Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: gt16BcXKCeGrQw9F986+7H4Mcc6MrrvCeyd1YZd9TI0=
Subject key identifier: FD:6C:BC:80:50:C9:03:41:03:5A:D7:20:D2:9A:29:69:AA:02:0A:20
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 019F17C3375BA53247F7F4714F0B29D0FF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1917
Signing time: Tue 30 Jun 2026 09:01:37 +0000
Manifest this update: Tue 30 Jun 2026 09:01:37 +0000
Manifest next update: Wed 01 Jul 2026 09:01:37 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: o1MzbCFQWuk/J9jM59Q8d8j8ojP8UwlZJQGOJwfeC/U=)
2: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (hash: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:37:5b:a5:32:47:f7:f4:71:4f:0b:29:d0:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Jun 30 09:01:37 2026 GMT
Not After : Jul 1 09:01:37 2026 GMT
Subject: CN=fd6cbc8050c90341035ad720d29a2969aa020a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:75:fc:c0:1b:a7:62:67:69:23:69:27:72:
85:a5:f9:32:43:57:61:9a:35:7d:00:5b:7e:f7:44:
28:f4:c9:0d:04:a7:3e:ad:b5:73:b4:be:9d:8d:be:
4d:5e:cd:08:4c:29:92:30:e2:e2:cd:7c:eb:1c:5f:
c6:ed:ff:b4:e2:34:97:64:93:8b:0d:8d:4f:48:4b:
4f:8c:f0:22:dc:9d:8f:b2:3d:5d:10:d8:46:2c:6e:
7f:a9:c5:c8:fa:54:72:00:a8:a7:db:61:09:5d:92:
dd:14:2e:9b:0c:33:bd:a6:50:d3:bc:1e:58:02:81:
5e:a6:29:40:5e:e1:70:15:6d:01:02:5c:eb:75:bd:
e7:a2:09:10:28:72:01:0b:72:ea:98:fa:37:78:3e:
6e:b1:ba:26:7b:b6:46:28:dd:42:75:87:5f:b5:21:
f7:3e:b5:b7:6c:9c:95:1a:97:d1:5d:5a:a3:20:c3:
c7:7a:a8:37:ee:bf:6c:65:1c:75:74:87:53:a0:35:
dc:2b:a5:1b:29:57:24:70:23:b7:17:01:69:9f:04:
a6:76:e2:4e:35:af:e0:39:67:79:74:22:d9:52:c0:
98:a0:74:7d:97:38:e8:af:78:24:44:43:bc:d6:76:
4a:23:a6:05:0e:0c:c1:52:e5:15:86:29:f8:20:8c:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:BC:80:50:C9:03:41:03:5A:D7:20:D2:9A:29:69:AA:02:0A:20
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:47:de:24:92:46:4f:08:b6:46:2a:60:80:6d:94:d2:99:
ba:b8:4e:d3:4c:79:d9:b9:af:b4:6a:7d:1d:b7:6e:a4:cd:6e:
d0:9f:5e:3c:ee:ed:a5:58:85:b6:30:c9:c9:f7:01:84:1b:bb:
ec:2b:96:89:93:4f:51:b4:b5:37:fb:9e:ab:10:99:0f:54:c2:
e2:32:cd:03:3e:41:f9:67:da:a6:29:db:7c:b0:95:e5:23:06:
67:e8:31:c4:1f:c6:d1:32:0c:05:c5:74:a4:75:4f:7d:e5:9f:
58:e1:d7:d4:b1:a0:cb:5a:30:d2:6d:ba:53:de:ef:26:5b:c3:
e3:99:a5:51:68:88:91:f0:69:fb:f1:73:e4:9f:58:95:80:36:
3e:c4:8e:e3:66:a6:a4:e0:27:57:8e:61:9f:6d:ab:bd:1d:f4:
ed:89:cb:c5:13:a3:6c:ef:f9:31:3f:5a:4d:65:ba:e0:87:58:
46:ac:a6:f9:f0:03:ec:71:38:7e:0c:fa:20:dd:13:60:cd:7a:
1c:77:82:37:d6:d3:d3:73:cd:40:1b:fc:69:05:29:26:6c:22:
80:88:02:98:b3:2b:26:44:74:5b:31:db:1c:eb:a7:0c:25:36:
dc:09:0f:30:33:01:74:b8:76:9f:0d:af:fc:f1:0c:78:61:58:
56:d4:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:08 2026 by rpki-client