Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: 8CkVlqp9lQF+84D5vydGh4fdp9xa/nK97T/143OQcfQ=
Subject key identifier: 14:EA:78:49:38:5C:8B:5F:8C:B7:36:AC:19:07:8D:B2:1C:C2:FB:8E
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019FAB2CA1FA63F47375991F583F1ECF2611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0E2D
Signing time: Wed 29 Jul 2026 00:00:56 +0000
Manifest this update: Wed 29 Jul 2026 00:00:56 +0000
Manifest next update: Thu 30 Jul 2026 00:00:56 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: I2UHNABEaYqHmMMTA8k8QtcLwG7CnTz/O/IjDGm2OPM=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a1:fa:63:f4:73:75:99:1f:58:3f:1e:cf:26:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jul 29 00:00:56 2026 GMT
Not After : Jul 30 00:00:56 2026 GMT
Subject: CN=14ea7849385c8b5f8cb736ac19078db21cc2fb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:6d:23:bb:34:af:41:77:35:88:ef:c9:d1:
4d:d4:73:dd:88:63:ec:88:de:5d:dd:52:f3:e1:a7:
c0:4f:25:51:60:b0:9c:1f:f9:2a:ef:13:09:7a:30:
09:18:02:1b:59:8f:1d:79:a0:63:12:84:be:74:50:
cd:e0:13:e5:10:91:f1:b3:be:81:6f:cf:78:45:7e:
41:9f:66:60:b9:fe:75:2d:49:3e:4e:38:9a:47:ed:
3c:b9:f8:9c:b7:6d:f6:c6:6c:26:8d:42:61:a2:2f:
05:8c:73:e6:6e:3c:2e:10:c8:b7:82:70:38:bd:3c:
4b:5c:5c:0d:f3:38:03:a0:0b:bb:c3:c1:91:53:23:
61:1c:67:e1:7d:d8:6c:50:ac:09:bf:58:ed:ab:f7:
3e:76:8d:ba:38:4e:10:cb:5e:81:f0:c1:56:ea:d3:
8a:d5:cc:9c:10:30:17:64:b3:b5:28:2d:8a:c9:a0:
73:fa:27:3d:d0:a2:9a:e0:bf:77:30:f2:fd:46:a3:
1d:f4:39:c5:75:d8:e2:b6:f1:60:56:05:64:f6:4b:
10:27:17:f4:20:8e:71:94:27:98:2b:d6:a5:d7:3f:
e4:38:b9:30:fa:55:3a:c5:7d:8c:96:48:d4:a6:9d:
91:fb:0e:16:b9:42:fe:b8:d8:4e:28:56:f8:c0:db:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:78:49:38:5C:8B:5F:8C:B7:36:AC:19:07:8D:B2:1C:C2:FB:8E
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c2:89:8b:91:5a:f4:97:e9:b1:5a:c9:bc:83:46:74:7c:5f:
55:44:3d:bf:ab:e0:a6:b6:d3:0c:dc:ab:a4:38:31:a4:63:65:
97:b1:78:bf:fd:1e:9e:d2:83:fc:11:90:51:6d:b0:e9:2b:c6:
3e:40:7c:c2:66:0d:31:56:27:4b:8a:16:63:21:b6:08:72:7f:
4c:ea:08:2f:bc:8a:9e:0b:27:50:ae:61:6c:8d:bd:d0:8b:6a:
f4:61:23:da:40:0f:6e:2d:52:e9:c2:31:87:bb:b2:9c:84:4a:
51:30:74:fc:a9:09:a1:5b:04:83:8d:68:9a:86:c4:67:83:17:
1c:13:1b:b9:7c:0e:9a:a8:b5:a5:b1:8e:b3:91:e1:4e:07:a8:
68:ed:23:e3:8b:22:31:4f:4c:cf:a6:6a:55:41:3f:62:3e:1f:
36:21:9e:6f:dd:4a:b2:17:6e:02:dc:6c:fc:e1:0a:a3:22:81:
0a:41:b4:34:52:25:01:de:17:06:39:e3:fc:9e:e1:69:c4:3d:
6d:07:d2:70:ae:8f:59:83:76:3e:03:26:40:ee:61:88:03:ae:
e1:30:08:e2:c5:38:f7:ec:3f:82:22:4a:b8:b4:34:e1:04:ce:
dd:48:1a:9e:b7:f7:97:57:32:e5:e4:50:6d:49:6b:e1:fb:0f:
08:5c:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:57 2026 by rpki-client