Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: VS369l7db8XPtvy9IL1V6mM9Af/T0NPbunRiyKy9flc=
Subject key identifier: D8:F3:4F:4F:E1:7D:02:2C:94:06:AE:44:C4:F0:65:F4:BA:D3:0B:BA
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019CAAFD5B99F5BF2A09CFE5562A84A62DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: ptVC5cKHyAxV5sv8M9RT31oo793AqA9cHnf4YzQULeo=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5b:99:f5:bf:2a:09:cf:e5:56:2a:84:a6:2d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=d8f34f4fe17d022c9406ae44c4f065f4bad30bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:f9:58:92:98:b0:47:ca:04:74:e0:9d:57:
24:75:cc:fc:f9:5d:05:2a:f2:ec:33:c5:6a:19:8d:
82:aa:a1:15:23:70:0d:a8:c9:ae:f4:56:dd:23:f2:
b0:e4:af:98:bc:1c:4d:f0:89:df:16:ef:c9:db:80:
1e:75:62:7b:f0:80:2d:7d:b6:ae:a5:43:21:ef:22:
7e:8e:ef:10:9e:36:4d:d1:31:b4:ad:8e:2b:0a:3a:
bb:a7:78:05:5a:96:de:b0:86:9f:47:bc:7d:bd:79:
1f:46:84:e6:a4:ee:5a:35:4c:52:86:fd:72:ba:52:
82:ed:70:25:d6:d7:b1:27:44:e9:83:31:b3:b0:16:
48:2f:db:56:77:f4:51:8b:c4:4e:e0:ad:6b:43:14:
ae:f4:b3:46:e7:0d:d7:fd:b7:48:3d:d0:3d:cd:fd:
64:42:15:e6:49:a3:07:43:49:c1:c4:46:8f:e9:bd:
ea:e4:fd:ec:a7:64:7b:4a:1a:bc:9a:a9:0b:1e:64:
c4:bf:84:3e:6e:9f:37:53:8c:d1:79:79:63:4f:a1:
b5:05:58:cd:a6:86:da:56:4c:30:1d:d2:c2:d2:5b:
e6:2d:42:98:27:88:b0:05:2c:dc:b8:d9:10:47:f1:
f3:13:bb:d7:19:39:12:ed:34:03:d7:c4:ec:21:22:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F3:4F:4F:E1:7D:02:2C:94:06:AE:44:C4:F0:65:F4:BA:D3:0B:BA
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:54:3b:74:57:cd:63:26:29:c4:21:92:17:2f:20:e1:e4:
a6:cc:5f:b1:e9:ba:70:ab:9a:8e:ac:f5:b5:8f:77:ee:0d:82:
38:c3:30:26:5c:d9:7d:05:c8:eb:e0:b5:22:38:8f:f0:ee:ad:
5e:49:a9:8c:39:fb:69:9f:e7:2f:3e:61:9d:09:86:43:75:4b:
5f:83:1b:c2:96:ca:1f:aa:dd:92:d6:7e:18:73:8d:44:e0:bb:
85:de:21:0e:5a:ae:11:21:e5:61:1d:fc:91:d8:9f:f7:f6:f7:
c6:dc:60:e7:3b:01:bc:09:9c:c9:3d:4b:15:b9:6e:63:b4:ab:
7b:0d:39:69:a8:d4:b6:23:32:ee:ea:a1:36:61:fa:89:c5:51:
b2:c2:5d:fc:ae:9f:58:c7:bf:29:50:ac:2e:ba:fb:b4:5d:37:
8b:21:09:85:f0:01:46:41:80:01:0e:b4:17:ad:ab:ec:37:51:
e4:bc:e7:e9:46:98:0d:6d:ee:53:d1:8f:f7:c4:aa:1f:8c:d8:
a6:51:c9:26:6c:ca:53:18:fc:77:3c:f6:9f:e6:71:8c:5e:00:
dc:d0:7c:df:c7:5b:b9:59:45:7c:44:70:46:e7:1c:47:c8:73:
2c:31:50:df:15:33:14:3e:c5:4c:86:15:a3:78:d5:37:4a:cb:
cc:4a:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:20 2026 by rpki-client