Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: gJwy3ysuvpYDsImfYyCGkVN66dClqvOa1Dw8kcHmU/c=
Subject key identifier: C9:B5:D5:B8:32:A8:53:97:65:A0:A4:BA:DE:6F:18:9B:39:71:F1:E2
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01A1DF1559B309F5FEAC5F0008CAF782FB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0F51
Signing time: Sun 15 Nov 2026 12:01:20 +0000
Manifest this update: Sun 15 Nov 2026 12:01:20 +0000
Manifest next update: Mon 16 Nov 2026 12:01:20 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: CzQHXeC5lsThwqaYEwmODolIbBMS5qZVMgQmh9P5EBk=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:59:b3:09:f5:fe:ac:5f:00:08:ca:f7:82:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Nov 15 12:01:20 2026 GMT
Not After : Nov 16 12:01:20 2026 GMT
Subject: CN=c9b5d5b832a8539765a0a4bade6f189b3971f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:bc:20:a0:d6:97:fd:2c:bb:05:c2:77:b3:
27:2f:ad:c1:aa:9c:f9:a8:bc:f3:46:c3:c4:4b:55:
c1:22:76:b5:43:34:f8:0e:43:e8:38:86:cd:38:33:
14:d9:6f:06:31:e4:86:7b:79:fc:ab:c1:02:e4:db:
88:6a:24:e7:aa:86:3b:d0:d1:43:7e:90:ff:fa:89:
3f:95:ca:ad:1e:24:2e:bc:fa:87:92:92:15:3c:e8:
27:b5:20:cb:c0:80:db:df:d2:ff:9f:31:4d:2a:7e:
9a:ad:c7:a8:09:99:bc:98:07:b8:2f:9f:15:9f:71:
d5:af:83:61:bb:29:8e:a0:83:3e:a7:1b:ef:25:01:
ce:ae:d3:32:7b:dc:37:c4:d9:73:4d:91:c7:5e:c5:
7a:04:49:7c:b6:ca:2b:6e:5d:9d:97:f8:cc:75:85:
06:f3:75:20:e8:c1:cf:7e:68:17:d8:66:15:ba:ea:
41:5a:6a:8e:5b:59:21:79:21:f3:af:64:3f:37:61:
8f:d7:e9:19:f6:e3:79:e7:19:28:be:b6:c4:58:6f:
d0:0b:9d:f9:fa:bf:d3:e2:87:1d:df:d3:94:9f:bd:
fb:48:76:33:fd:50:5e:7d:77:42:6b:db:9a:51:e5:
d5:cb:32:18:cb:06:a3:a7:98:06:ea:5a:d5:48:25:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:D5:B8:32:A8:53:97:65:A0:A4:BA:DE:6F:18:9B:39:71:F1:E2
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:4b:47:82:cd:2a:b8:49:c2:a1:8b:9e:17:8f:70:dc:ce:
b5:6a:ef:2c:a3:79:08:db:ec:fc:72:22:b4:e7:0a:c9:02:77:
a1:7b:9f:90:91:3f:9d:bf:31:4c:4d:94:e5:06:67:0c:75:14:
1a:78:ea:1f:6f:63:89:ba:58:96:99:95:eb:38:b5:1b:94:21:
fd:02:54:00:67:7c:dc:cf:3a:8b:fc:34:03:60:e3:a6:8c:75:
2d:e7:31:4a:dc:ae:3b:e6:3b:e3:93:38:89:74:f2:90:9f:83:
e8:78:e5:79:0d:b1:6b:49:99:d0:59:22:54:6d:2b:a7:6c:f7:
d5:57:a5:fe:78:49:7a:92:6f:73:ec:2e:2c:3f:9c:9c:bd:73:
fe:31:aa:97:c3:39:91:90:82:97:d5:8c:7e:ce:7f:4b:0b:fc:
e5:9e:26:12:ea:7e:40:2f:d8:53:94:15:c3:94:a6:1f:09:25:
c2:95:f3:e2:f3:55:06:68:b8:49:18:8c:42:31:fb:ec:06:b5:
5d:b9:a8:55:2a:0e:9d:18:ba:f2:5b:74:d5:f5:e4:63:7c:56:
04:e9:d0:3a:ad:55:8f:6c:2a:31:45:3a:e4:41:85:f2:a3:30:
0e:c9:43:a0:91:1e:65:19:dd:59:c2:e5:5b:b5:ce:9f:6a:fa:
20:8c:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:21:50 2026 by rpki-client