Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: sCNfMuSkYF2oPexJ6kuyDt80AeSqoXvEXQ3Coz7PQJw=
Subject key identifier: 9F:35:AE:A6:30:4E:77:6D:9D:C6:C2:3E:55:DA:EC:B9:24:DC:C6:D1
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019E1EA391290B9F6E4B0D50F16DD0651047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 17C4
Signing time: Wed 13 May 2026 00:01:36 +0000
Manifest this update: Wed 13 May 2026 00:01:36 +0000
Manifest next update: Thu 14 May 2026 00:01:36 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: gkjbEmmbGnxwyIrTNaxkFoGah3rn1ChZZjmbL2j3uwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:91:29:0b:9f:6e:4b:0d:50:f1:6d:d0:65:10:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: May 13 00:01:36 2026 GMT
Not After : May 14 00:01:36 2026 GMT
Subject: CN=9f35aea6304e776d9dc6c23e55daecb924dcc6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:09:4b:16:b1:7c:80:cc:0d:f6:e9:d6:ec:
73:22:c1:42:6a:71:19:81:d0:f8:ee:ac:0b:13:4e:
18:9d:d5:be:fc:c0:03:2c:eb:7b:d6:90:5a:a2:d2:
f2:7a:89:25:79:e5:3f:e9:37:92:9f:73:26:86:83:
e9:ef:7e:9b:ab:5b:d1:1b:29:1d:42:3f:85:7a:70:
81:3d:83:c9:13:c9:2b:00:47:a4:16:94:3a:55:a6:
cd:7b:84:fc:89:a9:46:96:05:04:3e:38:73:b9:d1:
a6:d6:e3:7c:e7:ef:4f:3a:07:c1:ea:66:21:6e:5f:
8d:35:ac:0d:68:5f:d3:51:b0:68:e1:dd:e4:cb:a9:
f5:d4:d7:48:56:a9:8c:55:cd:c8:37:a0:4b:29:1d:
f9:64:b3:52:1a:03:f9:b1:4e:2d:bb:5b:eb:fd:87:
ff:f4:bd:02:e7:a9:88:47:05:ed:16:77:46:e1:8d:
00:17:3f:21:54:b0:20:a1:f4:d0:e1:3f:a9:b6:4f:
a7:47:e1:3b:90:82:f7:7b:7b:9d:c7:ae:7d:13:ec:
1f:50:03:82:a7:c9:04:f6:ee:29:0a:d9:eb:ad:ca:
0f:c2:51:8d:d6:e3:1d:dc:c2:64:fe:f8:82:f5:46:
59:85:84:65:fa:6a:f1:1a:92:e3:17:22:a5:72:13:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:AE:A6:30:4E:77:6D:9D:C6:C2:3E:55:DA:EC:B9:24:DC:C6:D1
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:55:70:d4:72:c3:e1:a7:c3:fa:0a:1c:23:da:27:03:60:40:
a7:e0:2b:54:c2:18:49:78:29:43:fe:4c:e8:0d:bb:72:29:f5:
76:6a:39:62:07:c0:95:29:96:93:58:40:86:1e:e8:47:16:eb:
d8:36:18:b9:d7:3c:23:c6:3b:96:4a:25:4f:0f:87:99:98:0f:
a4:2e:3e:0c:33:43:ab:d2:9c:60:f6:53:80:13:b0:6c:53:c2:
a3:75:d2:c7:ba:e3:57:3f:75:74:ac:1a:a0:03:08:88:04:48:
b1:16:1a:08:20:1d:0b:f0:ea:ef:26:00:2f:02:4f:12:cb:4b:
b2:17:1b:ab:96:11:98:e0:39:0a:eb:ec:d4:52:ce:f6:c5:a2:
92:3c:f0:b8:00:20:4c:70:84:ae:bf:50:00:a3:ad:12:05:d8:
c5:ad:ba:e9:15:15:2c:0c:d8:c9:e7:8b:b5:f8:65:25:6b:a5:
ae:c3:49:dc:94:bb:9a:96:ea:26:cf:d3:71:ca:c5:d0:df:ac:
cc:27:21:f4:4d:0f:4b:de:8b:cd:e2:5c:70:ed:e5:3e:b2:c9:
6e:ec:ff:83:b0:36:cc:31:4a:06:c4:44:8a:40:ab:9d:e0:c2:
cf:41:ca:ce:6e:de:1d:34:1f:43:f0:f8:fb:e6:65:24:74:79:
8e:47:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:23 2026 by rpki-client