Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: r7S86DLyyKKYv6H+9ReY92k+QWB85NKbNVbY/ZbjU5M=
Subject key identifier: E1:DB:AD:13:EE:F4:DA:0F:69:3E:97:3A:02:9B:4E:98:5C:68:7B:B2
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019E31178C6125AB04CB5A5353C6A42955B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 18A2
Signing time: Sat 16 May 2026 14:01:27 +0000
Manifest this update: Sat 16 May 2026 14:01:27 +0000
Manifest next update: Sun 17 May 2026 14:01:27 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: DuYTmw79JdYaLzqBlfR3FxtgxFHcvKe1d/utc3qDxOo=)
2: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (hash: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:8c:61:25:ab:04:cb:5a:53:53:c6:a4:29:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: May 16 14:01:27 2026 GMT
Not After : May 17 14:01:27 2026 GMT
Subject: CN=e1dbad13eef4da0f693e973a029b4e985c687bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:d1:8c:10:1b:df:30:b5:06:32:83:bd:16:
fc:83:a5:cd:fa:ec:7c:ee:aa:3b:0b:b0:5b:ed:3c:
00:c5:93:fe:fa:89:f3:4d:df:ef:59:0c:65:b6:84:
9b:26:31:71:b7:cc:e3:07:5e:a4:63:34:16:0e:7c:
43:d0:8d:e3:4c:d0:05:df:37:8b:50:c5:3e:ed:4d:
d2:cb:93:be:8d:01:be:e2:87:2a:a4:71:75:da:8e:
bb:33:fc:fd:3a:b1:cf:37:bf:9a:3c:d1:78:43:00:
ae:c2:4c:00:30:82:55:a8:53:00:ca:68:7b:8c:10:
32:98:92:96:ff:0a:bf:99:28:54:5f:95:00:15:2b:
c7:5c:10:3d:60:a6:b3:fa:d8:6e:56:47:2c:4a:1b:
8e:41:d3:1d:c5:e0:3b:e0:07:68:9e:31:b0:f6:67:
ca:b8:29:2f:a2:a8:84:ac:e6:80:8f:ac:f0:c3:3f:
e5:c0:9b:aa:10:a5:c3:bc:62:5a:e4:21:95:52:1b:
80:8a:a1:ad:cd:24:70:e3:5f:a9:1a:51:44:93:4e:
78:1e:97:db:5d:20:0d:91:e3:3d:57:78:ec:77:9c:
18:38:6f:8f:d0:f2:09:ea:ce:41:4c:88:d0:02:28:
b2:6c:d5:59:25:02:2c:cd:95:06:c9:e3:4c:ce:a8:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:AD:13:EE:F4:DA:0F:69:3E:97:3A:02:9B:4E:98:5C:68:7B:B2
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:27:b3:b5:fb:9e:5a:d7:a6:aa:2b:40:1d:73:8f:70:95:2d:
4f:da:28:ac:df:46:a7:06:8e:2a:02:55:37:02:5a:35:de:a7:
7c:81:f2:0c:ab:8c:47:5b:85:14:cd:22:f3:37:ce:8c:72:b8:
7b:28:de:41:53:d1:06:ba:dc:f8:6c:65:37:38:3a:45:84:b6:
e0:01:c9:77:5b:4a:4b:bc:ae:c3:a9:10:ec:cb:88:02:2a:ce:
ac:d5:93:b7:7d:86:eb:59:b1:64:5c:71:22:98:0f:b0:9a:7f:
8c:1c:f6:e3:2f:f5:ad:07:2a:6a:56:72:26:71:91:11:2f:23:
4f:c7:bd:c3:a4:31:a6:2f:6f:30:94:25:46:b2:60:2b:d0:9c:
4d:70:dc:45:bd:a3:a9:e0:37:ad:89:9e:89:2f:ed:dd:4b:13:
d0:b7:11:d4:aa:c0:f6:51:0a:1c:8f:ad:43:e8:37:a4:87:2f:
05:0a:a6:5f:07:c2:79:c1:7b:80:2c:03:23:0d:57:76:35:ff:
3d:a1:d6:16:b9:52:ba:74:7e:04:fe:7a:c2:00:c0:7e:38:eb:
cf:01:84:a9:50:61:ab:3c:80:0c:1d:03:8b:99:d8:59:42:a2:
9a:b3:67:d9:39:84:4e:b6:cd:6a:c5:89:14:52:48:aa:b6:b0:
28:a7:71:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF4xhJasEy1pTU8akKVW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2
MDQzODkwHhcNMjYwNTE2MTQwMTI3WhcNMjYwNTE3MTQwMTI3WjAzMTEwLwYDVQQD
EyhlMWRiYWQxM2VlZjRkYTBmNjkzZTk3M2EwMjliNGU5ODVjNjg3YmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys/RjBAb3zC1BjKDvRb8g6XN+ux8
7qo7C7Bb7TwAxZP++onzTd/vWQxltoSbJjFxt8zjB16kYzQWDnxD0I3jTNAF3zeL
UMU+7U3Sy5O+jQG+4ocqpHF12o67M/z9OrHPN7+aPNF4QwCuwkwAMIJVqFMAymh7
jBAymJKW/wq/mShUX5UAFSvHXBA9YKaz+thuVkcsShuOQdMdxeA74AdonjGw9mfK
uCkvoqiErOaAj6zwwz/lwJuqEKXDvGJa5CGVUhuAiqGtzSRw41+pGlFEk054Hpfb
XSANkeM9V3jsd5wYOG+P0PIJ6s5BTIjQAiiybNVZJQIszZUGyeNMzqjpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHbrRPu9NoPaT6XOgKbTphcaHuyMB8GA1UdIwQY
MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt
MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx
LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyeztfue
WtemqitAHXOPcJUtT9oorN9GpwaOKgJVNwJaNd6nfIHyDKuMR1uFFM0i8zfOjHK4
eyjeQVPRBrrc+GxlNzg6RYS24AHJd1tKS7yuw6kQ7MuIAirOrNWTt32G61mxZFxx
IpgPsJp/jBz24y/1rQcqalZyJnGRES8jT8e9w6Qxpi9vMJQlRrJgK9CcTXDcRb2j
qeA3rYmeiS/t3UsT0LcR1KrA9lEKHI+tQ+g3pIcvBQqmXwfCecF7gCwDIw1XdjX/
PaHWFrlSunR+BP56wgDAfjjrzwGEqVBhqzyADB0Di5nYWUKimrNn2TmETrbNasWJ
FFJIqrawKKdxig==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:44 2026 by rpki-client