Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: HGMDQFE95M5E5Cq6IQ/G5R+fn/0kKxOqAEjydidN8jM=
Subject key identifier: 6A:CF:BF:2A:8C:4C:EC:A6:C2:AB:31:2B:57:37:50:95:62:7C:77:81
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01A13ECB7B826E1387E33550F39920131D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0EFE
Signing time: Thu 15 Oct 2026 09:01:25 +0000
Manifest this update: Thu 15 Oct 2026 09:01:25 +0000
Manifest next update: Fri 16 Oct 2026 09:01:25 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: k/drqVEMDOeOy6XtxNTde9SS+YVNx8JHhF7Md+v0J5A=)
2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:7b:82:6e:13:87:e3:35:50:f3:99:20:13:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Oct 15 09:01:25 2026 GMT
Not After : Oct 16 09:01:25 2026 GMT
Subject: CN=6acfbf2a8c4ceca6c2ab312b57375095627c7781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:41:4c:e9:4d:fa:7f:07:66:88:81:40:a1:
71:34:a2:c6:f5:45:a6:96:f6:bb:b7:a6:03:2b:99:
72:78:a9:af:c4:43:c0:8d:73:da:d3:d6:9f:d5:18:
73:c3:a4:6c:98:d5:20:e5:4b:67:5a:d2:96:5a:09:
b3:79:e1:37:62:e0:6c:88:6f:6c:e6:98:7c:59:96:
53:30:f2:9d:db:3b:df:af:aa:3d:94:49:59:ea:ae:
b2:12:7b:a4:d4:b5:73:3c:04:43:98:e3:ff:90:b3:
e5:c5:89:44:76:68:02:27:74:2a:63:b6:5a:f8:46:
6c:86:5f:3b:7b:ec:a5:08:bf:80:6c:14:5e:28:fe:
13:dd:22:4a:a5:d7:94:6b:9d:06:20:d3:d7:2e:b7:
ed:bc:a3:31:3b:76:6c:df:03:8b:42:05:ec:5c:e5:
0e:92:e7:d7:ca:d2:7f:e0:9c:f0:a9:2f:bf:f7:99:
32:c1:0b:ed:f2:cb:53:af:1d:89:b6:24:a1:b0:93:
97:33:bb:4b:b9:34:6b:c3:5f:89:5a:60:55:60:91:
c4:f2:ee:88:16:34:98:f5:27:d8:90:2c:20:c7:4a:
c9:18:4e:5b:a2:db:65:ff:c4:f5:c5:87:2f:16:aa:
c3:2e:4a:25:54:0e:35:3a:9e:45:25:50:46:c8:9a:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CF:BF:2A:8C:4C:EC:A6:C2:AB:31:2B:57:37:50:95:62:7C:77:81
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c6:f2:64:b6:f3:45:bf:d1:f4:9e:de:b1:25:6b:1a:b0:d1:
53:69:8d:a2:85:4a:10:1f:36:47:12:2e:74:e7:2b:a4:68:57:
7e:45:78:3f:31:f4:9a:71:35:93:c1:47:42:31:c6:c8:9e:e6:
a5:8f:75:32:08:0c:03:19:c1:99:60:a5:c2:cd:39:ca:e1:af:
6b:91:b3:b7:d7:39:c1:88:5d:2a:5f:dd:33:29:39:a1:ef:a4:
df:8b:31:28:c3:d4:20:73:fa:4e:02:94:8a:49:13:6f:4f:04:
83:ec:f0:76:b7:07:30:4a:a1:15:83:9d:f9:6d:37:6a:3a:c5:
91:cd:0f:cf:c4:5b:18:3e:d4:16:fa:b9:2f:e0:12:e9:e9:3a:
f7:89:cb:44:c6:12:8a:3a:3d:25:d3:b0:88:c5:59:58:e6:18:
75:c4:9d:df:97:de:1b:78:98:d3:e3:84:17:18:4a:89:14:05:
83:94:15:56:5d:5f:33:30:7d:a6:70:8d:7d:ed:54:7c:0e:5b:
70:5d:59:7d:92:b6:d5:c6:6b:e3:1e:8e:17:df:8b:10:37:cc:
65:af:d8:ed:20:00:ec:81:a9:0a:c4:4b:58:e5:b8:b0:3f:54:
b5:fb:00:9b:38:53:23:97:7e:c6:9d:de:46:73:35:d3:b6:14:
67:e8:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:46 2026 by rpki-client