Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: ULP6Iw8ov47tzpw6DmiwTd49t4SPUB0W0dk6eaI83NA=
Subject key identifier: ED:E2:BF:AC:92:52:84:30:9F:37:5A:BD:D1:AA:73:77:20:D1:FD:B0
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 019D38D3B0C7564F07FAC07C6EF8D9BD988F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: +u9si65sE7jdmhyKqxgggisFgfkdBXfLAUm3sXEjZKg=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:c7:56:4f:07:fa:c0:7c:6e:f8:d9:bd:98:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=ede2bfac925284309f375abdd1aa737720d1fdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:64:b1:4e:73:2c:29:03:9b:d1:80:be:c4:
0e:00:9e:3d:cc:bb:5b:d4:63:14:4d:6d:db:c4:bf:
ca:25:7f:52:4b:8a:81:a5:dc:13:62:44:cf:98:22:
dc:ea:8e:18:76:d5:34:ae:17:79:94:59:b5:5e:16:
24:23:ed:dc:56:38:72:18:13:88:78:7e:2b:48:d8:
17:00:e0:b3:b4:3c:4b:dc:93:2d:45:3f:87:5c:f8:
39:cf:8e:13:18:4d:84:2c:5d:9b:c6:8a:70:31:57:
cf:54:8b:cf:8d:d8:c3:fe:5c:62:6a:71:25:e8:7f:
54:03:f3:a2:7c:0e:d3:98:60:19:d7:de:e2:40:48:
a3:5b:0e:b8:35:4d:92:41:2f:dd:5a:7b:d1:e1:c0:
a3:29:17:57:66:89:ff:fd:fd:d6:cd:24:da:cb:d5:
5d:93:8d:24:9f:00:e8:d3:81:bb:26:43:e8:ba:5a:
a3:37:69:5a:f7:d8:30:65:a7:c8:e5:a7:a5:cc:7c:
47:22:2b:44:e6:74:9e:1d:cd:56:cd:03:57:b7:71:
e2:63:35:a0:97:41:5f:2f:3d:3e:e2:97:fb:a9:e9:
de:d4:64:f2:a5:0e:c0:08:f1:86:e7:ac:ea:31:33:
74:d1:f6:cc:1f:0a:ce:d2:29:d7:53:fd:22:8e:b9:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E2:BF:AC:92:52:84:30:9F:37:5A:BD:D1:AA:73:77:20:D1:FD:B0
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3b:34:75:98:c9:eb:75:b3:98:81:2d:d8:10:49:1b:fb:6e:
64:99:d7:4f:f7:09:0d:7d:85:50:b4:99:a2:2e:7f:8d:35:85:
50:4d:19:cf:50:6d:68:25:e5:05:a6:4e:21:76:85:db:fb:9e:
a2:7e:23:87:95:b3:38:ae:88:84:36:32:73:2b:36:7a:ab:9a:
a6:8a:1d:24:3d:94:73:84:8b:5b:39:b8:ff:03:08:78:e7:db:
c1:7d:dd:31:f0:33:29:29:6e:85:e7:5c:cd:e7:22:27:f0:71:
2c:37:2d:3f:7b:28:e0:ce:11:05:f7:e2:0f:d0:a7:95:38:9b:
9a:8d:21:4b:41:7e:5a:b5:5d:06:de:e5:e3:00:ac:ca:24:39:
7d:18:c4:59:ce:bd:21:a2:d0:7f:50:32:c9:ab:4a:4f:b8:d2:
7b:f8:da:5c:0c:0e:41:b7:77:30:eb:7e:95:45:04:b1:4a:2c:
d5:04:dd:a8:ee:db:e8:91:7d:1b:e3:52:70:f0:c4:cc:2a:ef:
2c:5c:50:01:1d:f7:cb:7b:be:86:34:f8:16:4a:9b:81:63:64:
e4:34:ab:6f:ab:88:35:3b:9f:ec:11:bd:41:fa:f4:e7:09:f3:
da:c3:8f:f5:d3:30:d8:47:f4:ad:17:bc:32:09:54:d3:03:ea:
a9:f2:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:50 2026 by rpki-client