Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: fBE/K85Dne1VOZKbDwnyLoWrx+OszwPC9j1Ujuf8PZg=
Subject key identifier: 3B:C0:EE:BE:9E:DB:79:F9:93:A3:EF:07:26:3B:B9:11:CC:27:A4:EB
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019EBF91BC5CBBB8594CEFCC700EE148F89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0DB3
Signing time: Sat 13 Jun 2026 06:00:59 +0000
Manifest this update: Sat 13 Jun 2026 06:00:59 +0000
Manifest next update: Sun 14 Jun 2026 06:00:59 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: m/PNUWgCoc0LF5vVhhtL1h3zPH9+7P3DnKZ1INB0tzQ=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:bc:5c:bb:b8:59:4c:ef:cc:70:0e:e1:48:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jun 13 06:00:59 2026 GMT
Not After : Jun 14 06:00:59 2026 GMT
Subject: CN=3bc0eebe9edb79f993a3ef07263bb911cc27a4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:eb:13:a2:5a:7d:7b:85:4b:d7:a5:81:d0:
dd:d8:5c:a9:1f:d5:f5:88:0b:79:37:23:6a:73:61:
9d:23:69:ae:18:10:91:78:65:ec:9d:84:a1:3c:eb:
22:b7:8e:33:d0:9b:e6:53:e3:d0:9e:4e:21:c0:c8:
4c:d8:b6:6c:37:22:fb:20:92:26:18:c2:5d:7b:5e:
2a:36:33:1e:ce:f2:05:9b:07:44:db:f3:29:2d:50:
c1:40:1a:b9:66:bf:08:dc:2a:71:0e:66:ff:3f:43:
92:e7:70:7e:50:72:6c:e3:ac:b8:a6:8a:b4:15:0e:
b2:1c:84:c9:f0:55:e2:2d:1e:a9:14:4a:8b:11:3e:
72:c4:66:e7:d8:2d:bf:27:1d:f3:29:c2:23:9b:5c:
59:fa:dc:ee:1a:97:9a:55:b4:38:93:1e:cb:c1:1e:
bf:45:c2:d5:9f:81:db:82:47:13:eb:26:d8:2e:25:
4b:c4:3f:b8:78:52:f0:28:bb:5a:ee:af:46:c2:e0:
cf:d1:f1:29:77:42:c6:39:3c:9d:06:03:40:6b:23:
f7:0a:ce:a5:56:1b:8c:f7:98:77:3f:cf:b3:bf:4e:
da:cb:9f:fc:1d:51:37:1e:82:52:4b:89:06:12:7e:
be:f2:35:ab:0a:9c:ca:be:84:aa:bd:f9:de:ed:75:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:EE:BE:9E:DB:79:F9:93:A3:EF:07:26:3B:B9:11:CC:27:A4:EB
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:0d:13:7c:80:3c:f2:8d:9d:76:0f:80:7f:ee:b9:4d:a4:
94:6c:43:a1:ca:36:2e:4f:df:bd:88:ea:53:11:eb:a6:44:41:
bd:ae:e3:3a:b6:b5:f8:7f:0c:5a:d4:11:98:7a:d9:a6:c1:89:
1b:8a:23:e7:41:45:6c:e2:21:95:80:8b:ee:db:83:74:ed:c1:
57:80:e7:9a:74:c0:3c:06:fd:af:b9:5d:a1:fd:4c:01:8a:b8:
47:47:40:7d:46:70:5b:3d:47:04:68:37:32:db:61:1e:5b:e4:
b4:c8:07:a8:9e:2f:45:e9:ae:e7:e0:76:f8:9f:0b:17:02:78:
eb:3b:d5:73:33:17:63:b4:5b:8d:66:63:66:8c:05:19:cc:30:
22:be:6b:72:c9:25:9a:e5:74:15:04:cc:b6:45:22:a9:6a:d2:
df:b0:90:5d:ff:0d:a7:a0:4c:bd:53:5f:b5:72:22:43:81:2d:
8a:8e:2e:83:de:01:b5:38:20:5f:ad:7d:51:46:b1:9e:44:43:
35:8f:e5:52:d4:ee:f6:62:33:4d:d0:32:43:20:1c:cc:38:ac:
9b:22:98:f0:11:c7:6f:de:d7:14:b7:69:39:39:eb:9e:2d:a5:
4e:84:63:3f:10:a7:89:f8:90:5c:a4:c3:8c:55:a0:5c:db:26:
3c:0d:50:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:49 2026 by rpki-client