Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: 2vyjq5rzM7wxVatj5yx9OCq9N3AMURgoKPhNdPPbpoE=
Subject key identifier: 1C:40:57:CF:9E:A3:DF:51:F2:80:70:28:91:CF:AB:41:53:CF:F5:DB
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 01A13E26BD4CD447A50F059B24FBCBB7AEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1A34
Signing time: Thu 15 Oct 2026 06:01:28 +0000
Manifest this update: Thu 15 Oct 2026 06:01:28 +0000
Manifest next update: Fri 16 Oct 2026 06:01:28 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: Vrc7EAcWd02kGf367iFf0Di0CVKhjFxv9gAij1uIFG8=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:bd:4c:d4:47:a5:0f:05:9b:24:fb:cb:b7:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Oct 15 06:01:28 2026 GMT
Not After : Oct 16 06:01:28 2026 GMT
Subject: CN=1c4057cf9ea3df51f280702891cfab4153cff5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:82:29:5a:7d:76:86:13:39:97:26:c6:0d:
71:70:eb:f8:5c:8c:b6:6a:3f:ed:ea:e5:7b:78:05:
c3:53:37:7f:66:1c:74:d6:a2:74:08:9b:fa:30:eb:
fa:81:8e:f6:ab:02:51:0a:bc:13:83:d4:17:4d:8f:
b5:e3:75:07:06:88:60:26:d3:c5:78:cf:a9:e5:38:
07:d1:5c:45:55:92:56:90:22:f2:6a:70:8f:9f:2a:
4d:82:c3:d8:a1:fe:78:f4:31:30:ac:ac:f2:6e:99:
55:80:73:22:8a:63:76:3e:c5:f3:e5:6a:2b:5f:6b:
2f:0d:13:f4:68:80:e2:50:89:ea:de:85:17:83:03:
d2:a9:45:90:cd:2e:52:8e:31:f7:d2:44:f1:6a:1c:
ef:65:f8:26:97:1f:b7:bf:7f:1c:34:93:d6:25:fc:
f7:64:42:cf:cf:8b:24:d0:54:ad:b9:0a:c1:ee:3e:
de:9d:54:d4:dc:4a:4b:52:a7:64:f8:b4:63:1d:7e:
fb:b8:bb:a8:02:60:9f:a2:19:c4:ed:16:01:15:c6:
f6:84:d5:f4:5e:4b:b9:95:7f:77:54:8e:80:89:65:
a1:a2:56:3a:cc:98:74:60:e1:e6:63:31:4a:dd:05:
cb:88:bc:9f:b8:d7:f7:20:d5:3b:17:f3:07:2e:d4:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:57:CF:9E:A3:DF:51:F2:80:70:28:91:CF:AB:41:53:CF:F5:DB
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:26:f6:41:b8:49:c7:53:80:f4:75:88:20:57:5d:d5:80:90:
0d:3b:2a:4c:90:ad:66:39:f9:c3:40:1b:5a:2c:4f:6e:a7:bb:
32:0d:49:36:0b:d9:8b:af:06:0c:a2:fa:49:af:98:fd:6b:71:
8d:d9:24:cb:7f:71:57:67:54:99:87:25:f7:42:e3:ec:f4:82:
65:99:14:eb:53:27:86:48:7e:38:34:7a:62:de:26:84:d1:60:
e6:45:4d:f9:70:76:75:23:76:10:c3:d5:3f:0e:cc:0a:53:ec:
3e:d6:9b:04:50:67:f8:ad:e3:47:73:1b:88:cb:c9:0b:01:5b:
d9:3d:5e:65:84:ec:15:67:63:1e:04:d3:60:ef:51:51:5f:65:
a3:83:4d:01:f8:87:e7:7f:78:02:25:c9:03:d9:c9:82:5a:91:
71:26:0f:fd:2b:69:f2:00:1f:a6:00:71:db:4c:50:b5:df:d2:
0b:89:2b:65:86:5b:b3:9e:43:c1:28:61:29:79:75:d7:ba:78:
7e:9b:e6:a9:cf:49:49:88:67:b7:62:7a:a9:0d:85:18:4c:96:
51:b1:91:52:9d:97:00:3c:01:f5:e6:10:8c:b2:a6:34:26:94:
d3:c7:0d:29:55:71:d5:f8:b7:0b:dd:ef:1e:83:33:2a:14:15:
e9:99:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:24:03 2026 by rpki-client