Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: 7+UwCFyZKLRHHdP4vslwhCw2T7OyrmX4QL1zvohEYVo=
Subject key identifier: B7:3D:F2:A2:1E:9F:B8:A1:2F:7B:FD:E8:63:AC:E8:4E:AA:54:B6:98
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019CAAFD6053EF47411ABA5ED7A82AF3F52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 1775
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: eoQGlw13ScJLUENrCIs5lUg/3QfvX/VUFNsklYIdxak=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:60:53:ef:47:41:1a:ba:5e:d7:a8:2a:f3:f5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=b73df2a21e9fb8a12f7bfde863ace84eaa54b698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:e1:88:ef:56:4e:4b:41:81:69:5a:d6:f9:
a6:f9:45:1e:f6:e2:bc:7c:16:d2:26:3d:50:a9:f4:
76:dd:98:85:ca:0b:62:61:31:f5:cf:47:53:10:34:
a8:29:5b:b4:f4:fd:11:f9:12:b8:87:61:4d:28:af:
76:71:3b:e0:cd:f0:11:64:1b:92:7d:ec:01:3c:38:
dc:1e:6b:47:15:ec:29:27:78:5d:d0:c0:9e:a6:ba:
35:e5:1b:d6:a4:e2:28:28:be:05:ec:06:2d:0e:8a:
57:50:1b:fa:5f:44:e6:98:f2:b9:4a:03:1c:13:2d:
bf:0f:22:d0:2a:40:ee:d6:cc:46:cc:80:bf:d2:1e:
96:3c:65:bc:d1:a1:7f:0e:a1:62:b1:e8:6a:89:fa:
0f:bc:43:bf:e5:9d:b2:3e:00:fc:8a:28:4f:f3:31:
48:a3:c0:4c:2c:fa:0b:61:02:d6:58:9d:62:2e:97:
a2:4d:5f:fb:7c:9c:43:b9:16:bb:e6:51:13:21:cb:
91:fa:1d:94:4a:27:72:05:a8:9c:74:63:e3:f5:51:
87:18:a7:5c:60:4a:83:52:ef:07:f7:e0:09:15:f4:
20:ad:84:af:10:ab:77:af:3a:c4:62:92:99:f7:db:
0a:f7:9b:c8:d9:5c:5e:c3:1e:7f:62:17:b6:51:1c:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3D:F2:A2:1E:9F:B8:A1:2F:7B:FD:E8:63:AC:E8:4E:AA:54:B6:98
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7c:3e:c1:0d:c6:21:39:44:08:94:ff:48:96:f4:06:92:79:
49:c5:9e:0e:91:74:88:4e:5e:90:62:c0:14:4d:58:e5:0b:d7:
85:21:8a:c1:2f:aa:ca:e0:16:4e:85:73:d1:49:62:ae:de:a3:
fe:d8:f4:fe:83:2f:88:0b:3f:8a:3a:8f:aa:e1:34:e7:7f:28:
62:4a:bd:d6:3f:b8:4c:e4:a8:10:9f:03:a4:d1:aa:cd:c8:56:
0b:1f:50:76:b0:9a:ac:76:32:3a:4a:09:fb:5a:ef:01:b6:92:
69:35:3b:81:86:47:c3:86:b6:c2:3a:8b:8b:40:69:e1:cb:d5:
38:02:2e:e2:0a:03:70:e1:f9:f5:d2:97:c5:1e:c8:8e:a1:87:
b5:fa:d7:4f:60:44:8c:97:17:c6:16:66:45:62:cc:a8:3a:17:
e2:7c:fb:45:2b:39:89:8e:41:74:68:43:c9:3e:f9:14:b2:67:
ca:be:1d:e7:e0:8b:d4:50:da:33:b8:4b:90:33:9e:bb:46:59:
46:b2:de:96:d9:21:81:e4:f9:7c:df:ea:1c:10:44:53:a5:eb:
8e:5e:53:28:c5:2c:04:9b:95:5a:45:7c:f8:a4:dd:de:07:c2:
34:f0:cd:f3:fb:6b:01:b3:16:d5:8d:c8:d8:e5:05:26:e3:e9:
ea:91:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:12 2026 by rpki-client