Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: OniKfJeHv1qVDeKsseqz45K8xfVIYwvbs2unqmnJYsI=
Subject key identifier: 8B:32:A6:C2:BD:18:2C:6B:EC:B3:CD:E9:FB:4A:B3:BC:6C:78:9D:76
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 019F11F7AC77ADEF2A26174D32038EC6BCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 0A55
Signing time: Mon 29 Jun 2026 06:01:11 +0000
Manifest this update: Mon 29 Jun 2026 06:01:11 +0000
Manifest next update: Tue 30 Jun 2026 06:01:11 +0000
Files and hashes: 1: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: ku/fVZDFtMoYw/7X+waOlkA3XPX1vN9knM1hWkC9Ros=)
2: 6HARRI7LzgaJWjdnbcjYNe5zjgA.asa (hash: yJAm5DirBDu/9AhS1Y+uMEjLkqDGUA5qsTRmj6QzRpU=)
3: Wzv_5bHtlw-bV5A4pfz1y-cksK4.roa (hash: z7yVuuqBUpaWkWkocJw0ZO6+2vj7/1QraNrEcS+WGV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:ac:77:ad:ef:2a:26:17:4d:32:03:8e:c6:bc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jun 29 06:01:11 2026 GMT
Not After : Jun 30 06:01:11 2026 GMT
Subject: CN=8b32a6c2bd182c6becb3cde9fb4ab3bc6c789d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:12:e6:b8:2d:98:89:32:fe:96:06:46:cb:
08:39:15:15:24:fb:f6:68:11:03:cf:e8:66:6d:33:
04:38:74:74:3b:7b:69:9b:09:bf:44:9d:4c:3b:ae:
19:e1:83:90:53:f0:0c:86:73:3c:93:17:ee:c4:e7:
7a:58:3f:3d:fc:d3:98:c4:12:d0:2a:31:a9:a2:17:
96:84:af:16:c6:55:fe:2c:b1:36:52:10:54:f4:ec:
2e:d8:23:b7:d4:3c:ac:40:65:f9:0b:f6:0d:e6:44:
99:35:09:2f:c3:59:34:cd:31:c0:bc:95:b7:f7:be:
8f:1f:00:9b:76:c3:ca:a0:17:d1:ce:d4:81:2a:f6:
40:e3:39:b7:23:72:85:84:79:a1:2c:77:25:68:12:
0d:66:2d:af:13:bb:1c:f5:6b:7a:00:d3:ef:ac:5a:
5d:6d:0f:26:09:46:f6:0b:cf:7f:d0:d6:07:fb:65:
a9:5e:59:f4:ef:89:a9:42:19:a0:ee:ca:49:0d:f8:
c6:10:26:a0:84:d7:df:80:8a:43:c6:4a:77:7a:08:
e9:80:5b:8f:1d:b1:fb:7f:12:0c:f0:7f:5a:99:9d:
de:b6:9d:36:01:6a:d4:21:00:a0:cb:ee:6b:14:89:
cd:d9:30:da:14:dc:e2:1f:ec:a5:fa:33:98:34:6c:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:A6:C2:BD:18:2C:6B:EC:B3:CD:E9:FB:4A:B3:BC:6C:78:9D:76
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f8:0f:af:32:69:33:a8:ab:15:c8:b3:2b:ea:fa:d7:be:09:
d9:3f:78:6e:15:eb:9b:95:4c:5c:d6:10:f6:d3:88:9d:1a:49:
86:d0:ae:a3:89:40:84:d6:9e:a0:3e:80:5b:d0:a9:b4:bd:6f:
a2:38:8f:ea:b4:65:7d:ed:39:7d:60:d7:a3:63:c6:8d:fe:5f:
2f:5f:91:27:de:90:96:be:f7:43:92:37:e2:e4:d0:d5:8a:bb:
86:cf:21:90:c8:bd:7c:78:15:3d:d2:a7:dc:b0:b7:63:3f:5f:
c6:ff:ec:08:72:0d:ad:52:9d:90:cc:86:98:c6:01:5b:1e:90:
4f:c9:02:8a:11:4f:00:91:46:a6:d3:4e:06:7c:ad:b6:c7:11:
4c:f2:28:53:c6:ce:17:2b:e6:34:b8:c4:81:2a:34:2a:fa:88:
4f:e2:86:aa:cc:39:3d:74:ef:af:74:eb:1a:3c:f4:1f:34:70:
7c:e5:96:19:37:f2:43:21:78:62:3f:85:cb:84:2e:84:f3:38:
5c:88:7c:72:dd:28:14:c0:c2:f5:eb:93:ea:da:ab:49:79:7e:
c4:10:2a:9b:58:0d:16:25:90:b5:79:bd:32:5c:bc:4e:0f:f7:
06:b9:22:65:f9:1e:ea:f8:33:36:a0:f7:c7:a9:93:7b:7a:93:
e6:ac:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:28 2026 by rpki-client