Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: aGoFi0bf1in7/sVipJeYEDRgiCKf6RPTJuPH8J0gMV8=
Subject key identifier: 46:E4:FA:46:AC:49:4A:73:1B:2B:0A:69:BE:C1:EC:F2:FF:0F:A9:3A
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01A0E3D0110B2FACAFCE0B5201CBC6034B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1A7B
Signing time: Sun 27 Sep 2026 17:00:58 +0000
Manifest this update: Sun 27 Sep 2026 17:00:58 +0000
Manifest next update: Mon 28 Sep 2026 17:00:58 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: CsMaLqprsEZb5rcrOIgLKR1QnOx3z+NphwI2g3mD3jg=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:11:0b:2f:ac:af:ce:0b:52:01:cb:c6:03:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Sep 27 17:00:58 2026 GMT
Not After : Sep 28 17:00:58 2026 GMT
Subject: CN=46e4fa46ac494a731b2b0a69bec1ecf2ff0fa93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:9b:ed:eb:3f:79:6a:10:73:79:9f:69:dc:
c2:00:00:54:aa:4a:b6:2d:21:0a:c1:2b:dd:b1:cf:
b9:8f:b0:21:df:c1:be:27:2e:60:b2:e6:51:e1:9c:
ef:a2:82:54:cc:30:fd:14:35:47:fd:57:0c:a9:8e:
0b:41:75:f3:8e:0d:bb:ab:b9:6b:51:eb:5f:df:79:
d0:25:f2:8e:bd:f6:2b:8b:bc:4c:98:53:85:0e:93:
ed:92:f6:fe:d0:0a:e0:e4:40:87:59:47:d1:9f:30:
5e:62:a4:47:92:bb:aa:c4:2f:37:db:48:af:6c:a5:
82:ab:b9:0b:97:21:23:28:11:ed:84:23:9a:60:98:
c4:e1:30:58:32:fc:e6:29:a4:5a:16:d3:99:89:69:
c2:da:a2:85:5e:21:11:2c:c9:11:82:5e:43:bd:80:
65:3d:84:3a:14:93:f8:71:af:20:8b:98:f3:4f:d4:
8b:c4:e8:cf:f5:30:e0:50:cb:48:a0:9a:33:0a:aa:
61:9f:bc:8c:64:c6:9c:36:c4:58:8e:81:49:11:4f:
37:52:a0:25:94:eb:f3:fb:01:9e:a1:12:45:d3:16:
91:af:32:0f:db:01:3c:d9:16:4e:7c:d1:c0:a1:79:
22:b7:f9:04:be:01:84:35:ca:c0:9a:dc:0c:a0:fb:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:FA:46:AC:49:4A:73:1B:2B:0A:69:BE:C1:EC:F2:FF:0F:A9:3A
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:13:c4:11:a3:af:86:50:40:37:8d:47:b3:d2:21:b4:0c:
8c:95:f0:58:e5:4f:b2:3b:79:22:fc:70:a4:7e:f5:3d:d5:77:
7c:ad:80:5c:b6:eb:06:9a:82:0b:be:94:24:15:35:7f:56:c4:
72:2c:8f:8a:6e:b5:c2:19:f4:f4:3d:30:40:dd:4b:2e:6f:2d:
be:a7:14:c1:f3:71:35:50:64:18:da:34:75:11:76:b7:0b:76:
c9:87:13:2e:66:f9:06:ec:a2:4c:c9:f1:31:3c:71:87:b1:7e:
13:01:5c:6b:ee:d4:59:5a:99:ff:0b:1e:3f:9e:fa:7b:81:25:
f5:d2:7d:64:85:78:89:ed:eb:cd:fa:92:93:03:82:57:72:8d:
5b:4e:e7:c0:90:65:3e:e8:ae:4e:3c:7a:1d:17:5d:a1:5d:41:
39:6a:ec:9b:c0:af:e8:fe:cf:c6:8e:1a:12:f0:5a:42:bc:2a:
c8:c9:0d:cb:f2:fd:4e:0d:71:35:3a:5b:10:f5:85:b8:db:f1:
9d:7f:87:e1:5b:ee:ec:95:89:e2:99:d8:aa:ce:61:4c:43:6f:
1d:42:de:1c:4b:2c:ae:fd:65:2e:b0:51:b5:17:b1:13:15:2a:
12:7d:70:57:6a:ad:d7:a9:ad:43:45:de:6a:b5:a8:f1:9b:65:
a8:e0:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:59 2026 by rpki-client