Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: nBQaQeS7S09mlwPau0hh3pemyuAExLJcCNr3xSKWRMQ=
Subject key identifier: 2C:2B:EE:DD:C2:AA:45:4D:17:26:EE:37:71:87:54:CF:AF:89:D4:8F
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 01A0E8531226CB2C84063277E13970264E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1A0A
Signing time: Mon 28 Sep 2026 14:02:33 +0000
Manifest this update: Mon 28 Sep 2026 14:02:33 +0000
Manifest next update: Tue 29 Sep 2026 14:02:33 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: Tq4NOLg3kjDGsrmflpW3pOJDUeYNASooVD7MbJDkakk=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:12:26:cb:2c:84:06:32:77:e1:39:70:26:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Sep 28 14:02:33 2026 GMT
Not After : Sep 29 14:02:33 2026 GMT
Subject: CN=2c2beeddc2aa454d1726ee37718754cfaf89d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:63:5a:ed:ec:ed:67:3e:74:62:c3:e0:e4:
e1:e3:c6:4c:d4:51:bc:8d:00:e4:2d:ae:ee:11:df:
ab:5e:c1:87:c8:19:ea:eb:a2:82:56:f6:37:1d:78:
2a:b0:12:3f:ae:96:12:d5:24:f3:76:f3:8f:a9:3c:
3d:51:b1:0c:06:5e:b4:46:af:ee:73:24:ac:58:3f:
d2:54:92:47:33:f1:6a:a3:e2:c3:9c:70:04:e0:fd:
16:fd:3c:ae:36:79:bc:63:d5:a4:8b:b0:c9:e6:52:
dd:66:81:72:b5:b3:aa:ab:4a:0d:a4:5e:4d:60:97:
49:0a:a2:3f:c4:8c:c7:89:29:4b:24:08:5f:a1:95:
a4:ca:e9:5c:c2:dd:2a:c5:30:fa:2b:4a:69:7d:dd:
8f:21:81:d5:cb:c8:a5:06:0c:45:77:eb:b5:c9:9f:
e7:9d:fa:ef:e7:97:98:c1:eb:5e:fe:e4:1b:a3:02:
17:3e:bc:f3:0e:3d:a8:5d:b7:b0:bf:95:16:0e:0a:
49:9c:d5:3e:48:d6:83:70:64:70:10:3e:ee:03:17:
10:ca:42:63:7a:5c:51:2a:f9:5c:8d:30:48:dd:41:
35:e2:9d:ab:16:ef:cb:de:9f:0a:e6:ad:46:d8:3b:
de:90:af:4c:8d:fa:d4:62:64:56:66:8e:a7:28:ff:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:EE:DD:C2:AA:45:4D:17:26:EE:37:71:87:54:CF:AF:89:D4:8F
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:93:49:72:af:e9:7b:fa:ad:c2:9a:3f:e2:80:1c:74:7f:
56:5d:34:fb:1d:61:20:05:e6:c3:4a:5b:7e:43:96:29:f9:97:
40:cb:fd:09:16:1c:cc:88:f1:0e:16:ea:c0:bf:0d:b6:15:83:
ea:34:a0:41:6c:93:b7:b1:f2:52:4c:af:05:90:3f:5c:7e:08:
d8:49:f0:61:71:b4:27:56:a1:e1:ed:e8:a3:ef:19:2f:cd:e9:
43:e6:71:ea:28:4e:c4:83:a5:ee:a4:e8:80:f3:99:a4:18:d1:
3b:cd:05:9c:3b:f7:3d:ff:ad:c4:31:99:de:2e:66:e8:ac:28:
2c:27:18:f2:73:a9:c5:de:19:dc:34:ef:24:22:4a:78:3f:53:
6f:74:0b:78:56:d0:29:16:b1:67:e7:3d:fb:58:87:50:d7:04:
77:17:08:12:22:95:5d:8a:fe:a4:1c:1f:b0:da:e7:e5:26:5f:
45:34:bb:e1:34:bd:03:83:e8:0a:87:de:55:0d:13:40:61:9f:
e5:a5:db:82:3a:17:66:ca:ac:9b:d8:d5:fd:60:d9:3a:be:5e:
2e:29:26:ad:97:34:43:5c:a8:10:69:63:89:88:4a:30:6a:d7:
7d:4e:f3:53:d8:a8:76:c2:db:ef:7c:fd:3b:b5:ba:62:2c:6b:
d5:17:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:13:49 2026 by rpki-client