Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: TPTt7vqpPeT4ZU2xXiXppUS+6aro0mcvYryK4e6ZHbY=
Subject key identifier: 8C:BB:C9:48:DB:E0:E2:45:56:17:EA:3F:15:A3:0F:08:C1:00:89:D1
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 01A0016F121745EC5D333052F2C0886FF503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1990
Signing time: Fri 14 Aug 2026 18:00:51 +0000
Manifest this update: Fri 14 Aug 2026 18:00:51 +0000
Manifest next update: Sat 15 Aug 2026 18:00:51 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: 6ltUwjsItiXEWSL+ns+HycY/WeeHcH43QkYJxB6PRAI=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:12:17:45:ec:5d:33:30:52:f2:c0:88:6f:f5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Aug 14 18:00:51 2026 GMT
Not After : Aug 15 18:00:51 2026 GMT
Subject: CN=8cbbc948dbe0e2455617ea3f15a30f08c10089d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:6d:69:48:50:d2:45:03:08:9f:59:bc:98:
fb:48:9f:66:cc:ca:6b:75:27:11:52:ed:99:3d:d2:
dd:2f:3f:e1:0f:42:af:1f:85:0c:ee:6b:e9:a9:4d:
7e:00:ff:67:db:1a:57:55:db:7f:05:4f:de:f6:31:
a3:01:da:bc:a9:8c:02:51:ec:23:2f:ad:91:5c:6f:
17:84:0e:4f:08:ee:12:3c:a2:fc:81:4c:89:0b:2c:
3d:e5:65:ea:91:c6:54:ec:a7:2f:07:15:24:8b:87:
bc:ea:f1:1f:e1:90:47:04:c8:f8:86:5d:74:79:86:
48:ce:b0:eb:48:a4:19:92:b5:ea:68:29:2d:88:5a:
b4:74:b7:56:72:fe:d9:56:f3:56:1d:97:48:65:cb:
54:80:74:30:00:8c:3a:34:6e:44:62:61:52:f6:89:
63:76:53:b9:63:8c:7f:56:eb:68:e2:22:81:43:3a:
7d:c4:4b:d6:f9:1e:0c:e1:22:94:6d:67:10:33:e8:
ba:7f:71:08:49:3b:e3:9b:74:a6:27:dc:84:ee:27:
f3:81:8d:59:87:93:3a:0a:af:97:a0:0a:5f:c5:c3:
6b:20:7a:fc:02:55:c0:de:7f:7c:75:57:28:c6:41:
da:fb:ff:5d:1b:39:22:a0:ae:51:51:01:84:cd:49:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:C9:48:DB:E0:E2:45:56:17:EA:3F:15:A3:0F:08:C1:00:89:D1
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c0:cd:a4:47:c5:eb:19:d2:47:d1:48:46:d8:7a:55:60:0f:
c9:25:73:b4:32:07:08:05:e1:7f:dc:a2:53:32:8b:71:41:b3:
b4:86:e9:53:f6:09:66:96:1e:16:10:d8:a3:53:d7:3b:ed:62:
7d:f1:5c:37:79:c3:cd:8a:ff:e1:e0:3d:48:44:31:54:f4:a0:
19:27:20:aa:f0:7d:50:58:23:98:89:eb:8e:bb:ec:1a:e5:b6:
2a:e1:2c:c5:be:0e:b8:e5:82:93:02:09:c6:d0:83:3b:74:60:
af:8d:92:af:33:a8:26:34:74:d5:10:d8:ab:b8:a7:63:50:f5:
ea:0a:e3:50:fe:2d:2d:92:86:75:a1:eb:48:3d:8a:f8:59:19:
7b:ce:6e:88:31:1e:a5:8c:b4:e4:f9:16:ea:1e:30:27:78:3f:
e3:35:fa:81:6f:ee:ad:48:d9:a4:2d:f7:e9:36:6f:12:ab:d7:
b9:85:67:f6:56:61:d8:6c:5d:4e:b7:c7:b8:a7:6e:b7:e5:b9:
55:2f:de:a2:89:ba:38:ed:a2:f0:52:6f:92:1e:4e:d9:3f:de:
0b:12:97:fc:55:dc:15:e5:3c:8f:08:b0:84:ea:43:1d:df:a6:
1e:78:04:25:22:4c:48:e9:1c:f8:00:0f:06:11:3d:48:e6:c8:
ac:40:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:53 2026 by rpki-client