Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: sQle9XC/yDY6393YcV6lC+X0q/AefkUTmz8hXqtXSRI=
Subject key identifier: 06:5E:A3:26:12:59:2C:62:CB:35:21:69:7B:40:B7:14:14:2B:39:80
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01A0D42681589C9969052D36E0C41722C930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0EC1
Signing time: Thu 24 Sep 2026 16:01:28 +0000
Manifest this update: Thu 24 Sep 2026 16:01:28 +0000
Manifest next update: Fri 25 Sep 2026 16:01:28 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: TQUy/S2E0xTNAMEQkLAztS3BOgPpTHU4ZH3tOSC0AC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:81:58:9c:99:69:05:2d:36:e0:c4:17:22:c9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Sep 24 16:01:28 2026 GMT
Not After : Sep 25 16:01:28 2026 GMT
Subject: CN=065ea32612592c62cb3521697b40b714142b3980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:63:1d:c5:67:06:53:e7:cc:c8:3f:64:fc:
f1:78:24:f6:3b:89:5d:0a:85:67:d9:ae:ea:3a:6e:
04:f2:c2:c1:d4:75:c6:49:8e:8b:bc:9f:3f:c0:8d:
1a:e4:7d:ad:f4:a8:e3:ed:e9:59:91:13:52:a1:ad:
06:af:f3:f3:31:6d:8d:7e:3f:44:dd:83:74:4b:6e:
f7:64:a8:57:24:4b:2c:6b:02:c4:8b:39:15:c1:4c:
6d:9c:e9:58:d7:b6:d9:67:57:39:19:72:af:40:2f:
77:02:51:b8:d4:ca:83:17:73:db:44:ea:e5:42:8d:
4f:58:b9:7e:86:50:5a:90:6d:ab:18:22:d8:c3:19:
fe:41:9a:c0:06:34:72:b6:7f:10:af:1b:f2:5e:2d:
b1:12:8d:a2:ef:0a:12:a4:61:32:51:18:22:71:cb:
bf:b4:db:ee:ed:06:41:73:f5:b2:fc:55:b6:8c:b4:
46:f9:f3:76:b8:48:70:2c:00:ec:ba:f0:b4:72:a2:
a9:6d:6a:b6:60:8e:86:cd:f6:82:43:56:d1:3a:c2:
4a:1a:8c:35:a9:55:10:f8:31:2e:be:d2:d3:71:ba:
02:98:58:b5:e9:60:8c:c3:a9:1d:b4:2a:92:e8:b1:
da:73:5d:73:b5:82:17:8e:a1:df:5e:c2:4a:3d:31:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5E:A3:26:12:59:2C:62:CB:35:21:69:7B:40:B7:14:14:2B:39:80
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:21:e5:99:dd:27:78:f3:97:96:1d:f6:c6:c2:e8:45:a9:
9c:59:2a:50:54:38:06:fb:93:34:85:f0:98:d4:59:a4:a4:04:
78:eb:10:c3:5b:0a:d9:06:bf:58:89:3a:af:4b:57:71:f4:d6:
b9:e4:2a:1b:0e:2c:bc:a5:fe:9e:f4:ee:c0:8a:f6:e2:c2:30:
cb:60:c4:a1:75:ca:84:c7:aa:52:aa:f5:d3:84:b7:e8:b2:ac:
a4:73:c8:0b:c4:ba:e6:3f:81:27:9e:78:fe:f7:12:1c:5b:77:
b5:16:d1:a4:13:42:0b:b7:fc:7b:1d:c4:2d:d7:0a:e1:48:b5:
8f:49:1f:25:e8:99:e2:6a:9c:b3:54:ce:5b:5f:21:ab:a3:3c:
b1:b1:14:02:31:8c:d1:1d:c9:36:73:34:a1:c8:b6:43:31:ee:
95:9a:ec:84:cf:f8:95:4b:80:8c:03:ef:6d:b8:39:b9:ee:21:
96:6c:31:58:64:67:16:df:cf:66:93:44:b9:b6:a6:b2:bf:ba:
80:0d:da:5b:f8:e8:37:66:50:dc:3b:8b:72:bf:d4:d0:ce:10:
1d:b5:42:8d:0d:06:49:45:e2:69:72:b6:22:90:bb:0d:45:c7:
2e:02:7c:4b:4f:c9:44:3b:43:d1:d8:4c:3c:a6:2a:5d:e0:cc:
88:f8:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:46 2026 by rpki-client