Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: s8jM4lrVBOyj3QZdhAhkaE1vtgqnpAvqR/UZrk3wB5I=
Subject key identifier: 2A:7D:9F:8B:3F:97:89:6B:EB:79:C6:C9:44:09:7B:BD:62:9A:52:8A
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019E1D59C9EF69EE1B48FD17B5A67589153F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0D5F
Signing time: Tue 12 May 2026 18:01:24 +0000
Manifest this update: Tue 12 May 2026 18:01:24 +0000
Manifest next update: Wed 13 May 2026 18:01:24 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: GYolFJn7fJWaoYu2mGUbJDP+1M1M71UoQGPkRyq/Xk4=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c9:ef:69:ee:1b:48:fd:17:b5:a6:75:89:15:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: May 12 18:01:24 2026 GMT
Not After : May 13 18:01:24 2026 GMT
Subject: CN=2a7d9f8b3f97896beb79c6c944097bbd629a528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:59:a2:fe:d9:71:55:39:0e:19:00:51:d2:
2e:c2:e8:bd:1a:17:b2:fb:bc:bb:0e:36:62:3c:1a:
b3:be:b2:8b:40:6a:fb:e0:9b:21:78:6d:84:bc:cd:
35:04:db:19:76:ac:c4:5d:bc:02:cc:86:23:fe:93:
66:ae:b8:f2:2c:c9:6d:60:2e:38:d9:d7:f7:ca:25:
3a:74:9f:5d:33:f4:bb:68:b6:d0:32:88:51:22:03:
b9:bd:8b:c2:ed:0c:34:f3:69:92:bf:bd:9d:d1:0f:
61:16:5c:a9:95:3c:d7:59:9d:7d:e5:e8:0c:ec:ee:
a5:25:36:81:1b:07:7f:5a:2e:98:95:14:53:82:ae:
66:ef:ff:2a:1a:df:91:23:48:56:7e:9b:f7:58:79:
61:85:8a:49:df:cf:0a:c9:26:93:85:22:8e:8f:21:
ac:80:95:37:fd:eb:06:4e:5c:49:bd:d5:95:1b:14:
82:e5:bd:9f:66:5e:1d:f4:13:c2:00:4f:21:8a:ae:
b1:38:f5:28:9d:4b:d1:c3:4e:a7:1c:0e:81:3b:93:
0f:3c:7e:6d:32:14:10:0c:78:d2:75:32:25:b0:f7:
f9:b3:01:fd:b0:bd:d4:64:53:3e:87:af:41:64:3c:
ad:0d:18:9b:f8:13:4e:5f:23:f9:c7:4a:89:49:d5:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:9F:8B:3F:97:89:6B:EB:79:C6:C9:44:09:7B:BD:62:9A:52:8A
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:35:e5:49:8c:a9:a8:80:d4:ed:ab:99:b3:4c:c2:6f:de:17:
f5:88:26:70:c7:61:be:93:42:97:56:c7:11:00:94:b9:e1:0d:
a5:58:85:61:8f:47:cc:9b:60:24:72:90:35:f5:58:f2:37:bf:
12:c3:24:5a:22:ea:2a:34:cc:9d:12:a4:af:42:bc:dc:35:46:
d1:c3:b9:e9:4b:77:49:11:fe:04:c0:1c:f9:f1:3c:04:a9:95:
f0:d3:8e:ee:0a:e9:43:ca:e6:38:f3:52:57:7c:79:94:7d:c7:
42:85:d6:45:69:9c:c0:30:7d:a0:21:d5:04:0b:45:57:a4:61:
26:a8:14:c8:51:e2:b3:40:86:47:f2:cb:bc:de:db:53:d2:d1:
74:64:97:75:57:cb:c2:c2:23:c8:d9:78:61:5f:28:66:99:55:
ec:c2:80:a8:26:67:62:29:81:4e:fa:f0:d8:c9:c2:80:48:84:
34:35:54:2f:8d:a8:03:ed:86:fc:7d:99:93:9e:65:45:c5:8e:
be:44:09:4a:89:bc:79:be:32:4d:8b:52:ec:87:aa:f4:de:5f:
ad:63:00:b7:70:99:49:01:36:e4:4d:40:cb:7a:93:37:4a:13:
a8:c2:e7:db:ff:e3:85:dd:72:1f:53:b2:aa:bf:70:99:a0:3e:
66:10:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:27 2026 by rpki-client