Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: 50Qk/LY/01BFTNm7LcEZyPI6XQTYWQiwSllcXUds0Ps=
Subject key identifier: 51:EB:82:87:17:AA:EA:D9:0D:49:20:B5:8A:83:E3:5F:BD:26:46:69
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019D37F74E907AA6F0A9E6965A24551AC772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 17BE
Signing time: Sun 29 Mar 2026 05:00:47 +0000
Manifest this update: Sun 29 Mar 2026 05:00:47 +0000
Manifest next update: Mon 30 Mar 2026 05:00:47 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: Y6+gXvdGnArnIXCFA0mCcxe5+T+6lhr3iiL2tujnqS4=)
2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4e:90:7a:a6:f0:a9:e6:96:5a:24:55:1a:c7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Mar 29 05:00:47 2026 GMT
Not After : Mar 30 05:00:47 2026 GMT
Subject: CN=51eb828717aaead90d4920b58a83e35fbd264669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:0f:29:f8:38:20:70:97:69:a6:8b:6e:a5:
8c:ed:08:b2:b1:43:ad:06:c7:ff:1a:60:e2:2d:b8:
17:a6:82:a0:e0:15:80:66:c8:58:fa:c9:52:8a:eb:
a2:41:2f:b0:a1:aa:eb:7f:8a:6c:d1:aa:1b:90:4f:
28:0c:47:b6:a9:16:5d:24:a7:00:90:e4:72:b2:1f:
23:c9:b0:1b:40:0c:41:b9:bc:6e:b6:e3:0a:e8:be:
8c:f3:58:ea:e5:22:16:97:83:82:91:53:ab:ad:f6:
3a:fb:77:9d:06:78:23:06:0e:7b:86:3b:30:10:9a:
8e:23:c6:e4:c1:97:96:de:7a:34:93:3a:89:46:2b:
90:3d:dd:51:4d:b4:61:d5:6e:80:cc:a4:25:74:b7:
2c:f5:24:eb:e0:d3:54:2e:8f:4c:ec:48:1e:3e:30:
82:29:d9:fc:44:66:be:f9:0f:20:39:2f:11:90:72:
52:63:57:c0:29:63:b2:83:3e:88:2d:73:2b:3d:e2:
08:92:9a:1a:16:bf:8a:c6:db:a4:54:31:43:ea:9f:
f5:dc:bd:78:89:27:79:35:a5:3d:fd:61:b9:43:29:
2a:44:b5:66:03:9e:3e:f4:24:87:1f:2b:89:c5:50:
78:7f:9d:58:43:35:5c:4d:b3:c8:43:5f:57:1c:5a:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EB:82:87:17:AA:EA:D9:0D:49:20:B5:8A:83:E3:5F:BD:26:46:69
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:32:e1:cc:8c:11:89:3a:3a:2d:87:87:59:15:a5:8f:e5:0f:
8b:3d:e7:48:0f:1e:07:28:b6:8b:b9:5c:00:b6:cc:b4:33:1b:
d1:88:07:3f:1b:b8:50:cb:ab:8a:31:13:d3:70:0e:15:04:77:
ac:f4:ba:a1:11:9d:84:f1:5f:7d:ae:c7:11:95:2c:97:2e:5b:
5a:de:6d:ac:65:64:49:c7:45:42:c1:a2:04:ec:df:24:b9:8d:
c5:a7:4c:54:74:4f:13:36:98:f4:c0:6a:2f:44:8f:03:ce:cc:
d7:b2:5f:20:bc:84:24:e9:a6:a2:11:df:5b:12:3d:4e:e2:e2:
c7:45:e0:c4:af:82:bf:8a:66:b3:bb:be:68:c9:ec:f9:5c:8b:
75:f0:cf:72:cf:49:fb:a0:eb:13:b1:e8:65:02:b0:37:c0:8b:
06:0e:8b:0c:63:52:ed:4b:37:d4:a5:81:ea:ff:65:55:82:c1:
59:68:55:58:33:98:e8:35:1f:29:28:b8:30:27:cd:f1:52:64:
e2:54:61:fa:5b:be:59:4e:08:67:32:00:3a:8b:a6:38:98:35:
84:51:0d:d5:35:89:e3:d6:12:98:b1:1a:dd:87:e7:32:e4:fe:
97:8e:3b:1b:57:3f:9c:48:4d:ec:2a:8e:c4:29:c0:1a:b5:e2:
88:84:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:34 2026 by rpki-client