Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: Excr9jbY/XYkjonUxjYKVwuPRxAqVQjy9MjUlfF6zSg=
Subject key identifier: 84:B2:43:A4:7D:8E:98:44:77:E2:C5:13:D2:77:F1:39:09:54:D1:AD
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 01A128E7E865B6F3D89B76221E88F6335662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1A29
Signing time: Sun 11 Oct 2026 03:00:49 +0000
Manifest this update: Sun 11 Oct 2026 03:00:49 +0000
Manifest next update: Mon 12 Oct 2026 03:00:49 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: Bgqs1YjlYy0nYzRgzZ2IMMfv7SEkYm3+PwYlVKICQhM=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:e8:65:b6:f3:d8:9b:76:22:1e:88:f6:33:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Oct 11 03:00:49 2026 GMT
Not After : Oct 12 03:00:49 2026 GMT
Subject: CN=84b243a47d8e984477e2c513d277f1390954d1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:69:66:33:2a:02:df:66:9f:83:74:31:fc:
eb:c5:7f:5b:e8:fc:80:d7:f4:1f:cd:c4:30:9e:4a:
46:1b:8c:9b:c1:29:2f:87:92:2f:ac:d6:de:6d:28:
f7:af:76:c3:f1:c9:ad:d7:62:1c:19:3f:c7:ec:a8:
02:3b:e8:d9:7f:3a:64:86:f3:80:9f:75:3c:59:4e:
04:83:3a:fe:b3:ea:d0:2b:d7:b5:49:91:57:4e:11:
c9:8a:b3:6d:cb:fd:92:52:74:11:35:e6:d0:59:97:
fd:02:30:11:00:87:82:65:a3:27:f0:d2:a0:43:0f:
e0:fe:ab:e1:fc:b0:7b:b4:75:a5:d0:c3:f2:b9:df:
3c:2e:dc:41:d4:b6:2b:a9:81:28:49:67:76:34:05:
a5:a1:a3:d5:03:80:33:8e:89:ad:21:38:51:18:a5:
0e:71:47:1d:de:8f:3c:54:e0:9e:c8:54:81:90:59:
b1:e9:cc:4c:8a:bd:5c:48:26:be:03:86:ac:0b:44:
49:fa:7d:40:e9:e3:12:33:d9:4c:a0:81:08:32:7c:
fe:31:e8:37:23:96:5c:c6:95:d7:b3:73:31:76:43:
61:e7:e9:64:0f:7d:e9:ed:7f:e8:31:a0:fb:71:63:
00:66:cf:85:bf:d1:6b:2b:b5:76:bb:11:8f:91:6f:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B2:43:A4:7D:8E:98:44:77:E2:C5:13:D2:77:F1:39:09:54:D1:AD
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d6:a6:f4:fc:54:be:39:4c:16:3b:ee:95:2b:e2:f6:e0:db:
0e:70:1a:0d:7e:f0:fe:df:ac:ab:66:6e:f3:13:59:1b:30:15:
f6:b2:c4:e7:de:f8:44:f0:e7:4b:b2:55:72:1a:3c:75:b8:79:
64:81:37:7c:df:53:88:96:87:a3:4a:1f:98:54:90:d8:ae:ac:
45:06:78:3f:67:31:0e:9d:1c:af:dd:a9:7b:7c:a2:15:c1:14:
b1:9b:db:16:4d:e5:10:16:65:98:27:60:10:6d:ff:cd:bb:7b:
d9:9e:a4:6a:bb:d0:6c:f7:3f:e8:d0:32:0d:12:cd:87:41:c7:
4d:9a:a4:8e:4d:07:a3:4f:4d:68:16:3d:04:a4:d7:3f:69:35:
23:09:a8:84:4a:41:af:80:af:24:f1:76:0e:c2:b3:16:f7:60:
8b:df:18:6e:d8:92:32:ec:52:81:50:9e:86:77:19:4c:69:d4:
cf:7b:6b:30:85:d5:65:e3:e0:6f:ef:c1:8f:6d:c6:27:a9:11:
8e:4d:c5:07:a6:cf:d4:62:12:68:b0:8b:a2:20:b2:38:c8:1c:
5f:da:ee:6f:78:7e:eb:38:40:56:3f:a0:a8:e3:b5:87:b8:d1:
09:9a:83:53:98:c1:28:c0:a1:2d:f5:12:51:77:54:9b:ad:0a:
56:76:05:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo5+hltvPYm3YiHoj2M1ZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2
YjUwMGYwHhcNMjYxMDExMDMwMDQ5WhcNMjYxMDEyMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg4NGIyNDNhNDdkOGU5ODQ0NzdlMmM1MTNkMjc3ZjEzOTA5NTRkMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJFpZjMqAt9mn4N0MfzrxX9b6PyA
1/QfzcQwnkpGG4ybwSkvh5IvrNbebSj3r3bD8cmt12IcGT/H7KgCO+jZfzpkhvOA
n3U8WU4Egzr+s+rQK9e1SZFXThHJirNty/2SUnQRNebQWZf9AjARAIeCZaMn8NKg
Qw/g/qvh/LB7tHWl0MPyud88LtxB1LYrqYEoSWd2NAWloaPVA4AzjomtIThRGKUO
cUcd3o88VOCeyFSBkFmx6cxMir1cSCa+A4asC0RJ+n1A6eMSM9lMoIEIMnz+Meg3
I5ZcxpXXs3MxdkNh5+lkD33p7X/oMaD7cWMAZs+Fv9FrK7V2uxGPkW/AGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISyQ6R9jphEd+LFE9J38TkJVNGtMB8GA1UdIwQY
MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt
ZjQyMTc2Y2QwNDQ1LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1
LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNam9PxU
vjlMFjvulSvi9uDbDnAaDX7w/t+sq2Zu8xNZGzAV9rLE5974RPDnS7JVcho8dbh5
ZIE3fN9TiJaHo0ofmFSQ2K6sRQZ4P2cxDp0cr92pe3yiFcEUsZvbFk3lEBZlmCdg
EG3/zbt72Z6karvQbPc/6NAyDRLNh0HHTZqkjk0Ho09NaBY9BKTXP2k1IwmohEpB
r4CvJPF2DsKzFvdgi98YbtiSMuxSgVCehncZTGnUz3trMIXVZePgb+/Bj23GJ6kR
jk3FB6bP1GISaLCLoiCyOMgcX9rub3h+6zhAVj+gqOO1h7jRCZqDU5jBKMChLfUS
UXdUm60KVnYFLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:06:01 2026 by rpki-client