Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: 5it6+jf9ajrP7Zf8vwXRsJUyDScSExJ75MVYXrLn0Eo=
Subject key identifier: 68:1D:90:5C:50:25:80:F6:68:DA:34:38:98:D0:21:1B:E0:F9:21:89
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019D39E5E3DD1BFB100A58B075580F1FCAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 14:01:00 +0000
Manifest this update: Sun 29 Mar 2026 14:01:00 +0000
Manifest next update: Mon 30 Mar 2026 14:01:00 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: pKAJC/cbTrZfU4JrcKK6DeMEdT1ggxdlj9o+Y02i8/I=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e3:dd:1b:fb:10:0a:58:b0:75:58:0f:1f:ca:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Mar 29 14:01:00 2026 GMT
Not After : Mar 30 14:01:00 2026 GMT
Subject: CN=681d905c502580f668da343898d0211be0f92189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:40:b0:06:e3:fd:14:ca:30:7c:8c:61:52:
ee:d2:98:c9:21:58:f0:7d:c6:67:6c:28:92:f6:bb:
e4:f6:81:a2:69:7c:9b:f4:de:e0:b4:66:84:41:59:
31:8e:d3:07:41:31:46:0e:ad:db:a0:bf:01:54:e0:
99:1b:24:8e:d0:eb:17:c0:29:b4:c2:d3:fb:9b:5e:
43:b3:4e:59:e5:ee:f4:c6:57:d3:6a:09:df:d8:f0:
c0:cd:2d:45:b5:0f:92:ee:b6:5b:2d:d6:53:28:aa:
ec:3a:2a:64:bb:17:02:a7:9c:19:84:3b:84:02:57:
1d:2a:bf:7b:09:e0:20:77:34:17:29:a4:4f:94:35:
44:73:cf:e0:45:6f:c4:da:89:8a:3e:ce:64:93:cf:
d1:b8:dc:e5:a9:73:b1:7d:37:41:c9:1b:3b:4c:64:
9f:77:d1:4b:8d:1e:2c:5b:3e:37:3d:09:0a:39:3d:
9e:4f:49:33:54:43:27:a5:9c:db:77:14:a0:c9:d0:
4d:5a:fd:a4:ae:56:5e:93:92:99:91:81:2e:8f:b3:
7b:04:66:0e:14:1d:f9:5d:92:99:5c:6f:cf:69:ab:
68:23:8b:36:3c:dc:69:03:06:72:42:fc:fc:d6:5f:
5b:2a:e9:2c:9e:6b:8a:2c:79:72:88:39:2d:29:25:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1D:90:5C:50:25:80:F6:68:DA:34:38:98:D0:21:1B:E0:F9:21:89
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:f3:25:3b:66:2d:5a:44:87:5b:f2:c1:70:57:3d:16:e1:
97:24:f7:92:37:56:37:fb:9b:de:fe:90:77:da:0a:43:58:4f:
56:f5:38:ff:d5:48:f4:00:0b:cc:40:e3:5b:f6:80:c9:1c:5f:
e2:59:41:30:c4:6b:62:99:21:80:ee:98:1b:ec:90:18:24:02:
35:52:ea:60:42:4a:ef:0c:e8:ba:ae:82:aa:20:c1:be:22:e2:
e0:f4:a3:38:38:5c:b1:89:85:dd:c7:ce:a4:9d:22:aa:73:cc:
fa:9a:48:38:a2:f6:60:05:c4:5f:91:b9:be:26:fe:8d:9c:b1:
3e:9e:a1:5a:d0:d8:cd:5b:a2:1d:e5:39:d1:b3:ec:06:b3:70:
54:7f:37:f7:c2:b4:b7:b7:0c:c9:95:4e:d9:f7:74:aa:4b:c2:
29:59:7e:46:e3:ac:01:73:d8:f1:b0:c0:25:3b:fc:2c:08:70:
2c:61:2f:42:b3:aa:35:d4:7f:33:61:c7:d4:15:77:1d:e6:ef:
5a:75:2e:46:91:ba:53:1b:72:82:7a:fb:da:f0:87:c3:01:3f:
83:69:f8:7e:e6:e4:f9:e9:41:89:e5:93:bb:7f:02:72:5b:67:
71:4a:c8:a7:06:ff:f8:70:ba:1a:57:16:d9:31:24:ee:5a:6a:
bc:bf:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:29 2026 by rpki-client