Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: WOkicMTAhv/gkZi9BpzJXhvOYyH8UogIK808vJwS0R0=
Subject key identifier: 78:73:DF:D3:95:5D:FE:2F:6F:7C:20:4B:15:B2:0B:D6:FF:AD:1C:BB
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019E1CEBC2285100FEB11715185844E663CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0D59
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: hmQDrmGOaGXv+CPDNLF/f2+voQVNT3zibecoAJ5eQ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c2:28:51:00:fe:b1:17:15:18:58:44:e6:63:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=7873dfd3955dfe2f6f7c204b15b20bd6ffad1cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:9a:fc:9e:45:a5:18:dc:db:2a:1d:72:f3:
42:24:14:6b:e1:9c:16:f5:70:41:25:dd:ae:5f:eb:
8a:dd:06:13:08:2f:9f:ab:70:84:ce:38:5b:66:3b:
13:32:cc:16:32:e8:fe:ab:3c:03:6b:3b:0e:67:80:
b5:94:73:a4:73:a9:29:c0:8a:9e:08:df:54:02:93:
87:24:ac:d9:aa:8f:45:4f:ca:85:59:19:24:5b:a7:
49:b8:5f:4c:56:72:ab:a2:c6:34:d3:1d:be:e6:22:
19:97:ce:c1:dd:c4:90:9e:96:3a:15:23:a9:ec:bf:
e7:29:e9:58:aa:71:f1:b2:57:45:e7:d1:13:25:8d:
08:bf:4a:cd:19:2e:29:f2:57:9a:99:f4:e3:63:b8:
e3:7a:9f:da:9b:e9:a3:d3:5f:29:58:68:e3:48:c4:
ee:f1:0b:2f:95:50:30:9b:9a:08:29:39:e2:e6:2b:
27:d3:c5:04:fb:60:87:25:5a:da:ac:31:a2:43:b3:
23:3e:d5:40:9b:ad:b6:dd:00:34:e0:f4:70:09:b9:
76:47:17:7e:d1:e4:19:4f:05:86:d8:e1:5a:5f:a5:
f4:0e:7d:d1:04:26:7f:bb:be:89:8c:eb:64:67:33:
b4:95:91:69:e2:2e:cb:4f:3f:0a:b8:c3:c3:cc:7a:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:DF:D3:95:5D:FE:2F:6F:7C:20:4B:15:B2:0B:D6:FF:AD:1C:BB
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:89:88:e9:36:b7:59:08:ba:d0:02:d7:c7:35:44:bb:1f:
0d:d3:fc:53:eb:12:b6:e2:51:e0:bd:4b:ba:20:7e:de:26:b2:
7e:77:be:f4:88:9e:fc:c8:35:5d:f0:35:ce:10:c7:ed:30:68:
08:58:d4:a8:e5:eb:e3:fb:29:b6:ed:1c:71:f0:74:16:2d:ce:
67:4f:eb:c9:4b:3a:de:91:a8:90:54:1f:cd:97:ba:78:7f:c4:
f3:7f:fa:b1:fa:82:d0:2e:f0:3f:45:67:ff:0d:93:25:79:ce:
9c:e3:59:8d:3e:ef:eb:ca:14:74:fe:b3:1a:da:f0:c3:e9:04:
7b:98:6e:41:4c:72:df:e6:b5:17:9f:25:d3:27:c5:d4:eb:25:
e5:13:d1:ae:94:2c:cf:1d:23:fb:6f:53:c9:4b:ec:3a:f1:57:
1b:5e:7d:49:a2:04:4e:91:93:18:ff:01:3c:55:8c:38:5e:35:
b9:a6:c9:de:d9:6c:01:60:b1:00:73:c8:3b:68:45:15:8e:9d:
a0:0e:65:b0:54:55:2d:00:04:63:13:7e:46:1d:a3:ac:70:59:
11:8b:f4:9d:9a:96:34:e7:3a:de:7f:31:2a:d0:fe:37:17:eb:
c7:20:d4:0b:da:a5:a0:40:c5:02:cb:eb:e2:58:94:b0:b5:4b:
86:df:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:45 2026 by rpki-client