Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: bR/ryqZFY+liEVGIPnZW+wvx7YkNmBZqCnGhm/J8h6Y=
Subject key identifier: 0B:2B:E5:6C:8F:37:B5:20:EA:20:D6:82:B7:EE:D1:B4:1A:6F:C3:10
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019FA9AC528C07A3BF6C37316CF57718959C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 1902
Signing time: Tue 28 Jul 2026 17:01:10 +0000
Manifest this update: Tue 28 Jul 2026 17:01:10 +0000
Manifest next update: Wed 29 Jul 2026 17:01:10 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: r89ArUf8Tu6QpAXaR+o8poLpbiTPOo/J06igp/CWsgw=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:52:8c:07:a3:bf:6c:37:31:6c:f5:77:18:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jul 28 17:01:10 2026 GMT
Not After : Jul 29 17:01:10 2026 GMT
Subject: CN=0b2be56c8f37b520ea20d682b7eed1b41a6fc310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:ad:47:27:6f:6f:75:cc:20:b7:4b:d2:57:
84:1e:37:1d:b7:db:1a:bb:85:1a:48:db:ca:dc:79:
ee:bd:cb:a5:8e:1a:ca:de:46:4f:7a:1e:ed:ce:8d:
25:77:5c:1b:62:1d:bd:ac:29:32:77:db:2d:a3:d9:
73:8e:3b:4d:ce:6f:1b:4d:8e:17:87:aa:23:89:3e:
4c:62:73:b8:dc:a7:2f:9e:03:0d:69:5c:56:4e:63:
85:f7:be:04:3b:b9:8f:48:4c:12:79:b6:d7:20:ed:
83:6a:df:b5:78:ce:22:af:57:b2:f4:d7:a0:b9:77:
47:04:02:3d:13:74:f8:a5:6f:55:a2:08:6e:ff:13:
c1:5f:92:75:42:20:14:9b:b9:44:71:2e:dc:19:eb:
29:de:99:39:7c:84:9e:61:8c:fb:79:e9:58:83:89:
33:79:9a:c3:77:59:c6:a9:5d:31:d4:42:5d:1d:54:
57:df:93:55:f0:ec:82:f3:6d:07:7a:fb:a9:1c:dd:
d3:be:f4:af:40:4c:a8:04:23:0b:0e:07:d4:d9:a0:
c7:42:59:7f:61:e3:6a:e4:00:72:e4:b8:d7:fa:32:
7a:87:0d:3f:67:a9:fd:6f:1e:2d:08:b1:0b:8c:9e:
d0:b7:30:4c:d7:ca:23:51:c6:24:37:c7:9e:70:41:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:E5:6C:8F:37:B5:20:EA:20:D6:82:B7:EE:D1:B4:1A:6F:C3:10
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:49:ab:b2:e9:5e:c7:49:97:93:d7:6e:84:d1:5b:d3:35:
2c:44:a3:54:11:da:31:a2:e7:f5:8b:c1:cc:84:0e:c8:2e:ce:
ac:33:1d:5e:70:4d:f7:5d:ba:a8:86:3d:97:0e:63:95:86:b1:
e3:b8:67:9d:2c:75:1e:01:d1:d8:ce:7a:c9:0b:92:bb:f7:bc:
7f:43:e1:74:ed:e6:bb:a9:5c:76:18:1a:67:1c:34:75:1f:c1:
95:bd:b0:74:98:9b:62:1f:2e:74:61:86:e9:4f:60:e9:e4:f4:
f3:72:84:76:28:23:28:c7:fa:ff:c7:2d:f6:7c:eb:aa:ee:63:
44:b0:e1:3f:dd:cf:c9:a5:0e:d1:29:f7:83:62:37:18:d8:6d:
97:63:ad:13:cf:a7:ae:3a:cc:7c:39:1c:aa:9c:ba:df:2e:4d:
68:6a:25:d7:f2:a0:89:9f:95:0b:0c:01:6e:6f:1d:e5:8f:90:
74:61:ce:d3:23:00:a5:05:de:23:c0:74:d7:b3:68:97:85:dc:
11:9b:04:91:80:63:80:a7:0d:01:11:f5:97:d5:e1:9e:21:5e:
19:a6:9c:f2:c7:74:94:57:0d:82:e7:77:c7:1d:92:8e:38:9b:
c7:a0:b1:e8:12:67:5f:0f:9a:df:e9:ce:2b:be:97:30:a0:17:
54:51:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:26 2026 by rpki-client