Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: m5zHtNWKghIJLdLrIHr9ISq7JQ8eWZ4897zjBAqO7ic=
Subject key identifier: C7:2D:09:C8:A5:7E:90:32:37:5F:BE:F5:CE:C0:2B:68:F0:CD:BE:9A
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019E1FB5602E63F18474E5E13AD5751FBBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 05:00:40 +0000
Manifest this update: Wed 13 May 2026 05:00:40 +0000
Manifest next update: Thu 14 May 2026 05:00:40 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: fbPLB/66xp8edAMhogXiTcD7DpfEOMYMqnpHA18JLlc=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:60:2e:63:f1:84:74:e5:e1:3a:d5:75:1f:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: May 13 05:00:40 2026 GMT
Not After : May 14 05:00:40 2026 GMT
Subject: CN=c72d09c8a57e9032375fbef5cec02b68f0cdbe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:ea:97:ac:0f:31:f5:57:f5:74:a6:98:6f:
35:f8:fc:6a:26:0a:5e:8e:91:88:cf:e0:a8:21:da:
81:53:0a:2a:54:8e:45:c7:70:5c:4e:91:3a:28:33:
e3:f0:c8:17:6a:e3:b4:f0:a2:e6:36:29:2a:18:4b:
f1:34:86:3e:16:d2:2d:bd:9c:d2:82:be:47:03:14:
da:67:f7:5b:47:ff:2f:12:02:f9:8f:aa:85:25:98:
f1:80:3a:fb:50:3e:cb:63:35:51:f7:01:54:59:12:
ea:9f:79:f5:0c:06:ad:5b:cc:61:2e:3b:49:83:96:
84:bd:17:40:e3:39:e8:2b:40:b4:ca:f1:38:47:00:
50:2e:44:96:bd:55:e9:d9:e3:15:1a:5f:2c:78:88:
ce:d2:a9:c6:8f:53:ec:3c:45:0e:23:41:10:17:6b:
b9:ab:02:2f:13:54:48:e3:42:fe:dc:cf:eb:8b:1c:
99:a4:f9:cb:40:39:b0:fd:5d:0f:ef:b6:7f:aa:44:
79:1b:01:aa:f0:42:b4:1c:53:3e:e4:fb:ec:7a:11:
b7:55:a1:36:5e:44:b0:df:6b:66:f2:e9:3d:52:8f:
b5:4e:5b:f0:dd:e5:34:9d:40:de:a5:b7:ce:75:5f:
7f:20:6b:e7:cb:ce:14:ee:e7:1e:7f:21:f1:da:18:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2D:09:C8:A5:7E:90:32:37:5F:BE:F5:CE:C0:2B:68:F0:CD:BE:9A
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cc:d2:b1:a4:e2:75:c3:e0:11:c1:1a:73:81:58:56:3a:50:
fd:e9:6b:6a:3d:e6:bf:43:b7:77:9d:3b:01:ee:14:01:fe:0d:
21:df:99:23:f4:85:77:63:66:c5:6b:13:84:e0:82:72:37:67:
c3:c8:0a:08:e9:1f:d1:c1:18:5e:30:11:07:20:ac:1d:cb:11:
62:fe:48:c9:f1:78:c7:db:46:92:1b:e1:18:b8:b8:42:e1:a1:
c2:e2:ae:84:1c:fa:0f:e8:e3:f5:bf:a7:9e:32:f3:fd:89:0d:
dc:7c:fd:e9:82:7a:48:da:41:a7:a2:8e:61:7c:ed:77:15:a5:
12:b3:88:a6:7c:d6:cc:9e:7c:90:ca:5c:82:1d:85:c1:3d:dc:
54:fa:cf:2a:be:07:83:29:ef:57:23:29:cd:cd:2e:2f:cb:47:
56:ca:dd:6e:be:89:4b:40:20:c7:6c:7b:5e:03:03:f7:e8:36:
9d:8e:51:ed:13:50:c3:de:85:0d:d0:f1:03:3b:5a:9b:87:93:
2f:fb:bc:2d:ee:1c:fc:fb:9e:b3:2b:ba:98:d9:c1:dd:27:f3:
da:77:5b:4d:84:ef:13:23:1c:26:09:cf:74:b5:a6:ae:d3:25:
35:48:94:cd:aa:4b:d1:eb:2d:dc:36:ab:dc:17:40:da:17:45:
4f:f7:8f:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftWAuY/GEdOXhOtV1H7v0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2
MDQzODkwHhcNMjYwNTEzMDUwMDQwWhcNMjYwNTE0MDUwMDQwWjAzMTEwLwYDVQQD
EyhjNzJkMDljOGE1N2U5MDMyMzc1ZmJlZjVjZWMwMmI2OGYwY2RiZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKzql6wPMfVX9XSmmG81+PxqJgpe
jpGIz+CoIdqBUwoqVI5Fx3BcTpE6KDPj8MgXauO08KLmNikqGEvxNIY+FtItvZzS
gr5HAxTaZ/dbR/8vEgL5j6qFJZjxgDr7UD7LYzVR9wFUWRLqn3n1DAatW8xhLjtJ
g5aEvRdA4znoK0C0yvE4RwBQLkSWvVXp2eMVGl8seIjO0qnGj1PsPEUOI0EQF2u5
qwIvE1RI40L+3M/rixyZpPnLQDmw/V0P77Z/qkR5GwGq8EK0HFM+5PvsehG3VaE2
XkSw32tm8uk9Uo+1Tlvw3eU0nUDepbfOdV9/IGvny84U7ucefyHx2hhedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMctCcilfpAyN1++9c7AK2jwzb6aMB8GA1UdIwQY
MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt
MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx
LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8zSsaTi
dcPgEcEac4FYVjpQ/elraj3mv0O3d507Ae4UAf4NId+ZI/SFd2NmxWsThOCCcjdn
w8gKCOkf0cEYXjARByCsHcsRYv5IyfF4x9tGkhvhGLi4QuGhwuKuhBz6D+jj9b+n
njLz/YkN3Hz96YJ6SNpBp6KOYXztdxWlErOIpnzWzJ58kMpcgh2FwT3cVPrPKr4H
gynvVyMpzc0uL8tHVsrdbr6JS0Agx2x7XgMD9+g2nY5R7RNQw96FDdDxAztam4eT
L/u8Le4c/Puesyu6mNnB3Sfz2ndbTYTvEyMcJgnPdLWmrtMlNUiUzapL0est3Dar
3BdA2hdFT/ePpw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:47:58 2026 by rpki-client