Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: M6iSl8J4JkT+Un3WqKPShxZD6K6SUD7eX97rO+6HVV8=
Subject key identifier: 95:D2:D9:CF:95:FD:EA:82:1B:1A:30:9D:C9:DF:CD:49:CB:3A:ED:EF
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01A0D49429EFB2EFDAE34D365F01D25AE763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0EC7
Signing time: Thu 24 Sep 2026 18:01:14 +0000
Manifest this update: Thu 24 Sep 2026 18:01:14 +0000
Manifest next update: Fri 25 Sep 2026 18:01:14 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: ewfrQvqUGjuAJFt0yC6EqXNvQLWi0xvtdnEEk4HuOuI=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:29:ef:b2:ef:da:e3:4d:36:5f:01:d2:5a:e7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Sep 24 18:01:14 2026 GMT
Not After : Sep 25 18:01:14 2026 GMT
Subject: CN=95d2d9cf95fdea821b1a309dc9dfcd49cb3aedef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:14:73:12:dd:70:c3:08:f3:91:27:0d:ed:
db:a3:2a:63:27:d4:8b:21:df:0d:4a:a5:f5:27:dd:
5a:b2:12:4a:f3:a7:12:ef:bd:46:b3:2a:53:2c:2c:
b8:50:50:7f:6c:f8:f8:d5:08:41:b7:fc:69:13:f7:
cf:d9:e4:02:0e:2b:71:67:ed:38:4b:15:62:04:4f:
f5:76:83:37:38:19:3c:a8:9a:e7:15:8d:bf:71:95:
4b:d0:4f:c7:24:db:7b:11:66:a0:9a:17:da:bc:b0:
32:a0:a1:76:c4:c0:d7:8d:24:95:0d:65:77:04:44:
6a:e6:32:e0:71:54:70:81:c8:04:5a:ec:fe:68:22:
e8:c5:4b:fb:f5:14:da:32:a8:9b:43:97:41:5c:76:
9d:49:b7:ae:05:21:8c:91:94:91:50:8e:3a:0d:2b:
cf:ee:b2:20:b4:67:2c:3f:8a:9e:82:a1:d5:28:55:
4c:38:e5:4f:0f:17:bb:f1:b9:fa:83:ef:05:f8:7d:
36:7b:87:3a:f4:97:38:f7:bf:1f:22:94:c9:e7:1c:
f2:4a:88:f3:c2:fd:b2:91:58:95:ce:fa:10:9a:6e:
e1:b3:4a:27:ba:57:ee:0e:6b:1b:a3:6b:88:9b:8f:
b5:d9:ba:fb:9b:71:27:99:51:91:c4:e0:b4:06:7a:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:D9:CF:95:FD:EA:82:1B:1A:30:9D:C9:DF:CD:49:CB:3A:ED:EF
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:26:d3:54:f5:1b:70:6b:82:10:7f:65:e1:56:7e:95:48:02:
f3:ad:d7:43:6b:69:77:6b:47:18:ca:34:79:77:36:7b:f7:77:
c7:4a:ad:c0:05:5e:ce:de:f9:66:42:bf:c7:9f:d3:d7:57:e2:
ec:14:9d:95:cb:77:ed:38:c2:45:c7:37:61:8a:b4:a5:28:77:
11:24:56:3b:d1:43:a6:36:24:62:89:5e:ea:83:cb:51:c7:30:
4e:58:99:b3:dc:c8:c0:e6:c5:0b:6f:b8:de:e9:4e:ea:a2:08:
24:8b:33:fd:e7:b5:a9:a0:e0:3e:36:d6:9c:40:46:b6:cf:9c:
3a:07:ce:e6:11:e4:e5:0d:b0:ca:09:50:c0:77:79:07:45:32:
ce:b3:06:b7:28:24:a4:51:1d:23:87:c9:ea:58:47:cc:2c:c8:
d2:ec:99:dc:ef:b4:e8:56:ab:71:c9:f6:48:08:f7:04:bf:f9:
9d:2b:29:0a:f4:90:a1:4d:ef:20:6f:3a:76:b0:93:35:cc:05:
77:67:f8:42:32:43:e0:11:a1:dd:69:ea:40:5e:be:cb:12:ef:
c4:91:47:25:dd:6a:56:53:51:0d:af:7d:17:0b:20:51:90:da:
4c:85:5e:48:53:3a:10:e6:90:d7:73:3b:a8:47:52:56:bb:21:
e6:a0:d9:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlCnvsu/a4002XwHSWudjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm
NGQ0ZDIwHhcNMjYwOTI0MTgwMTE0WhcNMjYwOTI1MTgwMTE0WjAzMTEwLwYDVQQD
Eyg5NWQyZDljZjk1ZmRlYTgyMWIxYTMwOWRjOWRmY2Q0OWNiM2FlZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr8UcxLdcMMI85EnDe3boypjJ9SL
Id8NSqX1J91ashJK86cS771GsypTLCy4UFB/bPj41QhBt/xpE/fP2eQCDitxZ+04
SxViBE/1doM3OBk8qJrnFY2/cZVL0E/HJNt7EWagmhfavLAyoKF2xMDXjSSVDWV3
BERq5jLgcVRwgcgEWuz+aCLoxUv79RTaMqibQ5dBXHadSbeuBSGMkZSRUI46DSvP
7rIgtGcsP4qegqHVKFVMOOVPDxe78bn6g+8F+H02e4c69Jc4978fIpTJ5xzySojz
wv2ykViVzvoQmm7hs0onulfuDmsbo2uIm4+12br7m3EnmVGRxOC0Bno7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXS2c+V/eqCGxowncnfzUnLOu3vMB8GA1UdIwQY
MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt
NzM1OTBhYTI5MGYxLzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx
LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSbTVPUb
cGuCEH9l4VZ+lUgC863XQ2tpd2tHGMo0eXc2e/d3x0qtwAVezt75ZkK/x5/T11fi
7BSdlct37TjCRcc3YYq0pSh3ESRWO9FDpjYkYole6oPLUccwTliZs9zIwObFC2+4
3ulO6qIIJIsz/ee1qaDgPjbWnEBGts+cOgfO5hHk5Q2wyglQwHd5B0UyzrMGtygk
pFEdI4fJ6lhHzCzI0uyZ3O+06Farccn2SAj3BL/5nSspCvSQoU3vIG86drCTNcwF
d2f4QjJD4BGh3WnqQF6+yxLvxJFHJd1qVlNRDa99FwsgUZDaTIVeSFM6EOaQ13M7
qEdSVrsh5qDZlg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:00:09 2026 by rpki-client