Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: DLLaciVaEh+xSSVmZwgREweW4co6mODP57I3yd6awRI=
Subject key identifier: E4:F5:DA:41:65:35:71:B3:1F:64:B6:0E:87:F2:60:0F:3B:50:5B:E3
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019F91A37D7C30A5C42F8E4DC79C37CD378F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0E1A
Signing time: Fri 24 Jul 2026 01:00:38 +0000
Manifest this update: Fri 24 Jul 2026 01:00:38 +0000
Manifest next update: Sat 25 Jul 2026 01:00:38 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: ue/rkwP16jr9iyloYgMS0xfxwyNrOyfTpbJ+wd24doc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:7d:7c:30:a5:c4:2f:8e:4d:c7:9c:37:cd:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jul 24 01:00:38 2026 GMT
Not After : Jul 25 01:00:38 2026 GMT
Subject: CN=e4f5da41653571b31f64b60e87f2600f3b505be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:36:17:cd:75:45:b4:68:9b:d8:07:a5:61:
79:5b:40:f9:e9:f3:8f:f4:27:17:1e:2a:18:91:a3:
a5:19:96:c2:a9:b5:ac:e9:ff:d8:33:e5:a0:7e:dd:
ab:5c:38:d1:f6:41:5a:b3:01:ea:26:b8:93:18:7f:
5a:cf:16:cf:d4:bf:f3:d7:60:06:e3:4f:f7:e1:e4:
f7:9a:a5:34:0e:50:6b:23:ca:9a:b0:b4:51:84:86:
6c:ff:a9:bc:b4:94:86:d7:43:5b:7b:e0:54:30:0d:
bc:a3:57:6a:94:a1:31:25:bd:84:8e:d5:22:00:8d:
ca:26:8c:20:6d:70:36:54:50:cb:27:bd:ee:53:89:
34:50:1b:3e:ab:fb:b5:d4:a4:d7:aa:ba:82:ec:ff:
a0:6a:b6:f2:dd:fb:94:a2:71:c2:71:42:99:3e:a6:
e9:dd:8f:45:fd:50:90:ae:7b:12:b8:10:9d:7d:38:
d8:9f:6e:91:73:20:0d:ed:6c:3e:18:2a:00:93:2a:
80:04:f5:fa:ba:b1:06:ca:ea:b7:40:cc:cd:3a:8f:
9f:b2:10:30:25:4c:d8:c4:14:c8:48:e4:53:2b:c9:
b1:f4:e8:21:c8:f5:ad:31:8f:b2:6a:9f:ae:b8:c9:
93:f1:33:b9:ce:86:16:0e:44:ed:83:9a:73:41:d5:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:DA:41:65:35:71:B3:1F:64:B6:0E:87:F2:60:0F:3B:50:5B:E3
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2c:ae:22:e6:e9:c9:a6:91:d3:80:76:cd:9c:b5:b1:e1:fc:
b0:4d:ae:b2:be:af:9d:19:90:80:71:06:c4:b1:44:f4:c2:25:
07:16:e8:39:3f:7c:64:84:4d:50:e3:a1:df:3b:11:ea:68:10:
91:38:ef:ee:43:46:a8:af:72:e8:68:27:a2:4d:bf:08:96:9f:
6c:d3:03:5c:de:8f:be:5c:bc:d5:e1:03:c4:e9:22:66:19:df:
00:9f:1a:89:ab:17:55:60:f1:13:71:ef:09:24:41:f7:42:c6:
15:f2:80:48:61:0c:f1:62:c5:1a:c7:78:5c:91:f1:f0:dc:e4:
ee:9f:2d:c9:0d:4f:66:00:91:c1:78:05:e3:45:4c:1e:e7:4b:
ae:6d:88:0a:f6:79:ed:8d:0c:ed:d9:de:8b:7e:00:11:62:bd:
46:0e:53:f1:13:66:c3:90:ec:eb:f2:79:b5:ca:bc:9d:46:f1:
8b:ce:c3:8c:d2:3c:e9:fb:66:a2:56:ee:7e:f8:a6:94:28:af:
e5:67:16:23:ce:b6:a6:99:42:71:98:5c:93:a5:0d:cd:11:28:
5a:7d:5b:10:42:14:1d:aa:7e:37:c9:9a:52:6d:01:cd:af:31:
b7:95:cc:66:e4:62:81:eb:89:58:40:ae:21:bc:20:1d:62:02:
22:58:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:57 2026 by rpki-client