Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: un9hFs+gXdpwjW1FeQDfrd/+u7Wz9f3Lq/e3/1K5Z+A=
Subject key identifier: 18:68:02:D0:3B:9E:30:75:AA:DA:C0:33:AB:C4:A1:4E:83:60:87:18
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 019E1EA3017EB7C6FA4339E33064EE502114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 09D7
Signing time: Wed 13 May 2026 00:00:59 +0000
Manifest this update: Wed 13 May 2026 00:00:59 +0000
Manifest next update: Thu 14 May 2026 00:00:59 +0000
Files and hashes: 1: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: N82TkB55J+pYyefMz9i3UZbY9qm5DymjXQgw65cf+iw=)
2: 6HARRI7LzgaJWjdnbcjYNe5zjgA.asa (hash: yJAm5DirBDu/9AhS1Y+uMEjLkqDGUA5qsTRmj6QzRpU=)
3: Wzv_5bHtlw-bV5A4pfz1y-cksK4.roa (hash: z7yVuuqBUpaWkWkocJw0ZO6+2vj7/1QraNrEcS+WGV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:01:7e:b7:c6:fa:43:39:e3:30:64:ee:50:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: May 13 00:00:59 2026 GMT
Not After : May 14 00:00:59 2026 GMT
Subject: CN=186802d03b9e3075aadac033abc4a14e83608718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:03:0d:b4:85:9c:11:00:9d:98:a3:44:6a:
12:5d:d3:cb:6d:8a:74:92:63:1d:8a:f2:47:ca:c0:
81:68:1b:8a:63:9c:81:f9:6a:42:d8:59:80:b3:3f:
f8:b9:fe:f5:87:2f:f8:ff:7a:b3:27:ad:bb:e9:6c:
ed:3d:c2:d5:91:a1:85:94:ad:1c:cf:0a:d5:66:18:
3d:47:b4:97:3b:67:cf:30:49:9a:74:ed:dd:91:dd:
65:7d:71:18:aa:c5:3c:13:60:05:f4:4e:d6:2d:6d:
b9:48:4f:a8:a8:28:60:35:cc:ae:e2:b6:f5:d3:50:
2f:8e:07:8e:dd:7f:1a:9c:48:40:34:fa:c5:74:a6:
be:fa:5d:e8:8b:70:7d:92:ca:7b:67:20:de:40:85:
ee:2e:2c:19:ee:60:67:12:68:90:19:a4:ff:f6:8e:
f4:06:94:66:4c:d0:6b:8a:dd:ed:7c:0e:7e:9e:3f:
df:44:f4:a8:ec:25:99:3e:99:20:1c:d8:b7:06:1a:
35:1c:12:76:d0:37:72:95:84:9f:9c:fb:49:48:9f:
54:cc:0a:ea:ea:a2:de:d4:9b:92:82:0a:69:36:e4:
2f:38:a3:00:1e:fc:76:ee:1d:c7:50:06:02:24:4a:
f2:8b:e5:11:5b:30:52:f1:02:35:6d:0e:8c:9c:3d:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:02:D0:3B:9E:30:75:AA:DA:C0:33:AB:C4:A1:4E:83:60:87:18
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bf:3f:91:4f:93:81:3b:34:f2:c9:f8:f7:fe:d8:29:26:54:
54:24:ff:10:d7:53:ef:2e:8f:28:91:d9:f1:f9:60:58:3c:fd:
f2:73:1f:c4:70:64:28:1e:93:1e:66:32:29:29:c9:de:a9:be:
59:6d:08:95:19:91:7d:cc:69:89:a0:70:aa:4a:b2:e8:07:92:
66:a4:71:ae:2f:6a:7c:4a:9d:93:2c:b1:b5:b4:9e:b2:60:8a:
ad:d5:1b:8d:d0:16:8a:80:23:cd:73:0c:bc:e3:ec:59:0e:b8:
e1:39:fe:a1:f8:3c:7b:e3:04:6c:26:05:e0:3e:ee:59:1a:3a:
38:93:3e:ca:9e:af:12:9c:05:34:11:75:50:d7:82:81:b4:9c:
5f:74:31:e6:ae:7e:c1:44:c8:bf:0a:9b:92:3f:72:b7:89:fe:
fd:32:19:67:c0:ca:d5:8c:87:d5:1c:44:a1:d7:59:32:d8:cd:
c7:f8:f1:7c:1b:80:92:2e:80:9e:72:4b:e5:3a:da:5a:7c:15:
ac:37:fd:05:5b:92:b0:6c:6d:35:08:6f:07:ec:d5:15:47:80:
b1:2f:ff:08:44:4e:3a:5d:b1:27:25:c2:f5:3b:73:47:85:40:
b3:46:fb:55:d1:ec:b8:5c:eb:e5:35:a0:52:13:95:ef:bc:6c:
f8:7e:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:16 2026 by rpki-client