Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: vcCeAYaJCyU9pQSyVGRHEw18afSk6YMvziDoQZgCcd8=
Subject key identifier: B1:CE:8D:37:D2:7A:98:44:A9:DF:9A:60:1E:6C:67:0D:63:6D:C5:3C
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 019D98189D70A8A8C64F2BC6E70FA9EB89D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0D1A
Signing time: Thu 16 Apr 2026 21:00:43 +0000
Manifest this update: Thu 16 Apr 2026 21:00:43 +0000
Manifest next update: Fri 17 Apr 2026 21:00:43 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: Flh9egWh8e/2R/anDuUGDqUfTTCXe6WRkcjGIq9uZ7M=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9d:70:a8:a8:c6:4f:2b:c6:e7:0f:a9:eb:89:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Apr 16 21:00:43 2026 GMT
Not After : Apr 17 21:00:43 2026 GMT
Subject: CN=b1ce8d37d27a9844a9df9a601e6c670d636dc53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:3f:1f:9e:be:fb:19:2c:5b:ab:25:9e:9c:
76:0c:c0:e0:b6:70:45:e4:4b:4e:ef:93:e4:a9:f8:
31:16:ba:6b:d7:fd:10:16:9a:0c:43:ca:26:27:a2:
73:4f:c7:bd:0f:fc:15:cd:0b:f3:82:23:c4:91:a6:
d3:2b:89:fb:16:7f:69:5e:b7:6b:4f:98:79:80:12:
98:77:41:73:7b:6f:14:a7:f7:d2:a5:c3:86:86:6c:
cd:5f:ce:90:68:93:af:1d:b8:6c:7f:aa:9f:48:15:
ae:be:1c:8c:8f:75:2a:f7:3d:dc:07:0a:fe:1f:67:
7a:db:e5:d1:25:d2:ef:d7:33:af:19:ce:7a:27:a4:
87:de:30:e3:8f:2f:f8:5c:fc:73:cf:9e:65:ba:7c:
1f:65:fb:ba:a7:1d:68:58:d7:66:3a:1d:67:0d:bc:
40:81:2e:cf:2f:bb:0c:96:98:42:5a:40:c4:09:dd:
e7:17:89:84:6b:19:66:ed:9c:33:4c:24:f1:1d:b5:
84:84:38:f0:22:d8:67:30:4e:d9:15:5e:6b:e8:e2:
25:9f:05:b0:2a:16:1c:da:77:f5:ae:4c:a5:7f:33:
49:a1:23:24:8d:e6:39:eb:b1:6a:a4:e1:7a:8b:0e:
10:4c:c4:7d:9f:06:9a:a2:4c:e0:fe:28:c4:6d:4f:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:8D:37:D2:7A:98:44:A9:DF:9A:60:1E:6C:67:0D:63:6D:C5:3C
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4e:e8:ee:c7:b9:80:13:2e:7e:a5:a8:bc:ce:ff:4a:d5:fa:
29:44:e3:bb:f0:11:4c:b5:92:6b:f3:3b:74:ee:5c:25:14:5e:
af:cc:89:1e:41:34:49:f7:20:10:f2:47:71:ec:e1:31:d6:0f:
48:c6:f4:80:14:d8:24:0b:81:a8:29:66:92:2a:22:33:03:aa:
36:e8:6b:33:c7:06:c6:1f:f5:f1:c1:da:82:46:b3:7b:05:36:
d0:79:c6:6c:0a:63:c5:1a:3f:a0:bd:9e:2c:8c:ad:03:1e:6d:
5f:85:e9:bd:cb:60:82:ea:76:f2:ec:95:8a:38:71:6b:34:35:
2d:44:20:af:a1:dd:b1:3c:5c:fe:a1:da:3f:87:47:b2:d9:9d:
d2:ba:5d:58:fe:8b:6a:85:37:3a:73:85:f4:b2:2a:8e:83:9f:
a8:81:48:4f:23:74:8b:6a:76:b4:c5:c5:7d:2a:47:fc:24:10:
73:7a:b1:70:84:33:76:4a:55:ef:6b:40:12:38:ee:f6:be:f3:
5e:35:b5:53:45:f1:aa:71:4a:e6:24:1a:09:db:26:7d:24:f3:
04:d0:54:5f:19:27:c9:f6:43:70:1b:5b:17:dd:a8:f8:f5:dc:
33:78:95:c3:13:25:9d:2b:60:6f:da:1d:82:db:f0:75:f6:55:
35:20:ec:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGJ1wqKjGTyvG5w+p64nTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm
NGQ0ZDIwHhcNMjYwNDE2MjEwMDQzWhcNMjYwNDE3MjEwMDQzWjAzMTEwLwYDVQQD
EyhiMWNlOGQzN2QyN2E5ODQ0YTlkZjlhNjAxZTZjNjcwZDYzNmRjNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM4/H56++xksW6slnpx2DMDgtnBF
5EtO75PkqfgxFrpr1/0QFpoMQ8omJ6JzT8e9D/wVzQvzgiPEkabTK4n7Fn9pXrdr
T5h5gBKYd0Fze28Up/fSpcOGhmzNX86QaJOvHbhsf6qfSBWuvhyMj3Uq9z3cBwr+
H2d62+XRJdLv1zOvGc56J6SH3jDjjy/4XPxzz55lunwfZfu6px1oWNdmOh1nDbxA
gS7PL7sMlphCWkDECd3nF4mEaxlm7ZwzTCTxHbWEhDjwIthnME7ZFV5r6OIlnwWw
KhYc2nf1rkylfzNJoSMkjeY567FqpOF6iw4QTMR9nwaaokzg/ijEbU9tiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHOjTfSephEqd+aYB5sZw1jbcU8MB8GA1UdIwQY
MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt
NzM1OTBhYTI5MGYxLzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx
LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE7o7se5
gBMufqWovM7/StX6KUTju/ARTLWSa/M7dO5cJRRer8yJHkE0SfcgEPJHcezhMdYP
SMb0gBTYJAuBqClmkioiMwOqNuhrM8cGxh/18cHagkazewU20HnGbApjxRo/oL2e
LIytAx5tX4Xpvctggup28uyVijhxazQ1LUQgr6HdsTxc/qHaP4dHstmd0rpdWP6L
aoU3OnOF9LIqjoOfqIFITyN0i2p2tMXFfSpH/CQQc3qxcIQzdkpV72tAEjju9r7z
XjW1U0XxqnFK5iQaCdsmfSTzBNBUXxknyfZDcBtbF92o+PXcM3iVwxMlnStgb9od
gtvwdfZVNSDsAg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:04 2026 by rpki-client