Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: bSj+iU7LAopjirY3ptrIPI/e5bll7ecLoREPS4YdeN0=
Subject key identifier: FA:E2:D3:52:F1:BC:76:AC:CE:E6:9B:2A:8C:F6:47:2E:32:CE:1A:30
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 01A0CF36822FBF69FE1BAC6FCD78C4C52AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 17:00:51 +0000
Manifest this update: Wed 23 Sep 2026 17:00:51 +0000
Manifest next update: Thu 24 Sep 2026 17:00:51 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: XMqTWZpaHNui74zzvgS97jOPFQTUAIoexetpGFh0NRo=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:82:2f:bf:69:fe:1b:ac:6f:cd:78:c4:c5:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Sep 23 17:00:51 2026 GMT
Not After : Sep 24 17:00:51 2026 GMT
Subject: CN=fae2d352f1bc76accee69b2a8cf6472e32ce1a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:6a:35:b1:f8:b4:83:92:9c:62:f6:cd:f3:
8b:b6:81:27:54:99:a4:3f:1b:17:9a:e4:bd:08:3d:
70:88:85:af:61:ca:e6:4a:6b:b3:a9:6e:96:5e:68:
93:a3:26:ce:12:2a:c4:3d:5b:0d:57:66:4b:1d:47:
fc:25:57:d5:54:73:c3:49:64:12:97:c1:37:dc:32:
c1:e5:5b:6b:2b:80:5b:e1:b6:d6:b7:bc:ce:e5:dd:
88:46:ce:ac:ae:eb:e9:7f:f1:dc:8f:98:61:bf:23:
33:2d:cf:59:55:91:b2:29:03:53:2b:89:ad:15:88:
f9:ed:c3:bc:df:97:cc:c4:22:22:37:55:ae:df:e3:
41:5f:29:79:f7:5b:2c:57:e8:33:fa:f2:35:7b:b1:
b4:54:ae:02:95:cd:65:e5:3d:7f:4d:c4:06:c0:e1:
49:bb:2e:ad:57:e7:99:e3:16:69:3d:cb:59:fe:ac:
25:8d:41:7b:c3:48:f2:69:52:f6:d7:f7:b3:81:c6:
c4:29:e4:ff:d8:77:87:c3:36:9f:cf:03:a5:13:a2:
0b:61:3e:15:1a:e3:64:5d:69:1d:71:f3:cb:97:f2:
93:12:81:2f:eb:ee:19:34:47:9b:c3:70:e6:6e:8d:
ce:e8:30:ca:82:55:8e:9f:d5:d9:87:aa:c7:f3:d6:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:D3:52:F1:BC:76:AC:CE:E6:9B:2A:8C:F6:47:2E:32:CE:1A:30
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b5:6e:af:be:c4:2f:de:e1:55:69:cb:4d:16:36:82:25:61:
b3:47:43:ea:b7:fe:60:76:87:a7:c2:3d:69:be:e7:c6:18:1e:
0d:0d:80:7f:01:07:7f:33:e7:00:4b:e2:a2:a6:4c:95:73:28:
ab:dc:2e:8b:76:f8:8f:6d:d6:82:ab:ab:c8:69:dd:b6:6a:38:
2e:3c:97:6f:d4:bd:8f:5b:95:53:40:4c:97:d2:8c:0b:c9:e4:
45:f6:62:0e:31:49:8a:81:54:fb:09:81:0c:c7:74:ec:97:8a:
1d:df:ce:df:94:b4:eb:8c:a0:a5:f5:6d:62:d2:4b:47:2a:08:
b4:3a:cc:02:08:6d:a7:bc:39:b0:10:c5:a2:b5:5f:9a:b1:d2:
1e:b9:9e:c9:80:2f:8b:5a:6a:99:29:51:0a:07:ee:91:34:1c:
a8:6c:b2:c6:e7:3b:a3:41:ec:87:cd:c5:81:58:8e:6d:a0:ab:
ff:8a:b2:55:c0:e3:86:82:bd:c6:3f:70:00:02:97:7b:93:0a:
71:26:58:30:89:f5:f2:9a:a2:31:d4:bb:d9:7d:d2:a3:01:97:
b3:43:2d:94:a9:fd:f1:d5:97:f6:28:87:b4:a4:c8:d2:21:2d:
f7:03:5d:dc:2a:23:77:3a:01:b0:03:18:b2:7d:e7:fc:3e:cb:
1d:22:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:58:26 2026 by rpki-client