Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: NR6EyyPsBlmajN957xtfMCgWyiEmMm/Vdk6yqd5N4HA=
Subject key identifier: 79:EF:80:3A:77:3A:E3:1D:6D:6A:73:47:C5:8F:54:4D:F0:7A:40:8E
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019D9A74BDE228862273F8DAAAE1782651C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 08:00:34 +0000
Manifest this update: Fri 17 Apr 2026 08:00:34 +0000
Manifest next update: Sat 18 Apr 2026 08:00:34 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: t/ttN24pSGHFUEy7LDEtAedCJ81uMwaEn6EXcKuL3rY=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bd:e2:28:86:22:73:f8:da:aa:e1:78:26:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Apr 17 08:00:34 2026 GMT
Not After : Apr 18 08:00:34 2026 GMT
Subject: CN=79ef803a773ae31d6d6a7347c58f544df07a408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:0d:de:90:cd:2c:6a:6c:b0:83:84:3a:86:
c2:2c:d7:72:04:d5:f9:91:31:d6:d7:14:a4:36:e2:
64:2d:06:74:08:f6:05:63:d0:09:d0:bf:c0:5b:e0:
98:26:6c:b3:ff:bb:9e:f8:9c:b4:34:d1:30:4d:30:
08:ad:ee:05:18:38:53:cc:5e:4e:75:34:4c:3c:b8:
96:aa:0f:e5:9f:63:49:b2:44:94:c2:90:5b:03:ec:
16:8b:48:ff:bd:f9:24:7b:26:f9:48:3c:9a:e4:38:
5a:31:8e:ba:bf:51:bb:a3:02:6c:1f:35:ce:61:32:
5f:68:d3:0f:f3:6e:9e:0d:10:85:8a:09:9e:8e:8d:
85:d1:ce:dc:28:4e:7d:68:37:87:d0:65:23:5f:d6:
7c:53:e1:cc:d5:f9:cb:0d:37:3b:13:37:27:9a:9a:
90:33:80:46:d5:8c:9f:2e:82:db:16:f1:8b:b4:4c:
a5:09:2e:a7:e4:1b:20:48:4f:6f:db:89:e5:96:48:
24:93:a6:da:58:cc:23:71:64:23:4c:22:76:99:6d:
97:ef:b2:52:9a:39:51:ad:93:b3:59:47:59:6c:45:
a2:fa:95:90:52:fc:23:c2:d6:a9:a6:02:bb:55:e6:
51:ff:95:9e:67:3c:6f:8e:96:aa:4d:da:81:23:49:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:80:3A:77:3A:E3:1D:6D:6A:73:47:C5:8F:54:4D:F0:7A:40:8E
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6d:b3:a1:8b:e9:cd:f0:e8:63:6b:7d:55:ce:9f:69:6b:e1:
b8:48:fd:72:74:f8:28:53:e3:0a:95:db:8b:d1:a9:1a:73:9f:
a0:68:4f:a3:5d:9f:02:fe:77:f7:7b:a6:d2:5c:92:8e:e1:3f:
26:a0:8b:cc:f3:64:45:51:dc:d0:73:8b:bd:c8:09:08:09:e8:
18:33:0b:87:59:fd:c3:17:01:d9:6c:81:c9:e2:2c:b7:c0:07:
c8:cb:a5:c1:2a:6e:82:0b:e8:94:d9:4d:76:df:33:c7:e1:27:
b0:16:96:dc:01:ce:9d:4f:76:a2:03:16:f7:2d:c2:78:0f:a4:
eb:ad:30:60:4b:ea:8a:a8:fb:29:28:e1:4b:09:96:2c:aa:45:
76:c8:b2:c7:65:d4:71:ec:59:7c:21:d6:0b:71:17:ea:37:6b:
6d:6e:e3:02:22:14:5c:2f:31:d6:02:54:c8:99:a4:2c:e3:99:
26:b2:17:76:42:de:a9:ad:b6:a0:eb:35:6b:86:89:18:9c:a5:
57:c3:b6:2f:83:96:ac:df:13:bf:66:e6:f1:b5:88:59:64:3d:
34:13:4a:f3:73:cd:83:a5:34:ab:82:90:27:6c:9f:12:08:7f:
25:4d:ce:79:e5:90:01:97:b8:a2:11:01:84:4d:ee:3a:a0:4e:
06:95:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:09 2026 by rpki-client