Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: 7OEFonVoB6nIMWAOQpg4P++848RFRMtKhdaCYQluDr8=
Subject key identifier: D2:3F:D1:0D:3D:15:EA:07:EE:C1:90:7B:F4:D3:53:6D:0B:08:E8:CC
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019F8FB4E2766B7DF0CBB180F4CFA0DFE2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0E19
Signing time: Thu 23 Jul 2026 16:00:24 +0000
Manifest this update: Thu 23 Jul 2026 16:00:24 +0000
Manifest next update: Fri 24 Jul 2026 16:00:24 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: mqP3gk3WDOGswonrVk3wFTASNY5uKScuF3DJra3NUs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:e2:76:6b:7d:f0:cb:b1:80:f4:cf:a0:df:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jul 23 16:00:24 2026 GMT
Not After : Jul 24 16:00:24 2026 GMT
Subject: CN=d23fd10d3d15ea07eec1907bf4d3536d0b08e8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:7c:ec:0c:37:96:6d:7c:1a:8d:c1:13:15:
44:e8:5c:6c:db:89:bd:38:21:55:71:04:55:8b:b5:
80:28:1f:22:44:19:32:75:ef:96:12:f1:1f:85:09:
18:d7:b3:ea:d4:97:6b:56:50:f5:f6:60:81:56:9c:
20:3b:99:a9:7c:65:ad:54:4b:3f:e1:e5:6a:4f:c7:
d5:61:af:9b:43:f6:22:d5:fc:5a:d0:64:e4:23:a0:
61:42:94:1a:c5:7b:dc:1d:77:e8:18:5e:41:98:8f:
ca:dc:98:59:5d:8f:95:fd:13:d9:1c:01:fe:11:25:
86:46:05:a3:e7:6d:8d:a4:2d:a0:14:39:41:b2:e1:
1e:17:7a:61:d6:52:4a:b1:b3:1c:7c:ac:5c:88:88:
e5:3c:f0:81:25:63:98:e7:c9:d4:6e:e4:40:63:f4:
df:06:2d:b6:97:b9:a0:69:bf:1d:93:0b:62:e3:ca:
35:5c:fa:17:ed:39:9e:53:15:07:69:23:6a:14:aa:
c1:17:d2:ec:3e:73:d2:b3:c1:53:09:65:c6:33:7b:
6c:0b:16:f2:7b:35:3d:4c:75:c2:f2:b4:6a:f3:c1:
31:6c:f3:29:74:6e:79:89:80:ab:df:b4:1b:6e:c1:
d6:67:a3:60:b6:84:b8:ba:f8:d7:5e:0c:73:e4:ca:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:D1:0D:3D:15:EA:07:EE:C1:90:7B:F4:D3:53:6D:0B:08:E8:CC
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7d:76:f4:34:19:1f:c1:8d:56:cb:37:c8:96:f4:15:28:05:
9c:03:d8:3b:52:24:17:2b:6e:6b:94:53:8e:da:ac:f6:02:e2:
8b:25:bc:74:61:a8:b3:b2:ca:91:2f:c4:73:89:da:4c:92:56:
95:54:8d:08:6d:7a:7b:79:89:30:12:fe:3f:21:4f:11:4c:63:
b1:b6:7c:50:25:47:5a:0a:d5:ef:f4:53:05:0a:43:7d:6c:fb:
37:49:ae:d4:0e:1d:42:94:a3:f3:32:c1:1d:22:cd:ca:d1:22:
b1:a9:03:d8:4a:ff:9b:1c:3b:38:f3:eb:93:49:07:69:cc:ae:
6c:29:04:c2:ea:7a:26:4d:f5:7a:b2:6d:88:f5:72:ed:a8:1a:
e3:6f:e4:3e:39:42:24:b0:d6:11:55:b9:cc:8c:66:6c:4a:a3:
00:aa:92:24:a5:b4:06:b8:29:26:09:22:76:01:77:22:ec:87:
c1:26:d4:86:f7:e7:60:42:66:c1:90:86:d1:38:1e:ba:a2:49:
fd:b8:76:ae:0a:53:a7:a9:6c:42:84:25:b6:3b:2f:ed:f8:e1:
e8:2d:39:fb:c6:2c:46:6f:fc:d5:72:2a:c1:59:00:79:30:32:
0a:29:83:85:cc:67:4e:7c:2f:e5:00:e2:d6:ce:37:5d:ad:91:
bc:fe:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:20 2026 by rpki-client