Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: uq+HJ7rCBwIPyMoNSS68vJnm0kWjfeUntwCLDxRrO9g=
Subject key identifier: 60:05:45:99:9A:E2:FD:BD:7F:B5:A1:3F:8B:45:E3:11:97:D7:3A:F1
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019D27DF716EC386CE5A8D2BF4E6609C93DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: qYEk8cObeJ3PhmuEp3dNAF3G3mm6zmmSXRZPzjM6C+s=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:71:6e:c3:86:ce:5a:8d:2b:f4:e6:60:9c:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=600545999ae2fdbd7fb5a13f8b45e31197d73af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:5c:df:14:da:61:f0:41:94:bf:68:fd:7a:
1a:33:41:09:8d:a1:93:7c:df:41:e2:2b:01:3f:00:
97:99:9f:c6:01:fd:e2:c0:02:97:3c:40:7f:80:bb:
15:29:6a:de:f8:97:dc:8f:19:69:98:f8:87:1f:30:
ac:8b:b2:99:8b:be:60:63:38:5b:af:4a:77:59:52:
bb:a8:dc:80:ea:fe:18:64:b3:b5:11:04:04:39:03:
d0:2c:79:e7:a4:93:6f:f8:c5:9d:19:76:20:f9:6c:
20:4f:6e:e6:a6:d6:17:8b:bd:43:7c:b8:33:33:46:
ec:54:1e:d5:44:8a:fa:52:dd:10:fb:f9:50:b0:01:
9b:49:84:8d:e4:3e:09:ee:af:93:06:53:54:c1:d7:
72:86:bf:f2:63:82:ce:48:71:c6:a5:0e:48:a2:4f:
98:a3:d2:1f:89:91:ed:38:2b:41:89:e5:ec:8d:50:
90:d3:18:65:72:55:d5:19:d8:73:67:ce:70:36:07:
b0:31:f2:ba:e1:8f:73:a1:d5:da:75:7e:ce:0b:6a:
86:78:ff:d8:80:a6:57:b0:75:dd:df:f0:87:fb:eb:
c0:a9:a9:1c:05:7e:04:49:6a:32:8d:34:57:82:e6:
19:86:78:0b:2e:7c:78:a0:e6:2a:e3:1c:52:05:65:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:45:99:9A:E2:FD:BD:7F:B5:A1:3F:8B:45:E3:11:97:D7:3A:F1
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:74:a5:45:cb:88:93:7b:4e:55:51:ac:c6:27:1e:5a:33:
ec:1a:c6:c5:65:8a:50:45:c9:73:38:ab:08:13:18:44:83:c9:
f5:a1:9f:f3:96:25:f2:4d:87:71:fe:a4:ae:dd:d9:bc:72:ce:
9b:97:79:ec:3e:e8:6e:ae:c8:49:ad:fa:e0:db:89:ca:da:d9:
44:e4:2a:11:54:95:f0:9c:fd:e9:c7:42:2c:da:c5:b5:af:26:
a1:82:ef:51:cb:ab:2f:ca:58:49:60:db:db:0e:15:87:c1:00:
a1:22:36:7d:4e:db:e0:65:14:aa:bd:47:70:9e:40:32:96:ff:
30:da:01:cc:d8:25:e9:81:8f:bb:4f:98:87:0e:76:f4:3d:50:
30:69:23:7a:93:94:1d:12:85:4b:8c:5c:ce:82:5f:f2:8c:b2:
8b:da:08:5f:0c:11:29:3e:64:0f:e7:6f:82:89:e3:cc:c3:30:
59:d2:ae:00:d2:a6:43:59:a3:c3:26:90:57:ec:72:83:27:f1:
0f:77:40:17:9b:e8:d2:0b:bb:cc:55:8e:34:db:0b:09:df:cf:
2d:81:0f:a0:9f:68:a7:4b:ee:aa:a9:f0:76:71:28:22:14:32:
f8:61:04:63:ca:0b:34:5d:4b:c5:59:cc:5b:5a:4a:33:4d:91:
25:f9:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:10 2026 by rpki-client