oct 5 00:00:50 2026 GMT
Subject: CN=01b613223a7f3779cd8172dcc9ca3d1524830c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:b3:6e:7b:3b:e2:db:2e:39:99:a7:83:0c:
df:92:27:ed:ab:03:fa:f1:03:6b:64:d7:94:3d:4f:
a9:36:5f:d9:b7:d7:f3:bb:27:5f:4a:f5:15:cb:7d:
6c:97:31:94:21:6e:0d:3a:20:10:fc:27:df:09:22:
0a:45:48:bd:3d:41:c1:3b:43:67:69:4b:1c:d1:53:
25:3c:a4:a9:34:23:75:e8:36:f0:69:b3:4f:24:3d:
57:cf:13:47:a1:77:d1:9a:f9:76:d7:48:45:a2:44:
53:44:6b:09:c0:f3:df:bb:3e:c5:a2:b5:19:9a:fe:
2f:b4:92:e7:2b:48:d7:d3:23:7d:15:e8:b2:c5:47:
5d:4d:c1:0e:ce:52:83:02:f5:b5:04:ef:d9:e1:42:
64:97:8c:da:28:f4:eb:78:a6:8f:5d:da:92:85:16:
3f:a9:13:2b:d3:1b:8d:27:1d:ad:65:37:89:fb:a6:
a2:8c:69:dd:c7:27:95:69:8b:e3:0d:a1:50:07:21:
28:8f:3c:26:62:75:46:a0:e9:0a:cf:bb:4f:57:66:
3d:a4:61:de:e4:50:11:0e:65:5f:53:34:ba:34:2a:
e3:1c:30:a5:a9:16:e0:7a:16:a1:08:0b:16:7b:20:
9d:f1:53:fc:83:a1:5d:43:7e:02:e7:91:e4:4d:95:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:13:22:3A:7F:37:79:CD:81:72:DC:C9:CA:3D:15:24:83:0C:7B
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b2:31:44:bf:05:37:4f:b5:0e:a3:d2:90:e5:10:31:06:f1:
a4:0f:78:72:d6:51:2d:79:89:20:6c:1d:ae:99:01:09:a0:d9:
13:56:54:45:b1:cc:29:c9:7b:cf:35:ca:86:8d:ba:1b:6a:23:
1a:33:20:9b:71:44:cd:cb:1c:ba:24:b7:a2:b6:a2:0a:3f:43:
0c:1d:88:82:55:68:c8:93:35:45:d7:4c:ee:7e:ad:ac:53:07:
87:d2:0d:fb:ba:cf:59:0b:47:53:36:93:19:c7:65:1f:13:01:
1a:35:3d:53:16:c1:84:d9:ab:fe:00:6d:bd:d7:d0:61:d0:a2:
07:c9:d1:a9:ab:24:b9:f6:2e:4e:14:3a:c1:34:de:b7:de:eb:
38:74:14:cb:ae:b4:f1:1b:a0:b0:65:40:0b:2d:7e:ee:92:45:
1c:02:f1:2a:96:c8:fc:f8:36:df:0f:0f:a1:28:36:ca:6e:42:
af:5c:08:3f:1c:54:61:17:ea:a6:d4:ac:19:99:94:31:1f:56:
1c:da:36:ab:6c:25:f8:42:2b:73:86:5a:04:78:db:d4:d2:4a:
5b:2a:dc:b8:8e:cf:69:50:aa:1e:60:48:ec:92:73:b6:e8:d2:
3a:b2:a7:fe:fe:7b:8f:50:59:19:a0:a1:b3:b0:85:85:eb:bf:
93:32:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:39:16 2026 by rpki-client