Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: V7Zp4DsoQgyW3NNuRDoHG4B7kjEFu84dA89lLwblib4=
Subject key identifier: 33:EC:3B:D8:69:72:3B:2D:01:4F:D1:2E:46:28:B3:61:5C:B0:C8:11
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019F902345D5B8D78267E542076667B38E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0E1F
Signing time: Thu 23 Jul 2026 18:00:58 +0000
Manifest this update: Thu 23 Jul 2026 18:00:58 +0000
Manifest next update: Fri 24 Jul 2026 18:00:58 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: ivxVhwm3VgyWnfUcS3WpzB9wn6L8zhlsXikoPzEW1Ds=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:45:d5:b8:d7:82:67:e5:42:07:66:67:b3:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jul 23 18:00:58 2026 GMT
Not After : Jul 24 18:00:58 2026 GMT
Subject: CN=33ec3bd869723b2d014fd12e4628b3615cb0c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:57:25:07:ce:e9:0c:ef:1f:78:16:a9:d7:
b3:5c:06:e1:38:0e:c7:50:97:15:82:3a:be:c9:77:
7c:ff:15:87:60:a0:06:72:51:b9:cc:57:88:d6:12:
bc:4c:69:dd:de:c7:16:1d:cb:08:18:7c:92:d9:a1:
98:19:10:8d:84:6b:1a:e5:0d:d1:86:a1:e5:95:91:
ed:43:f1:08:d9:6b:a2:95:7a:57:e0:d4:c7:d3:1d:
87:4d:b4:9f:5c:93:93:36:b7:97:4c:37:f2:10:4b:
7d:22:97:c5:93:ab:98:73:ed:50:6f:70:ae:45:96:
c3:6c:73:44:e1:df:78:92:a0:de:a3:b8:b5:40:6f:
ff:72:0a:eb:49:21:af:92:80:38:a5:be:38:33:ce:
04:c7:a7:68:ba:8a:ea:94:16:dc:d7:fc:40:0c:fd:
05:c2:d1:95:01:66:a8:b1:1a:55:e0:ce:23:59:04:
ae:81:b2:8a:3b:98:0c:2c:51:1c:75:53:9b:17:59:
22:a3:05:fd:30:ff:8e:6d:33:aa:f5:f5:fd:d6:9b:
b6:15:5f:97:60:d7:09:40:fd:e9:c7:62:c7:1a:16:
d5:0d:77:da:6a:10:0e:c3:b6:b6:f1:45:fa:82:a9:
46:70:7c:1a:38:41:58:aa:75:92:78:41:3e:1e:06:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:3B:D8:69:72:3B:2D:01:4F:D1:2E:46:28:B3:61:5C:B0:C8:11
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c3:90:80:e7:8c:26:e6:1b:c4:88:8b:4d:99:39:dc:33:35:
17:59:6d:66:6a:c7:f9:b7:20:b3:79:22:de:5d:c8:44:fe:2a:
db:ea:ad:c6:5c:21:77:4b:06:49:de:c4:a2:33:2e:b5:01:aa:
a9:5f:9c:e1:43:81:ce:d6:c7:7c:57:ae:3c:c7:24:1b:b9:9b:
cb:b9:65:57:8d:d3:b1:ae:00:ca:5a:00:d5:b4:3c:e3:56:ae:
68:62:a1:0e:5f:93:33:63:7c:ee:fc:dd:ce:b1:4b:8f:b5:2a:
15:8e:bc:54:f3:0a:13:d9:15:aa:08:ce:e9:2b:4b:ee:02:bb:
e1:75:b2:09:73:af:f3:e6:00:d8:44:7a:41:f3:26:95:e9:c1:
5d:47:f3:28:f9:ca:36:c5:04:02:4c:60:00:47:ea:c3:89:9b:
ef:41:9b:8e:0d:32:3a:b7:ea:5f:81:79:d4:4c:3c:82:1b:3d:
91:c2:8f:d0:a2:41:cb:cd:88:fc:09:d7:0e:8a:9e:a6:38:fd:
b3:f2:93:08:0e:8f:44:46:22:67:22:0d:6e:78:14:6c:0d:00:
93:64:7d:16:62:b5:23:2b:dc:ae:17:63:1b:e8:00:f9:58:02:
90:51:c9:68:36:a6:f3:3c:45:12:ea:c4:31:3e:b6:5a:42:eb:
a9:39:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:48 2026 by rpki-client