
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: waUu8Iq4QgNv4YqHG+82kCXe0coTcTRiCBBdGdjHMo8=
Subject key identifier: F8:11:F1:B5:5B:6E:61:0B:0C:48:4F:80:75:20:91:ED:8B:46:F8:37
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019D2696225F7C7DB330BDFF14A6C785D97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 20:01:06 +0000
Manifest this update: Wed 25 Mar 2026 20:01:06 +0000
Manifest next update: Thu 26 Mar 2026 20:01:06 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: ohNFiTQ/4HtGUA1HlCqSxC6zoyKErQtATXqtdGHYGDc=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:22:5f:7c:7d:b3:30:bd:ff:14:a6:c7:85:d9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Mar 25 20:01:06 2026 GMT
Not After : Mar 26 20:01:06 2026 GMT
Subject: CN=f811f1b55b6e610b0c484f80752091ed8b46f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:a5:23:f5:84:96:a8:09:b2:37:4c:86:02:
a0:08:3c:90:03:70:4f:bc:75:e6:7a:f6:e2:5d:1c:
65:d6:09:3a:4d:6f:c1:60:76:e6:99:ac:b5:2d:5b:
b7:e5:5d:47:4a:78:7e:3f:5f:aa:1f:ad:a3:6e:01:
f7:c7:80:d8:05:d8:b2:36:c8:ce:1c:c2:83:de:6b:
df:2e:ec:4c:75:02:0a:bc:a8:fe:f5:62:b1:b0:62:
df:01:f7:94:c4:08:4e:07:c9:63:9e:76:ca:c8:16:
aa:cf:b6:40:a7:35:fc:cb:04:84:c3:b1:2d:7c:e6:
09:21:19:2e:a0:19:c9:05:58:4b:84:b1:47:71:24:
1b:12:20:d5:d3:59:25:b4:e2:a5:db:45:3d:47:d3:
33:9b:61:15:fa:f8:a6:3e:c3:f2:95:96:11:d6:98:
ae:e6:32:ef:15:34:5a:58:76:3b:f5:52:bc:e8:01:
d0:20:db:0f:ed:31:ed:7a:1b:5c:ad:c7:2e:fd:db:
d6:2d:ba:8c:3d:58:e5:92:8c:89:80:78:09:f5:e4:
d4:1e:79:38:97:91:f7:90:f9:f5:a5:02:10:fb:7f:
f9:29:fc:f2:1e:ab:39:1f:15:ae:16:5d:4d:3f:1d:
4c:bb:ca:ed:c3:32:6a:dd:eb:68:b2:cc:6a:c0:ea:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:F1:B5:5B:6E:61:0B:0C:48:4F:80:75:20:91:ED:8B:46:F8:37
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f6:3e:2c:3d:82:b9:80:d8:3c:8a:15:fe:00:df:43:d1:52:
5b:6e:d3:26:3d:b3:84:37:82:7e:cc:e0:ed:49:a3:f1:ba:6e:
3c:3a:81:81:45:f0:8c:fb:a2:dc:2a:49:c4:a4:d0:0c:f7:e0:
82:fe:5e:f7:6e:f0:40:f8:85:26:08:5c:f8:88:c9:7f:2f:be:
cd:40:66:4b:2d:43:3c:fe:41:26:d4:d5:1c:08:ed:08:e6:bf:
08:26:c0:e6:25:c3:b0:59:5f:95:db:9f:6a:7f:d0:25:de:7a:
f5:23:16:38:e2:65:dc:e1:03:88:a3:95:8e:e5:67:b8:13:51:
15:c9:6d:af:21:69:de:bb:20:b9:0c:1e:ea:04:94:17:b4:de:
e0:e7:3c:bb:5e:60:70:77:68:88:8e:79:4d:2e:e6:30:50:87:
2c:59:30:c4:c4:c9:32:61:e7:74:df:64:d2:71:f8:fe:17:ac:
7a:32:26:49:3e:c4:78:f3:2c:42:8d:cc:74:31:64:06:df:ba:
4f:2b:23:f9:b4:4e:0e:1d:3e:41:ac:e4:6f:fc:5a:be:b3:72:
00:69:ce:94:c2:a2:22:9d:0f:53:cb:92:55:36:5f:1d:2f:32:
fe:ae:5a:0f:ca:41:f2:13:f7:7a:b9:81:8d:9c:98:97:40:b5:
65:eb:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:26 2026 by rpki-client