Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: xMNSwS6znOI6Ql01E+6f7ii0pFA0hTpOkIstXt4+t6Y=
Subject key identifier: 73:A7:E1:12:E2:13:27:98:2A:26:41:D5:77:17:F4:65:74:FF:6F:B0
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019DA41CBB2D5EFCE101F62B7C51A91F0743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 17F6
Signing time: Sun 19 Apr 2026 05:00:39 +0000
Manifest this update: Sun 19 Apr 2026 05:00:39 +0000
Manifest next update: Mon 20 Apr 2026 05:00:39 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: JVq93vYHjVD/kUUx+LOax7A+RetJ1tUrUJ9drv/E2EM=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:bb:2d:5e:fc:e1:01:f6:2b:7c:51:a9:1f:07:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Apr 19 05:00:39 2026 GMT
Not After : Apr 20 05:00:39 2026 GMT
Subject: CN=73a7e112e21327982a2641d57717f46574ff6fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:52:2e:7b:d6:dc:bc:6a:b3:2b:3e:29:11:
22:57:d5:99:43:52:07:24:83:eb:65:cf:f6:e3:a0:
79:e5:92:2d:26:f8:41:7e:88:7d:d3:89:a8:68:cb:
04:51:0e:5a:49:ec:8f:42:32:28:49:31:68:0e:fe:
07:96:8b:1c:37:9e:0a:27:33:5d:77:a7:ae:1a:68:
77:fe:52:31:42:38:fc:5b:0f:9e:f6:65:90:cc:d7:
db:e3:cc:14:b4:5c:98:7f:ae:34:75:3a:e2:2d:45:
0d:6d:d6:cf:d1:81:63:35:7c:01:04:bb:a9:06:af:
18:72:c4:93:b8:da:8c:83:83:17:d5:43:e0:69:c6:
73:6c:5b:58:6b:23:91:95:82:0c:c6:a1:56:9f:53:
51:a2:75:62:a6:87:93:7e:6a:5e:78:b2:a3:1a:33:
5f:00:6a:ff:8d:e2:a4:42:c6:82:bb:0c:51:63:31:
c4:38:eb:49:83:fc:8a:e5:22:c7:b0:d9:f6:e7:4b:
54:41:c9:c0:d5:e1:1e:ca:7b:b3:3a:fa:e8:65:43:
4d:ed:f9:1b:42:db:e2:c1:36:e5:dc:f9:37:05:e0:
59:60:8f:98:30:12:d3:48:32:f8:0d:f2:3a:a0:a3:
10:8b:54:d3:08:86:e3:e9:48:f5:5e:79:c3:43:17:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:E1:12:E2:13:27:98:2A:26:41:D5:77:17:F4:65:74:FF:6F:B0
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:8f:b5:f5:ad:5c:0f:3e:ff:c1:10:61:da:70:86:e1:dc:
18:43:59:3d:34:52:c5:06:61:65:37:b7:0e:e9:f3:c5:d2:e3:
77:83:49:d6:0e:0d:b5:12:90:07:55:98:b0:6a:0a:b4:de:33:
81:56:8e:ce:15:e1:71:42:91:9f:56:34:3e:6f:6b:d7:46:6d:
10:2f:e4:22:31:e3:73:80:f0:09:96:12:83:4b:d3:72:59:68:
f6:1e:fa:aa:da:27:37:29:4b:92:6f:c2:69:fb:dc:69:4e:f5:
24:67:66:ea:71:91:83:ec:b2:d5:2d:f0:6d:55:4c:31:35:65:
b1:13:72:74:fa:f9:50:f3:29:54:f7:47:e4:4f:8b:0d:42:35:
e2:27:b8:ed:2b:fd:54:8b:77:b7:ac:3f:a2:6e:84:ac:e1:d8:
1f:c6:b1:b2:26:ac:15:11:88:a5:5f:f9:ab:c9:69:15:a3:72:
c1:fa:43:ce:70:1b:30:4f:65:a5:d2:b8:01:4d:d6:93:f1:d4:
ed:e1:60:2c:79:25:6a:5c:bf:c3:19:e5:8e:39:0c:9b:7d:f1:
9d:5c:63:3b:b3:f3:7b:a1:8b:2a:73:99:86:4d:b9:95:c7:76:
a3:d7:47:75:26:37:ab:bf:2e:77:23:97:d4:f9:a2:6e:e5:76:
c9:f8:b4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHLstXvzhAfYrfFGpHwdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjYwNDE5MDUwMDM5WhcNMjYwNDIwMDUwMDM5WjAzMTEwLwYDVQQD
Eyg3M2E3ZTExMmUyMTMyNzk4MmEyNjQxZDU3NzE3ZjQ2NTc0ZmY2ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx35SLnvW3Lxqsys+KREiV9WZQ1IH
JIPrZc/246B55ZItJvhBfoh904moaMsEUQ5aSeyPQjIoSTFoDv4HloscN54KJzNd
d6euGmh3/lIxQjj8Ww+e9mWQzNfb48wUtFyYf640dTriLUUNbdbP0YFjNXwBBLup
Bq8YcsSTuNqMg4MX1UPgacZzbFtYayORlYIMxqFWn1NRonVipoeTfmpeeLKjGjNf
AGr/jeKkQsaCuwxRYzHEOOtJg/yK5SLHsNn250tUQcnA1eEeynuzOvroZUNN7fkb
QtviwTbl3Pk3BeBZYI+YMBLTSDL4DfI6oKMQi1TTCIbj6Uj1XnnDQxfxCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOn4RLiEyeYKiZB1XcX9GV0/2+wMB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDKPtfWt
XA8+/8EQYdpwhuHcGENZPTRSxQZhZTe3DunzxdLjd4NJ1g4NtRKQB1WYsGoKtN4z
gVaOzhXhcUKRn1Y0Pm9r10ZtEC/kIjHjc4DwCZYSg0vTcllo9h76qtonNylLkm/C
afvcaU71JGdm6nGRg+yy1S3wbVVMMTVlsRNydPr5UPMpVPdH5E+LDUI14ie47Sv9
VIt3t6w/om6ErOHYH8axsiasFRGIpV/5q8lpFaNywfpDznAbME9lpdK4AU3Wk/HU
7eFgLHklaly/wxnljjkMm33xnVxjO7Pze6GLKnOZhk25lcd2o9dHdSY3q78udyOX
1PmibuV2yfi0Ow==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:33 2026 by rpki-client