Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: +kxN0u2Z4CPljt1X7dSEaEFPM9rsjVho4s4UAx2oS94=
Subject key identifier: 3A:8B:81:64:01:EE:50:A6:59:05:BF:4F:71:AC:22:BA:63:D0:CE:F6
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019E1DC700A664374E98F58B31D7DC544235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 1835
Signing time: Tue 12 May 2026 20:00:41 +0000
Manifest this update: Tue 12 May 2026 20:00:41 +0000
Manifest next update: Wed 13 May 2026 20:00:41 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: FV4XtxgEBOMu89lHuPQxMQsTws/8hcNoE/z3zfvItLk=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:00:a6:64:37:4e:98:f5:8b:31:d7:dc:54:42:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: May 12 20:00:41 2026 GMT
Not After : May 13 20:00:41 2026 GMT
Subject: CN=3a8b816401ee50a65905bf4f71ac22ba63d0cef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:53:06:23:0a:32:8c:e9:fa:54:8c:25:21:
59:5a:ce:94:f2:5f:6a:0d:77:34:df:54:d3:96:44:
43:a3:35:69:32:0f:69:e9:98:a0:c1:ae:df:ef:50:
34:51:57:cb:b2:85:35:fb:81:9a:1e:95:10:84:de:
6f:ae:37:bb:31:74:26:d3:86:dc:19:00:f2:60:f2:
ff:6f:7e:62:c3:74:22:35:f5:e2:b9:57:39:52:01:
38:25:a7:f8:2b:9e:b3:25:1e:d5:00:f6:1d:89:af:
5e:93:39:65:cd:ad:55:cd:61:63:dc:cf:a7:18:c9:
8f:d5:99:f0:ff:49:84:18:5e:34:f2:a5:93:74:4c:
cb:eb:6d:ea:17:c4:b0:30:60:c6:37:91:5e:30:3f:
94:ef:b2:97:ed:e3:c2:2f:06:39:f4:55:fe:eb:bd:
57:6a:fc:41:a4:cb:04:b5:f3:39:8a:e7:20:3b:89:
e6:91:0a:9c:20:26:46:54:2a:9c:3a:12:5c:24:ad:
09:26:75:02:0c:e4:f9:33:45:46:b6:9e:d9:92:0a:
fe:d1:41:87:42:bf:33:a9:ae:ae:f4:55:ac:7c:e2:
3d:67:21:3a:83:dc:32:36:39:79:3a:2d:9f:fd:a0:
e4:92:73:4f:6b:25:76:b6:c5:e9:7c:51:99:e4:7b:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:81:64:01:EE:50:A6:59:05:BF:4F:71:AC:22:BA:63:D0:CE:F6
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9f:b4:19:bd:4f:2a:b8:ea:6b:f7:cf:e9:cc:cd:81:4a:9e:
a6:3b:9b:58:e9:12:a5:8d:74:0b:5c:6c:b2:94:38:32:fa:48:
34:43:a2:2f:47:8c:79:20:c1:aa:a1:37:78:9a:b4:aa:83:7e:
49:95:28:51:8f:35:d3:33:69:a8:53:32:04:86:ff:c3:ff:0f:
0c:f6:c4:7e:11:2b:28:e1:67:13:ea:7a:68:a7:b6:2c:5b:81:
76:90:d0:01:bf:6d:0c:01:e3:16:f9:ed:23:3a:43:bc:a2:ef:
32:77:55:d7:76:ef:7b:04:0e:41:d8:4c:b3:ac:28:4a:4d:c9:
c5:6b:c3:b8:e2:22:19:65:92:61:29:c0:d6:47:fd:cd:27:1a:
5e:89:0f:43:03:92:be:79:b7:d7:d2:02:5b:b2:44:ec:74:34:
f1:59:e3:7a:6c:5c:2d:4d:7c:c2:d9:b5:78:33:fe:ad:f4:0f:
1f:3e:b4:3c:52:58:10:c7:0f:17:b5:e6:60:f9:fa:7e:5f:d7:
d5:73:63:63:91:45:c2:4c:3d:c6:c9:14:6f:e1:ff:87:8a:93:
29:f7:b1:ff:8d:37:81:9e:86:ea:73:97:70:50:98:c6:86:5f:
36:8a:61:56:d3:6e:ba:a2:49:6d:4f:53:f4:67:85:8b:bd:f6:
e0:05:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:06 2026 by rpki-client