Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
File: 42THc_ePWKQYAxOiJl7eYmpO3o8.mft (raw, json)
Hash identifier: C10LfMrbSYHSVTMDkdFTW+38X7+sh58rQa2WZE9AIh0=
Subject key identifier: D7:A6:E4:07:F9:D9:BF:A1:16:73:E5:94:AF:94:24:E7:68:4B:12:CA
Authority key identifier: E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F
Certificate issuer: /CN=e364c773f78f58a4180313a2265ede626a4ede8f
Certificate serial: 019F90FE600951DD7E72D9A243252A769983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
Manifest number: 0216
Signing time: Thu 23 Jul 2026 22:00:17 +0000
Manifest this update: Thu 23 Jul 2026 22:00:17 +0000
Manifest next update: Fri 24 Jul 2026 22:00:17 +0000
Files and hashes: 1: 42THc_ePWKQYAxOiJl7eYmpO3o8.crl (hash: SLpf4mB/CRCjkoQvALJi+AaCseJQtVavydMNVXo8KRM=)
2: JEiEOpBmU1uH_8AmrDoyELuwAj0.roa (hash: 8utU4M2KV5mtQMT6I9Tf1TNzyzqi7bmjgO8ePSDyuYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:60:09:51:dd:7e:72:d9:a2:43:25:2a:76:99:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e364c773f78f58a4180313a2265ede626a4ede8f
Validity
Not Before: Jul 23 22:00:17 2026 GMT
Not After : Jul 24 22:00:17 2026 GMT
Subject: CN=d7a6e407f9d9bfa11673e594af9424e7684b12ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:1e:e4:94:65:bf:6b:b3:01:2f:24:6e:5c:
b0:1e:a0:96:ab:bb:49:33:99:30:5c:33:12:17:4d:
41:8a:b9:04:c4:9a:f9:5c:c4:72:47:fa:02:b2:87:
f0:95:2e:ec:32:ba:7a:02:ab:41:8e:e2:c7:4e:d9:
4d:8a:95:fb:1d:64:fd:00:98:71:ed:92:36:fc:de:
4a:98:d2:d1:61:ff:1f:06:26:e6:38:75:9f:27:2f:
e9:e9:ab:15:ef:e9:9f:5f:cf:4b:16:38:6e:e4:51:
10:a5:6f:55:2f:4b:5d:78:d5:2d:0d:47:bb:6c:bd:
0b:52:a9:1c:19:7f:81:36:c3:5f:66:fd:c9:f0:42:
f8:dc:8d:54:d6:6a:c8:70:07:9e:28:79:91:a6:bd:
d9:8f:45:a3:ae:fc:96:eb:95:91:db:25:fa:fa:0b:
36:97:14:e5:14:af:91:06:26:2c:51:fe:5d:f0:23:
d2:44:a6:99:22:62:2f:37:e8:26:ad:94:49:d3:aa:
e1:53:cb:1a:51:b8:15:d7:8e:ec:a2:87:81:79:e8:
62:a3:da:71:ae:f7:b1:cb:e5:db:35:bd:23:f3:2d:
e9:62:be:6d:c4:3f:99:9a:c8:80:ef:d1:55:62:00:
95:81:af:ec:a4:d5:08:b5:b0:22:54:4f:d6:75:02:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:E4:07:F9:D9:BF:A1:16:73:E5:94:AF:94:24:E7:68:4B:12:CA
X509v3 Authority Key Identifier:
keyid:E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:d6:36:6e:82:e4:37:be:37:3f:ad:06:5d:da:aa:ca:75:
9e:92:a1:ea:a5:29:1c:ac:c2:a2:c4:75:43:8b:e1:cf:3d:2c:
59:08:e6:4b:91:dd:a0:c5:b6:96:bf:c8:ec:b3:b2:00:94:dd:
11:a8:f5:f9:f6:bb:5e:a2:e8:50:bf:1a:a9:ce:d1:ae:28:08:
9a:23:00:dd:8a:d2:f7:2d:2f:b1:92:e9:06:31:f5:b5:4a:65:
57:47:10:6f:c6:59:05:98:90:39:e5:b2:68:92:17:3b:8e:e9:
40:eb:da:e4:34:cf:1a:85:26:50:d2:2c:98:b8:07:e5:f7:66:
89:dd:a2:21:0d:ea:59:cb:48:ff:f8:1d:8f:ac:47:0c:ef:be:
70:f4:0a:20:ce:ae:e1:c5:46:7d:a0:c2:2f:18:82:63:08:de:
93:97:8e:03:19:a6:fd:e2:28:b8:95:68:81:c9:f4:6f:28:6f:
40:18:f4:73:87:b3:4f:63:d4:66:17:d2:ec:fd:73:1e:a6:55:
cd:d6:0c:4d:c7:0d:09:ea:38:2b:3b:d8:54:83:4a:42:02:01:
e1:a9:8d:d0:53:47:aa:8e:3b:a2:ed:60:83:b5:3c:37:1f:bf:
ad:75:45:1a:a5:95:c3:c5:36:65:f5:67:3c:c8:c3:d1:25:1f:
02:da:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:43 2026 by rpki-client