Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: I9/jRbrXVmcF0ddsABCpB4ZbWFEGqB5iItrrPaGW4E8=
Subject key identifier: 7E:DF:83:5B:7D:67:F4:A4:FD:8B:F8:0B:09:2F:35:00:C9:DA:93:C5
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 01A0D5DDA17AAA761134013A0A1C8D1B7234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 192C
Signing time: Fri 25 Sep 2026 00:01:06 +0000
Manifest this update: Fri 25 Sep 2026 00:01:06 +0000
Manifest next update: Sat 26 Sep 2026 00:01:06 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: RxrKjue8ObvR/yLA3cUWgnZA+hypI1CmHE/kepfXgpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:a1:7a:aa:76:11:34:01:3a:0a:1c:8d:1b:72:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Sep 25 00:01:06 2026 GMT
Not After : Sep 26 00:01:06 2026 GMT
Subject: CN=7edf835b7d67f4a4fd8bf80b092f3500c9da93c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:ba:f4:a8:3b:31:1a:50:23:9f:47:65:2d:
47:6a:96:65:99:e9:96:79:de:49:71:1b:76:78:ab:
74:ef:c3:f2:d8:95:80:05:d5:24:fa:84:cb:e5:a4:
99:08:9f:48:ea:11:1f:73:f9:21:f6:10:b8:07:27:
d8:4f:59:d2:df:43:6d:8d:17:2f:64:55:13:f6:43:
36:1a:9a:a8:ef:41:48:dd:f7:a3:5e:7f:ea:63:b4:
9f:8d:03:26:c6:7d:7a:46:ed:aa:84:7f:16:6d:f5:
a4:b0:4e:7a:4f:e5:19:5b:88:36:fe:81:bb:a1:c6:
ae:5d:48:c1:b2:5b:08:b8:4f:87:63:6a:4c:ab:6c:
ae:00:b7:53:2e:5a:58:0b:48:14:63:32:19:37:09:
91:4b:1e:cf:10:6b:3a:93:d1:54:e5:74:e5:36:e4:
7f:40:04:bd:96:fa:9f:17:ee:3d:82:7f:06:1b:d2:
1f:17:2c:2c:0a:67:c1:b8:5a:c3:4e:e1:ee:46:db:
97:a1:3a:9b:a5:16:41:90:2a:eb:86:a5:33:0b:c2:
76:a2:4b:31:fe:d6:ed:b2:cc:26:74:66:3b:2e:35:
49:51:ce:e3:45:1b:b2:0e:e4:f0:29:a7:49:92:38:
6c:9e:f9:bd:14:f7:3c:d3:d0:06:59:0e:22:d3:db:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DF:83:5B:7D:67:F4:A4:FD:8B:F8:0B:09:2F:35:00:C9:DA:93:C5
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:ca:46:2e:1a:f6:08:45:45:94:2f:b3:b2:27:29:f1:5f:
4b:81:f0:83:d6:b4:87:c1:f6:a8:73:09:8f:2d:cb:e3:f1:5e:
f4:7b:2b:30:dc:68:dc:ad:07:23:e3:1e:38:ef:6a:27:06:e3:
ce:bd:18:06:49:69:57:8f:a8:8c:49:a2:88:37:0e:76:a1:51:
7a:fb:b3:e8:97:c2:39:e6:f8:a5:aa:a6:b0:74:e0:af:82:7b:
1b:96:2d:73:14:c7:3b:7e:cb:ce:ee:2e:60:04:a4:06:dc:68:
1d:7f:ec:3d:6f:15:7b:65:d6:67:6f:2b:74:2c:6b:4a:9a:0a:
bf:0e:df:33:d8:d4:e9:c3:56:9e:e5:bf:5d:55:92:08:a6:b3:
5e:aa:e5:3c:e0:1e:0b:23:91:42:23:30:d8:ec:e7:3b:f6:1b:
a1:95:24:5d:f0:a4:f0:32:33:ec:93:0d:11:f2:80:6a:c4:da:
57:0d:3d:b5:52:bb:75:f7:f9:b9:af:55:9e:ea:19:03:ea:bf:
75:56:0c:75:ef:23:05:58:ed:85:28:5f:ac:22:c3:57:3d:2b:
8e:2f:61:4b:25:01:3c:d4:4e:f5:f4:88:79:8d:5c:b2:c6:c1:
44:80:f9:0e:44:c4:e0:d4:f3:24:1c:0d:70:ea:e1:71:f1:29:
4f:f1:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:42:27 2026 by rpki-client