Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: 2nRdUp/VYJe0ImK8brPDEWM60QHs8oXwjeV8XX4MeQY=
Subject key identifier: DF:3C:A6:3C:B3:7F:60:FC:E7:9C:C6:35:9E:3D:5F:0C:4C:C8:EA:26
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019D2884A23F93477CF8EFB0967A8A94B9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 17B6
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: ob9d1f45UkQkMndfAugPAM9cmvzNujG20khM4+3eFt4=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a2:3f:93:47:7c:f8:ef:b0:96:7a:8a:94:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=df3ca63cb37f60fce79cc6359e3d5f0c4cc8ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:20:cc:7b:14:b0:20:e4:0f:ce:e3:ae:84:
0b:73:b8:79:7b:0c:0a:c1:0d:d5:a7:84:90:8f:28:
a6:8b:a5:a6:1c:f3:75:b5:60:2d:26:bf:e4:0d:dc:
bd:4b:7c:cb:cc:79:2d:85:2a:98:f8:0b:95:fc:de:
34:c3:13:e1:ba:74:bb:94:ce:d2:93:7b:fe:58:21:
9b:90:79:0e:fb:bb:b5:c6:e6:a1:99:cd:7e:97:1d:
e3:d7:76:67:02:db:20:4b:29:92:6d:ad:0a:69:2e:
4e:ea:48:ed:06:50:2d:77:16:b4:2b:59:e6:e9:04:
6e:46:88:ae:d8:a3:a5:97:70:1f:74:fb:c3:9c:27:
dc:da:00:eb:06:5f:62:68:45:1f:d6:c2:cc:ea:0d:
61:9b:31:ef:6b:05:c9:5d:6f:22:68:23:02:d5:c5:
22:dd:1c:03:57:70:0b:a4:30:eb:bd:48:5e:cc:b4:
c9:55:6f:58:fd:fd:75:23:c7:2e:fc:ce:0e:0b:58:
6f:a4:ca:b4:dc:8e:f4:ce:ee:22:e0:03:67:46:8e:
dc:65:93:07:a2:28:f1:ea:a5:c1:52:2e:4e:73:26:
54:95:6b:b1:1c:50:36:01:7f:9e:dc:c4:1b:39:07:
45:d1:28:f2:64:6d:5d:ff:82:47:a7:c6:61:f4:76:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:A6:3C:B3:7F:60:FC:E7:9C:C6:35:9E:3D:5F:0C:4C:C8:EA:26
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:38:5c:f3:76:35:59:90:a7:af:aa:10:58:34:46:ea:a7:
7d:9b:3d:32:8c:ed:cd:29:91:1c:6d:9c:fb:8a:66:90:82:c4:
63:4d:4c:e3:a0:19:bc:e6:04:3a:7f:7f:2f:64:be:9e:0a:73:
bb:5c:34:59:0d:ca:0d:07:65:e6:8b:7f:9b:1b:c9:b1:17:f9:
95:52:16:9a:3f:c8:f7:a9:f6:27:00:6b:89:da:f2:78:fa:cd:
b0:29:f4:32:32:2c:ae:6d:0b:24:c8:df:08:98:55:0a:3c:2f:
2d:68:8c:4f:2a:29:f9:a5:37:e2:42:ab:cc:19:a3:de:45:a8:
a1:a6:cd:17:32:6f:e8:9c:d7:4f:c6:bd:b9:f3:87:86:71:f2:
f6:98:90:fd:5a:d1:d0:a3:4e:a9:e3:9e:84:b9:29:bc:01:2c:
6d:d5:45:d7:10:6c:9d:75:80:09:bb:b0:ed:b9:ea:d3:08:33:
e7:1e:ec:44:f6:cb:0e:a4:f2:b3:59:91:1a:91:bc:45:48:9d:
17:68:85:e5:12:66:fe:76:b4:25:7a:c0:92:91:f9:2c:34:18:
ff:a9:4b:10:86:8e:8f:e9:29:b8:a6:c3:e1:2b:38:ee:45:18:
3e:e0:da:de:24:d8:aa:55:e9:08:c2:dd:45:d0:5a:84:3c:7c:
f9:63:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:50 2026 by rpki-client