Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: TuSJSWcAmqZVnPcx/yhzKCTjlGEhu3Jc5/etsk3PiDY=
Subject key identifier: 80:39:C4:FD:1B:EA:D9:7E:4F:B3:4E:21:01:E8:44:82:65:48:FF:47
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 01A0C39FFD59E64638228990937E86408712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 1994
Signing time: Mon 21 Sep 2026 11:00:37 +0000
Manifest this update: Mon 21 Sep 2026 11:00:37 +0000
Manifest next update: Tue 22 Sep 2026 11:00:37 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: KezhhRIJtdN4h7V9ebBNm0sAZhsCGwC9WJ/QjO/d3S4=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:fd:59:e6:46:38:22:89:90:93:7e:86:40:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Sep 21 11:00:37 2026 GMT
Not After : Sep 22 11:00:37 2026 GMT
Subject: CN=8039c4fd1bead97e4fb34e2101e844826548ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:e1:ff:76:e4:2e:45:c7:26:65:c3:e2:2c:
2a:88:70:f9:66:56:da:1a:89:af:37:e5:3c:9f:b5:
b5:1d:20:29:89:89:59:fd:56:a5:63:54:53:cc:c5:
62:c6:f8:52:15:4c:67:01:c4:36:99:7d:09:e0:89:
29:a6:79:da:90:1a:24:f7:40:49:cc:bf:62:53:4c:
8a:14:8b:f9:bc:88:df:d9:ab:6b:70:e0:d1:bb:52:
6c:cc:00:3d:21:17:60:3d:63:3b:6e:7d:c4:fa:1d:
e7:a9:38:da:40:49:20:53:76:7a:cc:79:e2:0c:16:
6a:6c:3b:96:d1:9d:4a:09:59:57:cd:9f:f6:38:eb:
1a:05:8d:35:0e:17:33:d9:67:16:cc:cd:1e:ad:58:
1a:ed:49:61:45:d1:39:cf:a3:d9:90:6b:7f:41:50:
8a:cb:f2:56:4e:e8:6e:dc:fb:d6:2a:20:f8:5d:8d:
98:9a:3f:46:98:78:0e:bb:82:c0:9f:7b:5f:03:d5:
be:ea:63:73:1b:d0:37:99:86:a0:53:c0:15:69:17:
16:87:6c:ee:b7:24:18:ee:66:d2:d3:ff:63:6d:8c:
32:66:8b:01:c6:17:1e:15:30:9c:fe:78:5a:e1:4e:
5b:6c:4b:f7:29:6c:a1:83:11:de:d6:42:ff:92:02:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:C4:FD:1B:EA:D9:7E:4F:B3:4E:21:01:E8:44:82:65:48:FF:47
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:51:1a:c9:ee:03:61:40:85:4b:b7:1f:59:78:f9:f5:37:af:
23:2f:7c:ce:97:ef:e3:47:30:aa:d1:26:07:0b:10:01:c5:b6:
d5:c4:b4:d5:d7:d0:1f:9f:7a:44:b1:37:66:54:a5:e4:34:8e:
09:b4:85:e3:92:98:f2:83:4a:2d:5b:7c:86:c7:4d:0d:9e:77:
cb:7b:0f:d3:72:52:2b:4e:4b:6f:57:f0:31:e7:4a:62:53:78:
eb:7a:0f:92:b8:7e:45:19:7e:33:40:d5:4f:f6:71:f7:39:a8:
41:87:40:24:4c:29:9e:da:34:d2:84:11:fe:9e:4c:bb:91:f6:
04:70:06:f2:bb:d6:74:01:02:ba:3f:d7:71:e6:03:fc:c4:7c:
32:22:7d:71:df:9c:6f:3e:06:38:33:cc:9d:cf:5f:e7:2d:fd:
a0:9a:5d:a6:ef:e2:f4:34:58:ae:33:d5:0c:b2:eb:18:ee:38:
0e:f8:9e:1e:ea:01:33:89:de:a8:b6:be:03:27:c8:7f:0b:4a:
a1:ea:b4:4c:ce:d2:6f:f2:b0:b8:d2:18:d2:64:89:71:9e:5c:
a8:eb:c9:b5:10:0d:88:bb:8b:0a:e5:cb:9e:c3:7f:73:6c:cb:
d9:67:5d:61:b4:c2:8d:5f:b8:9e:d7:84:61:42:df:f6:69:68:
4a:ec:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:09 2026 by rpki-client