Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: fu7dv9EzEOODZ0UqAXpeHHpUp4uetK0Nw2QcS7IghwY=
Subject key identifier: DF:3D:52:7A:24:23:1F:71:80:F9:63:CF:0C:FE:F5:6D:7A:0B:FF:27
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 01A1DE708CA4148F30E1C8EEA1B23DDF6DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 19B5
Signing time: Sun 15 Nov 2026 09:01:20 +0000
Manifest this update: Sun 15 Nov 2026 09:01:20 +0000
Manifest next update: Mon 16 Nov 2026 09:01:20 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: 5d1ErnZXcPTP7ys6hubRDwc0t8VugtLnWlbiPsFLeBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:8c:a4:14:8f:30:e1:c8:ee:a1:b2:3d:df:6d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Nov 15 09:01:20 2026 GMT
Not After : Nov 16 09:01:20 2026 GMT
Subject: CN=df3d527a24231f7180f963cf0cfef56d7a0bff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:ad:90:af:18:78:84:59:f5:44:75:1e:09:
25:0c:9c:4f:37:f5:fc:70:e9:98:1a:62:38:eb:41:
3f:6a:77:4f:ef:e7:f4:6c:34:27:e7:42:a6:7a:28:
a0:ca:5b:40:a2:ac:6b:b8:9f:1c:02:c4:57:50:c2:
ee:bf:60:0f:f0:8a:6a:90:b3:b7:80:6a:e5:48:5c:
c2:d6:b4:87:ef:d9:d6:c4:b5:45:9c:e9:65:53:c3:
dd:be:7a:d2:d8:5a:bf:48:88:aa:39:17:d3:65:e1:
91:f9:2d:22:0e:64:8f:57:cd:4e:0f:52:17:a7:43:
f8:64:83:4d:a4:ae:6f:28:b3:e3:c4:3c:5d:97:e8:
2c:cc:47:a2:dc:67:51:08:e2:e1:86:f0:d2:3b:ad:
99:91:de:16:64:56:6d:70:3f:f0:25:45:a0:82:aa:
63:7f:d4:81:46:30:34:d6:3a:4f:fe:4e:b2:58:76:
13:5b:22:7f:07:98:5c:2e:11:4f:a1:63:f4:fd:20:
a7:90:7a:6a:82:f4:ca:02:ee:8b:f5:14:05:d8:22:
a0:ad:ee:5f:5a:4d:1e:c2:3a:ad:7d:1c:ad:3e:0c:
91:cd:bc:bd:de:25:4f:21:ba:2a:88:24:bc:3e:53:
4b:15:31:85:50:fb:91:6c:b7:8c:95:4c:c1:f2:40:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:52:7A:24:23:1F:71:80:F9:63:CF:0C:FE:F5:6D:7A:0B:FF:27
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:78:df:6c:1e:44:79:93:2a:6e:a9:81:d8:8f:91:38:3b:
e5:6c:54:c7:1c:e6:c8:7a:71:34:20:97:ef:fb:c8:3b:5c:e4:
93:75:ba:47:af:85:f9:bd:75:07:04:7c:39:99:51:26:a9:a4:
f8:45:14:91:8a:bf:e8:99:0a:af:85:70:e5:bc:c7:d9:b1:a6:
90:10:a2:80:88:03:11:ef:6c:b3:51:60:2f:bd:61:cd:7d:0f:
00:bd:e7:ba:66:19:ae:75:59:78:e4:d8:18:15:d6:24:79:78:
13:be:b8:3b:cd:9e:f5:ae:1d:ba:56:35:2b:1a:44:9d:e0:dc:
d5:dd:29:a4:81:4e:60:58:24:72:95:4e:83:b3:79:ba:75:b7:
04:9a:0f:ee:d7:2e:99:60:a6:63:34:d5:09:8d:65:ed:eb:eb:
57:91:25:b9:71:fc:e5:e4:1f:ff:2c:81:d9:f6:7c:5e:81:fe:
d3:3e:d0:76:8e:ed:ae:e3:32:78:00:3f:11:57:70:af:3e:56:
15:26:b0:7e:9f:81:4e:d1:80:51:8d:1d:5d:c5:50:9c:e4:84:
b0:e3:e3:0d:a4:60:82:a9:55:14:7f:11:f5:10:04:f6:b6:1b:
e6:b8:ab:e1:7e:d3:d6:1c:c0:5f:a7:57:82:6c:7e:20:3d:cd:
86:38:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:07 2026 by rpki-client