Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: QgfFkDl5MHZCfu7lL258PQzbZGjDZPGgYGJVhp2cpYg=
Subject key identifier: AE:09:7F:A1:A3:B3:11:92:13:E5:45:4D:F2:B0:6A:A2:01:1D:25:B1
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 019D2583900B972C0EA74B7A33E13F5C202B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 0956
Signing time: Wed 25 Mar 2026 15:01:12 +0000
Manifest this update: Wed 25 Mar 2026 15:01:12 +0000
Manifest next update: Thu 26 Mar 2026 15:01:12 +0000
Files and hashes: 1: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: 9BRZ7llcPxraVWMVIxbVCDEW8W+HOgnHGlBVv/McF54=)
2: 6HARRI7LzgaJWjdnbcjYNe5zjgA.asa (hash: yJAm5DirBDu/9AhS1Y+uMEjLkqDGUA5qsTRmj6QzRpU=)
3: Wzv_5bHtlw-bV5A4pfz1y-cksK4.roa (hash: z7yVuuqBUpaWkWkocJw0ZO6+2vj7/1QraNrEcS+WGV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:90:0b:97:2c:0e:a7:4b:7a:33:e1:3f:5c:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Mar 25 15:01:12 2026 GMT
Not After : Mar 26 15:01:12 2026 GMT
Subject: CN=ae097fa1a3b3119213e5454df2b06aa2011d25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:fc:ba:90:d4:67:06:db:b9:bd:c8:3f:3b:
16:95:d2:a4:a6:18:b7:69:4c:6b:fe:a7:e1:bb:a0:
7c:7e:de:cd:53:32:07:61:cc:ab:e9:a3:5e:35:17:
f7:1e:fa:40:8f:13:46:b6:d3:14:98:88:03:31:9b:
20:2c:ad:48:6d:22:aa:b7:cf:46:32:dd:b7:d0:de:
6f:9b:41:e4:b3:a9:6d:b9:51:55:9c:f7:6f:00:72:
5b:fd:a8:06:23:3a:25:58:01:b6:21:aa:35:b4:63:
3e:0a:f2:cb:2a:73:f0:77:38:92:5a:2b:9d:55:38:
27:e8:06:f2:25:4a:38:45:a2:82:06:f5:6d:0b:20:
03:67:d5:d1:36:7a:92:1d:c8:af:14:6d:a8:b0:ae:
d5:12:72:6c:c5:98:53:20:39:ad:3f:75:55:46:fd:
54:76:4a:4f:df:a1:58:9d:3d:df:f4:1a:9f:1c:a2:
be:1f:24:f3:2d:00:9f:db:3b:89:70:f1:9d:4c:a8:
c3:2e:3d:b1:bf:be:f5:1d:19:ec:e3:48:1c:31:f1:
3b:c8:2b:05:e1:01:26:7a:6d:5a:46:e1:68:67:77:
ca:26:aa:13:d1:0b:3b:e8:47:ad:36:8e:b7:2d:ce:
0f:1a:de:c6:24:73:87:ee:8c:19:ab:52:ff:7b:00:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:7F:A1:A3:B3:11:92:13:E5:45:4D:F2:B0:6A:A2:01:1D:25:B1
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:43:9f:14:59:36:18:69:01:c3:74:8a:41:72:97:3d:45:
05:f4:fe:9b:38:56:9e:df:f9:3f:eb:97:c8:85:46:7c:c4:de:
8a:b4:b0:9f:0c:0d:08:66:41:3c:44:d3:ab:e8:08:9f:5f:34:
b1:fb:22:de:7f:2a:74:5b:5e:ec:64:be:ec:7b:e9:dc:d1:ea:
19:ce:bf:8f:62:b5:f3:ed:b8:0e:ea:b7:b6:af:ad:74:b5:c7:
0d:64:b3:1e:58:f3:5f:4d:57:64:64:32:a0:90:1f:08:e0:80:
7d:ca:b5:d8:62:64:a1:1a:8a:77:cf:ea:ec:e0:5d:7b:1d:fb:
19:71:29:4f:78:fc:ea:f3:a3:4b:40:31:04:cc:b5:78:a6:66:
65:04:c4:f9:f9:fc:66:34:a8:72:34:04:5c:85:aa:5b:f7:a1:
3a:aa:1b:e5:0d:51:0d:fc:62:fa:1d:b8:02:61:00:ab:a4:50:
73:d3:bb:0c:18:71:3d:c0:7e:54:ba:e3:c9:b7:a9:70:6b:af:
5f:98:a9:f5:7c:9b:3f:e1:18:c3:43:ee:c5:09:b4:87:45:39:
fa:2a:5e:f0:1f:e5:5f:41:0c:8a:b3:4d:85:44:1d:72:4f:1e:
0f:8d:db:f6:f3:27:2d:dd:77:2e:f6:03:5b:da:5a:e4:a3:5e:
10:ee:ed:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg5ALlywOp0t6M+E/XCArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzNiY2QzMjU1YTBkYWQ1ZjRhMzUwZDExZGM4OTFmYTBi
ZTA0MzcwHhcNMjYwMzI1MTUwMTEyWhcNMjYwMzI2MTUwMTEyWjAzMTEwLwYDVQQD
EyhhZTA5N2ZhMWEzYjMxMTkyMTNlNTQ1NGRmMmIwNmFhMjAxMWQyNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNr8upDUZwbbub3IPzsWldKkphi3
aUxr/qfhu6B8ft7NUzIHYcyr6aNeNRf3HvpAjxNGttMUmIgDMZsgLK1IbSKqt89G
Mt230N5vm0Hks6ltuVFVnPdvAHJb/agGIzolWAG2Iao1tGM+CvLLKnPwdziSWiud
VTgn6AbyJUo4RaKCBvVtCyADZ9XRNnqSHcivFG2osK7VEnJsxZhTIDmtP3VVRv1U
dkpP36FYnT3f9BqfHKK+HyTzLQCf2zuJcPGdTKjDLj2xv771HRns40gcMfE7yCsF
4QEmem1aRuFoZ3fKJqoT0Qs76EetNo63Lc4PGt7GJHOH7owZq1L/ewCvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4Jf6GjsxGSE+VFTfKwaqIBHSWxMB8GA1UdIwQY
MBaAFONzvNMlWg2tX0o1DRHciR+gvgQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTIt
MDRlN2IxYThjZTE4LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTItMDRlN2IxYThjZTE4
LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvtDnxRZ
NhhpAcN0ikFylz1FBfT+mzhWnt/5P+uXyIVGfMTeirSwnwwNCGZBPETTq+gIn180
sfsi3n8qdFte7GS+7Hvp3NHqGc6/j2K18+24Duq3tq+tdLXHDWSzHljzX01XZGQy
oJAfCOCAfcq12GJkoRqKd8/q7OBdex37GXEpT3j86vOjS0AxBMy1eKZmZQTE+fn8
ZjSocjQEXIWqW/ehOqob5Q1RDfxi+h24AmEAq6RQc9O7DBhxPcB+VLrjybepcGuv
X5ip9XybP+EYw0PuxQm0h0U5+ipe8B/lX0EMirNNhUQdck8eD43b9vMnLd13LvYD
W9pa5KNeEO7tlA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:38:15 2026 by rpki-client