Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: pPtAvI5lQx6FHsrlQpacDFKuYVUIX1hVThXCzoEBC7U=
Subject key identifier: 2B:0D:48:E5:99:05:45:D0:09:F1:15:B7:0F:B0:8C:E7:1B:13:11:96
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 01A0CF35DF9C90D7541FE585A45B5E65865E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 199A
Signing time: Wed 23 Sep 2026 17:00:09 +0000
Manifest this update: Wed 23 Sep 2026 17:00:09 +0000
Manifest next update: Thu 24 Sep 2026 17:00:09 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: ro/RSEy2+4oBb3nWTPwiyCv6K+dlHNzliP81Rfoa7wc=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:df:9c:90:d7:54:1f:e5:85:a4:5b:5e:65:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Sep 23 17:00:09 2026 GMT
Not After : Sep 24 17:00:09 2026 GMT
Subject: CN=2b0d48e5990545d009f115b70fb08ce71b131196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:d7:37:1d:a1:05:32:6f:b9:29:a3:ea:14:
e2:ba:67:d8:ee:9a:c3:22:e8:7d:d3:4b:61:52:31:
16:04:7b:28:d4:a6:ec:7a:cf:dc:4f:cd:7f:66:b3:
09:5a:3f:06:df:25:ef:66:0a:a9:6c:7b:29:6d:3b:
15:9e:6a:62:d0:e5:cc:f0:50:15:82:47:4e:35:e8:
57:29:11:17:bc:63:ad:b4:c1:36:48:66:32:27:ec:
31:a3:31:b3:7e:e7:28:94:53:d3:24:c9:b8:ce:f2:
23:7f:65:f5:40:61:82:d8:f6:e3:28:21:b8:08:e6:
78:7e:11:44:5a:0e:64:07:33:3d:4b:ec:8f:bb:ca:
d7:bf:84:d4:81:82:e1:b6:4c:a5:ac:00:cc:4c:1b:
a3:99:7c:d3:6a:72:8c:21:de:ed:0d:da:e6:9d:5d:
72:ec:4c:64:e6:99:7d:ab:e1:4b:c3:5a:aa:a6:0b:
2c:a4:f1:6a:2a:21:6f:be:8e:2c:30:0b:1a:25:af:
45:3c:23:1d:98:95:78:37:15:c3:58:cb:2b:72:c0:
46:da:31:3c:f0:1f:bc:49:1e:08:83:1e:34:af:9e:
1e:31:3b:a8:95:be:1e:22:a8:dc:1f:ba:5b:22:8a:
9e:ee:13:f9:74:b0:cc:f7:e2:96:1d:17:cc:fb:07:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0D:48:E5:99:05:45:D0:09:F1:15:B7:0F:B0:8C:E7:1B:13:11:96
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c7:bc:79:f7:cd:c3:58:63:69:7b:12:d5:4f:55:b0:42:08:
0e:a8:69:d1:f4:c8:48:8f:f3:1b:df:03:63:3c:95:91:9f:fd:
f5:ac:5d:ef:03:a9:5c:69:b3:5e:9e:58:9b:f3:c6:38:06:4d:
d0:8c:de:0f:86:c7:ab:dc:e4:41:fb:b7:f6:26:e0:9b:aa:34:
72:ad:12:cc:c4:46:0d:5f:3a:1a:4d:1c:a3:5b:53:6c:63:fa:
cd:cc:3e:bb:f5:76:4e:59:9a:4c:2a:2d:b7:99:c3:13:2a:bf:
e7:98:71:c3:bd:bc:81:ac:7a:47:01:53:42:ba:7a:9e:a2:20:
cd:c3:2e:26:84:9f:c4:45:14:58:db:df:93:f6:93:ff:46:6d:
cb:43:a8:b5:5a:9d:bb:de:f6:fc:cc:df:4b:dd:f4:cd:8e:6e:
18:8b:c4:91:11:f2:a9:c4:05:cf:ba:8c:df:be:ce:9f:e0:ab:
af:d5:65:64:c8:c4:76:de:2b:1e:44:66:0b:f4:fa:b4:0b:53:
4c:e4:28:97:5d:3b:88:d1:6e:f4:7c:48:64:83:e5:b8:c7:01:
f1:e9:85:e2:7e:e3:01:d3:61:d8:d8:0b:22:f0:be:60:51:6c:
9a:03:23:d5:be:a2:a1:d6:63:45:0d:03:be:dd:8a:a7:df:29:
5b:28:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:57 2026 by rpki-client