Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: J5mh1OZbsxXQNgXpnwRtK7iT2/5KUhj5GcVSzY4FNHQ=
Subject key identifier: 74:62:48:77:B5:33:3C:52:09:A5:6F:B8:38:C5:8E:FC:7C:55:B5:9E
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019CAC7DC81102F69B6973CED5B16C55CBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0CA0
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: +V5t7HHM787vVjfYk7IXMM8r4rH6gF0nKnGa4SBMtTU=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c8:11:02:f6:9b:69:73:ce:d5:b1:6c:55:cb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=74624877b5333c5209a56fb838c58efc7c55b59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:2a:b1:c9:17:31:f1:41:71:ad:49:b1:09:
1e:52:8d:76:d0:b2:9c:67:6b:af:55:8e:95:bf:bc:
0b:89:7a:51:16:df:48:35:43:d0:9e:0e:c5:21:87:
3e:f3:a8:8f:e3:de:dd:96:2c:b2:36:5f:a4:f7:e6:
7f:cf:be:38:22:98:15:dd:99:66:a5:3b:33:28:fc:
a0:4e:90:60:22:30:39:be:60:10:46:57:16:21:6c:
91:0a:84:e8:ca:02:35:72:96:cd:5e:2d:9e:c1:56:
ce:0b:b0:14:5a:f6:f6:08:a4:7e:63:28:84:d5:5a:
44:4a:f7:be:64:d0:e9:a5:41:6c:e8:41:6d:d0:67:
fe:a1:5e:9d:fd:25:11:58:cf:17:2f:5f:12:a7:9a:
dd:3f:11:85:77:51:97:8d:d5:d7:f7:76:56:27:b2:
2f:71:f4:b0:39:7a:90:e3:e5:26:a4:be:df:ae:b0:
26:ba:9e:9e:7f:e6:bb:ba:aa:b0:e3:56:67:64:4a:
00:48:fd:ba:4e:ab:ab:a9:1c:b2:8a:b5:cd:e3:6b:
77:1d:f5:cc:ef:d3:69:7a:82:60:b6:fc:11:3e:09:
9c:5a:16:25:53:a1:5d:2b:27:9a:4f:c5:a5:96:07:
db:a1:cc:6d:bc:58:1c:6b:29:d9:8a:42:b3:d0:c0:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:48:77:B5:33:3C:52:09:A5:6F:B8:38:C5:8E:FC:7C:55:B5:9E
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d8:84:2b:eb:1e:de:78:1c:8b:2f:f5:93:a6:0e:5b:d6:f4:
fe:bc:84:3f:1b:23:5c:f7:40:e2:06:f0:a3:b9:e5:f4:32:3a:
82:28:a9:36:65:39:4a:8b:57:e8:20:f6:30:0b:b2:4d:e9:c0:
f5:31:88:76:88:78:43:e4:15:d7:18:06:63:e3:77:a1:72:34:
e9:6d:51:51:e4:96:7e:2d:3b:34:9c:82:26:d4:d2:f9:0e:48:
9d:93:23:85:fb:5d:79:15:69:22:f7:6d:d9:ac:7d:5a:8f:ed:
8f:30:0e:7f:7e:3b:fb:02:e9:d4:cc:13:e1:14:e1:6f:69:d1:
17:0d:45:49:11:df:4a:ca:47:9e:b5:fc:ce:df:c4:94:64:d9:
61:09:59:9c:54:0b:7e:9c:3b:3e:d4:d0:a8:ff:ca:5c:1e:e3:
31:2e:b2:37:cb:a9:42:f6:ec:0b:82:6d:d0:6f:99:25:69:8a:
31:66:74:40:8d:0b:13:9c:94:31:5a:d5:19:22:ab:49:36:66:
56:d7:35:c9:b2:1a:88:f4:d3:6b:d1:92:3b:86:64:9d:47:0a:
48:a8:42:d4:c3:04:e8:3c:8f:0c:7d:42:74:84:0d:58:2c:fc:
cb:78:3b:1f:7c:c1:30:ba:d1:1c:ea:59:4c:e9:e3:0b:57:ca:
14:e1:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:52 2026 by rpki-client