Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
File: 42THc_ePWKQYAxOiJl7eYmpO3o8.mft (raw, json)
Hash identifier: mhtSI8hH1KYhjgEm5FAGn9AtATeNU49bjk8i2aG9cdA=
Subject key identifier: 5F:FC:B5:2A:91:28:6D:B8:07:36:80:76:9C:E8:55:2F:7D:91:97:0D
Authority key identifier: E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F
Certificate issuer: /CN=e364c773f78f58a4180313a2265ede626a4ede8f
Certificate serial: 01A0C9D8DFBF7344F956DD39FFE49BD33D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
Manifest number: 02B8
Signing time: Tue 22 Sep 2026 16:00:28 +0000
Manifest this update: Tue 22 Sep 2026 16:00:28 +0000
Manifest next update: Wed 23 Sep 2026 16:00:28 +0000
Files and hashes: 1: 42THc_ePWKQYAxOiJl7eYmpO3o8.crl (hash: 1iQNjBxujG8V9erpHXrZOJNi5Qkkc0on133s9rCFyb4=)
2: JEiEOpBmU1uH_8AmrDoyELuwAj0.roa (hash: 8utU4M2KV5mtQMT6I9Tf1TNzyzqi7bmjgO8ePSDyuYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:df:bf:73:44:f9:56:dd:39:ff:e4:9b:d3:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e364c773f78f58a4180313a2265ede626a4ede8f
Validity
Not Before: Sep 22 16:00:28 2026 GMT
Not After : Sep 23 16:00:28 2026 GMT
Subject: CN=5ffcb52a91286db8073680769ce8552f7d91970d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:12:dd:41:ea:c7:30:5a:15:21:1e:99:b5:
4a:67:d3:45:d3:cd:ea:86:54:c2:b9:b2:f0:2d:dc:
90:aa:fe:ae:d0:ca:59:20:24:29:64:5d:3e:e1:a8:
95:bd:cd:c9:08:93:3f:48:5f:97:4f:89:a2:4a:bd:
06:69:9a:7e:9f:6d:33:21:42:56:f1:7d:17:01:3a:
1a:ab:42:ea:56:56:52:b4:14:83:9c:21:97:73:da:
74:7f:6c:86:b4:6c:d2:83:e8:75:a3:ac:62:36:c4:
79:06:fd:b8:9c:ba:b0:d4:a8:fe:19:8f:68:62:05:
7b:98:4d:89:88:a6:35:37:ed:70:7c:e7:45:96:fc:
5e:00:46:a8:0b:5c:62:42:5c:3b:c8:0c:22:a1:33:
56:9d:d4:40:da:6a:e0:a7:a5:f3:2c:0c:d6:dd:f0:
89:86:a0:90:0b:96:9b:2b:f6:66:0c:df:15:6c:b9:
e5:e6:7e:b5:1c:be:75:18:ab:78:3d:57:9c:45:37:
3d:d1:93:17:d1:19:04:e9:52:a7:01:e4:a9:65:86:
b5:3d:ed:c2:fa:03:d6:2b:48:b6:59:ff:21:30:28:
5f:e8:d3:3c:56:29:03:aa:bd:3b:86:7f:6d:9c:9b:
96:66:85:87:b8:4f:b4:b0:bd:33:b0:8e:a6:1f:95:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:B5:2A:91:28:6D:B8:07:36:80:76:9C:E8:55:2F:7D:91:97:0D
X509v3 Authority Key Identifier:
keyid:E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:52:f2:f4:17:e1:ec:b8:cc:00:52:e1:5b:e3:12:be:d7:a3:
68:fe:7f:53:c4:3c:39:0d:fb:f7:67:97:91:ac:d9:92:89:65:
87:6d:75:55:28:ab:05:30:d7:11:a9:2d:b8:34:cd:f8:57:58:
22:bb:28:7a:1e:c6:28:f3:5a:f1:2e:ca:c5:c2:d2:cf:0e:3a:
c9:1b:c7:01:2d:16:23:b8:dc:e1:fc:8e:a4:e7:63:45:04:0e:
06:10:e9:24:d7:25:d6:f3:ca:23:0e:b7:ab:0b:66:93:81:64:
b1:31:fa:9a:27:be:5b:07:76:cd:0c:ff:66:9d:2f:b1:12:78:
5d:61:7f:c3:59:5b:3c:d7:36:ed:9d:d0:9e:f6:99:92:37:08:
32:67:9b:6c:61:ae:d7:65:83:6b:c7:5c:60:11:94:cf:b0:18:
7f:cb:33:50:00:7d:19:55:c4:d9:34:90:a8:10:1e:55:53:6d:
0a:e1:81:4f:a0:df:eb:a6:c2:18:40:a7:79:8b:07:58:da:9f:
2c:61:42:92:f8:c9:e5:ec:e1:8e:84:ef:ea:37:ae:f7:cc:58:
81:af:4c:f3:75:df:5d:ce:65:bb:76:f4:d7:a4:83:b7:3b:5c:
20:ea:e9:04:93:07:83:09:88:7b:71:58:d3:34:66:63:44:89:
f4:0d:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:25 2026 by rpki-client