Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: +37zcL++n9DokJ0nI0nnUd2X9Ofwo2LFiLQ1AbrNbNc=
Subject key identifier: 42:22:4B:6D:3E:3A:E1:CE:1C:4F:DA:5F:1B:DD:81:4D:13:C2:59:D7
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019D28168228290CCB85437E66CA21EB5837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0CE0
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: 9iv45Wq7ZAN/Ev+P+HQ74w6PfsVw6peQ9qziuyXwWIo=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:82:28:29:0c:cb:85:43:7e:66:ca:21:eb:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=42224b6d3e3ae1ce1c4fda5f1bdd814d13c259d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:9b:a0:ed:f1:0f:f5:85:7c:6c:fd:d3:67:
d3:b3:90:fb:10:2c:92:50:2f:80:dc:30:33:ce:ce:
d5:91:39:c1:3d:6f:9b:62:5d:04:30:9b:b7:5d:bd:
4b:08:3a:89:d6:43:99:0a:f3:55:f8:75:2e:f8:82:
ea:2b:8e:01:48:b5:f2:93:63:fb:7b:c0:b1:1a:ef:
7d:1c:2c:07:2c:35:d0:d8:15:1e:8b:45:fa:30:af:
ad:50:ef:8b:dc:f8:3a:ea:91:aa:77:19:76:36:43:
9b:c4:4c:fa:c5:db:b1:3c:e4:b1:a2:34:14:76:be:
c9:cc:d3:9f:eb:ef:fa:fb:60:05:43:ca:82:1e:02:
57:04:90:5e:24:cf:d4:1f:96:43:ba:2b:fb:35:22:
ea:34:6a:f4:0c:83:ca:d3:5c:6d:3d:b2:e3:04:14:
93:43:38:89:ba:70:8c:5f:84:52:b0:75:56:03:3b:
34:d3:b1:1e:75:83:80:c8:3f:49:b4:11:2e:70:ed:
f3:ec:1f:7c:6b:84:e9:0b:df:00:fe:b4:de:90:4a:
27:ef:4c:f3:42:6c:6a:34:98:4b:d6:bc:45:77:c3:
b4:aa:9d:ab:8d:fe:7f:cb:96:77:da:d2:76:11:9d:
5d:ec:48:c5:87:5b:05:ce:05:e3:ba:4f:45:62:f8:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:4B:6D:3E:3A:E1:CE:1C:4F:DA:5F:1B:DD:81:4D:13:C2:59:D7
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:00:03:e8:be:b0:a7:82:b2:7d:6d:ce:e5:ce:e6:80:b6:fc:
7a:52:39:aa:0f:b7:af:a5:ed:1c:d1:f7:52:80:81:68:35:e0:
ac:ab:bd:30:8e:c1:98:fb:e0:a1:06:fa:41:2c:2b:10:16:e7:
79:82:f7:a4:7c:0d:19:6e:85:51:44:c2:c1:24:0c:36:40:b5:
63:aa:eb:82:29:43:59:7f:18:b0:88:1c:51:95:d3:b2:bf:70:
e0:88:02:29:0c:bb:f1:aa:23:43:fb:ff:dc:a1:11:b7:0b:84:
84:8d:68:29:0d:22:08:1b:72:1f:da:61:ba:20:55:bf:7d:2a:
ef:7c:6f:cd:9e:dd:e0:26:25:fb:a3:a9:55:ec:d3:89:4e:1a:
c7:19:6c:d0:0b:87:b5:7b:1c:25:20:97:08:97:79:7d:eb:da:
1d:d3:07:12:6d:d6:6c:71:65:0f:cf:38:fa:1d:8a:24:fb:47:
51:d8:e6:9d:46:14:f3:20:21:16:21:10:d8:8b:79:a4:99:b9:
51:6c:7f:71:07:f0:da:e3:a4:dd:cd:3b:01:45:a2:3e:29:80:
71:44:f3:21:16:56:fb:66:ce:76:87:f2:54:9c:aa:75:20:58:
6b:7e:5d:f2:02:26:7c:a5:5d:e9:62:a7:ed:f7:b8:9d:5f:29:
11:75:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:45 2026 by rpki-client