Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: dwdOyKoZyPleszq6GGjyJZYav9kB0sW8Bl74TVLHzCA=
Subject key identifier: 42:A3:23:36:51:A5:D2:E9:3F:DC:30:B8:2F:8C:39:6F:2E:29:E0:56
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 019E1F47BE86F0F81CFE50DFFBDE18C9FAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: 0395
Signing time: Wed 13 May 2026 03:00:55 +0000
Manifest this update: Wed 13 May 2026 03:00:55 +0000
Manifest next update: Thu 14 May 2026 03:00:55 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: AWT7g/b+9AInA+CsCyJ3dlclfOEfnp+0RL0nhKUAzN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:be:86:f0:f8:1c:fe:50:df:fb:de:18:c9:fa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: May 13 03:00:55 2026 GMT
Not After : May 14 03:00:55 2026 GMT
Subject: CN=42a3233651a5d2e93fdc30b82f8c396f2e29e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:c1:3c:7d:35:99:3c:09:00:9b:4f:24:ca:
19:7a:fd:19:81:a2:62:b4:a3:59:30:4c:cb:91:4a:
8d:a7:1d:70:df:a2:12:73:aa:77:ec:18:1b:50:89:
8b:31:36:60:e9:d2:a9:e7:18:f1:a8:c2:2c:2b:8d:
47:39:c5:19:32:23:b8:7f:52:8f:fa:f8:e3:93:83:
cc:6b:b2:fa:3b:8f:a9:39:dc:83:6c:2b:8c:bb:43:
90:2c:68:0a:d3:b5:3b:f6:f4:36:54:78:3e:cf:a4:
f9:14:1c:fa:ca:00:71:6b:cc:53:56:93:97:64:17:
80:7a:33:24:03:13:56:9b:9b:5f:51:ec:f2:3f:c4:
fa:e8:77:fd:44:ce:39:f2:65:c9:78:aa:7f:18:96:
b5:c6:53:af:3f:86:17:1d:c6:4a:99:8e:59:76:eb:
35:f0:9e:18:f7:f5:37:32:84:4e:2f:8d:3a:5f:2f:
0a:2c:ce:90:d8:4d:56:31:71:96:70:3f:52:73:23:
d6:e2:37:e2:67:20:99:e9:7a:90:c1:f6:dc:5e:0a:
cd:28:86:3f:da:5e:76:60:f6:66:65:de:17:49:c2:
6d:c4:8c:7e:dd:a2:2f:53:1c:6a:7e:7b:35:07:3b:
2f:85:a4:3b:c0:e2:46:c7:4f:40:ff:11:94:f2:24:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:23:36:51:A5:D2:E9:3F:DC:30:B8:2F:8C:39:6F:2E:29:E0:56
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bb:bc:fb:bf:78:55:75:5b:ed:2f:02:87:89:4b:ae:f0:97:
65:64:18:72:93:c3:66:91:c1:1d:d6:b7:bf:2d:a6:49:a5:43:
05:cc:6d:2e:ab:05:f3:88:52:ba:05:04:81:59:c1:94:a7:61:
ca:55:e8:2c:0f:f0:50:52:bb:f0:af:8f:02:75:8c:47:96:6b:
96:7e:75:18:c1:5c:77:f3:d6:89:1b:30:59:84:27:19:15:44:
98:6e:3b:95:46:c1:59:2f:ce:dc:89:44:30:c1:ce:80:55:ad:
2b:2d:31:27:92:33:ea:47:5b:10:f6:ff:8e:5f:54:24:30:29:
7b:3d:7f:bc:e5:f3:03:c5:67:d5:18:0d:b6:e7:16:8a:5b:9f:
b2:bf:ba:96:f8:b9:b0:4b:28:ab:b5:9a:3a:53:c4:8b:34:24:
35:02:78:3a:8d:1e:0d:d9:2c:32:30:bc:9c:dd:82:82:5b:42:
21:09:de:b0:9a:56:3a:26:76:f6:f3:6b:d2:9c:ae:e5:08:a1:
2c:33:63:19:85:a2:c6:0c:23:79:41:d5:27:e6:22:5c:a7:5c:
19:e1:3f:5f:7a:c1:ba:cf:2c:e4:d9:8a:16:83:a0:22:1c:71:
88:33:1f:86:17:aa:8b:2d:93:09:fe:2b:1a:29:9d:fc:92:5c:
32:c4:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:00 2026 by rpki-client