Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: i8tXCVQrRNuuyVk0CF8dQSq60IvEsK6My3kKooaiaY8=
Subject key identifier: E7:87:08:36:9E:43:02:A8:75:9F:59:C0:C3:C4:A3:AC:E4:FD:A2:50
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 019F916D9CB89A5307BCC2C1C4E991F0DF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 0A97
Signing time: Fri 24 Jul 2026 00:01:47 +0000
Manifest this update: Fri 24 Jul 2026 00:01:47 +0000
Manifest next update: Sat 25 Jul 2026 00:01:47 +0000
Files and hashes: 1: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: cddo3sw0EXs3ROkpD0wb3oP0cZABm7TkHyx1jNNYdw8=)
2: 6HARRI7LzgaJWjdnbcjYNe5zjgA.asa (hash: yJAm5DirBDu/9AhS1Y+uMEjLkqDGUA5qsTRmj6QzRpU=)
3: Wzv_5bHtlw-bV5A4pfz1y-cksK4.roa (hash: z7yVuuqBUpaWkWkocJw0ZO6+2vj7/1QraNrEcS+WGV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9c:b8:9a:53:07:bc:c2:c1:c4:e9:91:f0:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jul 24 00:01:47 2026 GMT
Not After : Jul 25 00:01:47 2026 GMT
Subject: CN=e78708369e4302a8759f59c0c3c4a3ace4fda250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:c8:86:5d:a7:9d:02:ec:fd:f0:90:b6:98:
ef:04:ec:f9:5e:67:e6:53:c4:bc:23:9a:49:e4:2b:
d0:46:c7:92:c3:89:73:bd:bb:73:fa:b2:de:c9:14:
a6:b7:4a:79:f0:20:16:9b:6e:49:76:3b:fb:41:f1:
b5:2b:df:5a:20:8b:26:f3:f4:8f:f8:15:eb:a3:11:
42:2f:e2:9b:91:2a:8f:ba:c0:67:e5:eb:08:95:90:
19:ed:15:03:61:45:94:f7:9d:67:bb:ce:5c:f8:a0:
df:e0:a7:15:4c:49:bf:71:c8:a2:4d:48:18:82:03:
90:f6:f1:4f:35:26:d6:fc:d9:89:eb:a5:92:da:bc:
5d:62:a9:ae:16:fc:62:70:e6:d3:8a:b5:c6:48:9c:
69:57:26:f0:7a:1e:85:07:9c:00:e1:21:bb:30:df:
7c:57:07:2f:da:65:be:ae:5a:74:f6:b4:65:19:a8:
c8:ef:1e:20:e9:dd:29:28:19:c8:2e:d6:7c:d9:79:
f2:c3:a2:5c:9c:0e:3f:2b:40:4c:dd:2c:ce:fb:42:
fd:93:55:0c:01:37:9b:9f:d0:bf:e4:14:0a:75:80:
37:c5:a2:88:52:35:e4:63:68:28:f8:e0:43:e4:a1:
3f:da:cb:fb:15:21:04:67:0a:a9:dc:61:29:d9:a0:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:08:36:9E:43:02:A8:75:9F:59:C0:C3:C4:A3:AC:E4:FD:A2:50
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:45:c3:7e:d8:d2:45:b6:79:c7:e2:c5:11:6d:e0:b3:28:dd:
7b:6b:f1:5c:3a:5e:a4:51:03:52:b7:ca:4c:28:3c:19:88:b6:
91:26:2a:32:0a:81:41:e9:79:e2:f0:d4:5a:a5:f8:d9:cd:04:
68:e6:a4:b2:a5:5c:a5:15:66:f3:e9:31:a3:04:d1:32:f3:f5:
14:6e:37:af:66:d4:cd:68:16:9e:f0:93:62:35:15:f7:af:0e:
4e:81:b9:e5:65:37:d4:14:8e:2e:e2:8f:c2:39:be:8b:89:61:
cc:b1:c5:7e:5c:01:66:40:3e:1d:81:f2:6e:35:a5:9e:b2:bd:
20:61:f7:6c:8a:63:43:55:7a:20:36:b0:3e:46:bc:bd:cc:37:
a7:57:9f:9a:1e:0c:fa:ff:b5:3c:2a:f6:5b:00:ec:f4:a2:ee:
69:96:e8:fd:7f:07:7a:79:e7:9e:40:be:41:f6:be:44:75:43:
28:4a:43:8a:70:44:72:0a:b7:ed:21:0b:0a:52:fb:91:4a:b4:
a9:d8:f8:48:80:0f:af:e0:b6:e9:b1:db:74:28:e6:89:c6:f3:
42:d7:2e:5e:92:fc:2b:44:2b:ef:48:11:4a:36:d8:7a:93:79:
96:4e:49:c0:d7:8d:0b:96:cc:64:d8:a1:36:53:ca:c6:4d:f3:
df:e3:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:42 2026 by rpki-client