Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: t5FRg3D9EqwSU+gUonxeZlw4PBzpIewFQdEPov5sY+c=
Subject key identifier: D9:CD:F7:19:38:AF:E8:DA:56:1A:CB:73:63:25:59:CC:19:8E:87:7A
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019F909140A6449E36310AAD1B190B69CF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 20:01:05 +0000
Manifest this update: Thu 23 Jul 2026 20:01:05 +0000
Manifest next update: Fri 24 Jul 2026 20:01:05 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: giBbT17XrVeQ5GRgoa/kSvehkz43VZpU/aCctupHQCk=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:40:a6:44:9e:36:31:0a:ad:1b:19:0b:69:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Jul 23 20:01:05 2026 GMT
Not After : Jul 24 20:01:05 2026 GMT
Subject: CN=d9cdf71938afe8da561acb73632559cc198e877a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:dd:22:53:ea:51:3b:c7:fc:f8:77:82:48:
79:f1:7f:c5:d4:88:9c:0d:b4:08:97:be:cb:36:34:
f6:f2:23:60:11:e1:e0:73:f6:0c:40:d5:b7:44:68:
78:50:19:f1:1e:de:d8:85:5a:63:f3:79:45:4e:8e:
f3:be:63:ce:9b:7c:d8:1f:a5:44:3c:45:e4:60:64:
77:c7:80:cb:9f:56:ca:c7:71:89:da:8e:0e:a5:1a:
ad:1d:bd:09:3b:6f:ad:9e:b1:06:21:b7:3c:6e:36:
4f:10:99:e5:70:07:95:7a:9b:f7:f0:2b:a5:09:c6:
24:bc:de:04:fe:15:cb:14:24:b4:c7:ba:2e:e5:77:
22:a6:89:50:b2:f3:52:4e:0d:8d:d6:00:a3:17:e2:
49:a5:d5:57:c8:60:fa:e9:16:c8:97:d4:77:25:37:
82:f2:16:45:6b:c2:2e:a5:6d:f2:fc:8d:6b:8b:9b:
20:59:11:b0:06:4c:ab:a8:53:15:90:51:73:0a:5f:
c3:7f:d3:f5:6f:59:d2:9c:6f:ab:fc:58:02:99:33:
34:c4:02:c0:8e:52:95:00:e4:4f:0a:25:bb:8b:96:
eb:2b:a7:cc:13:0d:d7:2b:18:ad:99:8d:17:7e:cc:
f9:ef:4f:7d:43:99:f3:be:e6:c8:a7:52:6f:ef:1c:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:F7:19:38:AF:E8:DA:56:1A:CB:73:63:25:59:CC:19:8E:87:7A
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:f7:0d:ed:44:42:eb:6b:a0:2c:84:bb:38:8a:ca:f1:b1:
2a:ee:80:a3:c6:cc:08:2b:63:90:65:ae:78:d0:3c:dd:09:cf:
37:c6:fe:8b:35:ab:ac:0f:41:e5:c6:1a:95:07:d8:82:61:c2:
0e:43:e8:61:fe:ce:bc:76:94:1d:e4:0f:3c:59:93:a5:47:c2:
d8:85:a8:f1:01:3d:c6:ae:1a:68:79:40:ae:41:f8:63:a8:fc:
2b:f8:26:05:74:70:49:ae:39:dd:59:6a:49:5b:fb:c8:0f:bb:
19:97:b9:e9:7a:f0:d4:fd:51:36:27:1b:93:ec:52:17:da:8b:
e4:6c:82:a1:ff:e3:11:91:55:59:83:23:ab:13:bf:99:c0:89:
c5:a5:73:b8:0b:2f:40:7e:13:4a:d2:4e:58:5e:50:e7:49:dd:
c7:1b:e9:16:15:24:68:4b:7e:f9:62:7f:58:62:bd:f0:37:10:
9c:b4:e3:ce:de:54:89:9d:95:6b:69:17:1f:7c:48:cc:2c:ef:
5a:57:fa:ec:cc:8b:2f:0d:8d:86:51:e0:5f:73:cd:e0:66:f9:
ad:cf:8c:ea:09:85:06:55:a5:73:03:48:d5:bd:32:c6:11:64:
64:cf:cc:c1:a1:75:4a:2d:af:46:22:b4:12:75:eb:81:fa:b8:
02:5e:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:09 2026 by rpki-client