Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: gsK7Pdztu5RPaqnXpdhBd1iFit8RD43C38G2UI2pj2w=
Subject key identifier: C5:23:59:F9:1A:95:DF:C8:86:E4:86:1A:A5:CF:C9:EF:4A:A5:EE:46
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019F91DAD43F33452A2CBC1A088E3F1EE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 02:01:05 +0000
Manifest this update: Fri 24 Jul 2026 02:01:05 +0000
Manifest next update: Sat 25 Jul 2026 02:01:05 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: iEr+Lgvk4h4IRievEC7PwSHnWWB9AKIYNq6at1aKlak=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d4:3f:33:45:2a:2c:bc:1a:08:8e:3f:1e:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jul 24 02:01:05 2026 GMT
Not After : Jul 25 02:01:05 2026 GMT
Subject: CN=c52359f91a95dfc886e4861aa5cfc9ef4aa5ee46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:72:26:9d:1b:64:0f:b2:a7:73:e1:7b:c6:
5e:49:82:65:52:88:e2:5e:b5:51:1f:f2:12:ef:79:
7a:1e:0a:ba:0b:19:50:24:e5:0a:01:7a:81:88:f0:
6b:93:7c:84:61:19:2f:2b:4e:c4:1c:a3:18:5b:e8:
e2:80:84:7b:e6:40:70:d9:1d:81:00:4d:c4:70:2b:
c4:d1:4a:7e:2d:9e:ab:ec:f0:1a:39:0c:17:ab:2e:
0d:17:47:0b:ca:7f:c0:33:95:aa:b0:86:04:59:92:
5a:73:00:22:7e:ac:73:12:54:05:40:0b:ad:93:0f:
41:03:34:75:44:18:db:77:2a:42:2e:af:dd:be:d8:
00:e8:94:cf:c4:6e:b1:9a:f2:0d:23:75:a3:69:63:
04:f8:09:08:8f:48:63:ce:43:fc:60:fd:d0:02:c4:
e7:0f:ff:f5:3d:e6:13:34:55:8d:2a:ae:fb:e4:e4:
17:1d:07:dc:ee:13:e5:1a:d3:5d:82:61:0a:7b:5d:
80:05:eb:86:ad:15:e9:56:53:c5:34:99:9a:fc:8a:
f2:de:89:04:fb:0e:38:80:cd:0f:8b:a9:1c:a1:6f:
a2:ed:63:32:9c:03:16:38:2d:c4:b8:d0:e7:3d:0d:
5b:ac:81:37:0d:2a:7b:2d:1a:10:c8:41:18:d7:38:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:59:F9:1A:95:DF:C8:86:E4:86:1A:A5:CF:C9:EF:4A:A5:EE:46
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:de:c4:df:98:06:c3:b5:d7:fd:dc:ad:d2:9f:a1:99:76:05:
39:c3:3e:80:df:fe:0b:3f:d5:3f:47:01:b9:32:f5:72:a0:52:
de:90:ce:5a:b9:6d:aa:bf:f9:1a:f3:e4:21:50:b9:fe:00:7d:
59:b6:8d:2a:7b:ff:e4:08:28:17:69:a7:7e:68:0d:92:c3:fc:
c3:f0:a3:ec:97:54:9a:0a:1c:a4:fb:8f:d5:8e:1c:41:94:60:
91:ce:c6:7c:68:4a:e7:e8:b1:71:5c:6d:d2:31:cb:b3:40:9b:
f4:4d:2c:da:29:3c:c2:f5:da:d3:ca:e9:6d:c4:d2:ae:0c:18:
9d:b7:ce:71:f5:25:6e:62:ee:f8:3f:73:4f:df:96:67:c5:06:
e0:56:ec:96:a1:67:51:9d:46:dd:27:c4:12:1d:55:57:1f:4b:
67:ef:de:47:a8:c4:f2:07:11:d0:1e:22:d9:82:45:52:ac:db:
4d:c6:11:a5:01:c8:7c:65:a6:5c:b1:0c:10:13:3f:f7:df:43:
50:3b:fd:c0:07:81:aa:46:64:00:89:5e:b8:1a:72:ec:61:64:
75:d3:e1:c2:e9:7a:ec:73:8d:dc:6b:f2:c5:ab:7e:7c:08:21:
06:58:c7:ac:8f:d1:c5:a9:e2:72:18:69:83:79:ee:e5:69:b4:
ea:44:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:07 2026 by rpki-client