Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: xsbaoPE5BPjzt1gDvDu+gE3pBn8+lRB0USUAuUSm62w=
Subject key identifier: C2:F4:6C:DC:51:C9:E7:A0:BA:68:CF:57:3A:DC:4A:E9:F2:00:2C:FA
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019F8F7E453CD122B32F49C69C05D78B52F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1883
Signing time: Thu 23 Jul 2026 15:00:44 +0000
Manifest this update: Thu 23 Jul 2026 15:00:44 +0000
Manifest next update: Fri 24 Jul 2026 15:00:44 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: zvFIEWEvGzoOn5+dL4L3is04AasFmW49tQGb57MHDpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:45:3c:d1:22:b3:2f:49:c6:9c:05:d7:8b:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jul 23 15:00:44 2026 GMT
Not After : Jul 24 15:00:44 2026 GMT
Subject: CN=c2f46cdc51c9e7a0ba68cf573adc4ae9f2002cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:68:db:f0:d2:d0:3b:c5:64:a9:5b:a3:59:
ac:b9:5a:63:5b:1b:3d:25:08:a9:f3:91:6d:dd:ff:
65:eb:49:8b:6b:ca:d0:c4:ec:59:47:91:4d:c2:c4:
5a:fc:54:af:cf:c3:cb:c3:42:0b:85:46:f9:13:aa:
bc:a5:1e:45:bf:07:7c:23:a6:c5:81:13:4a:0b:1f:
18:0a:76:41:df:c5:24:2c:f3:06:92:b8:38:15:d5:
12:69:2b:b9:92:6a:9b:ff:45:a4:96:8c:26:37:c8:
d3:3e:6a:66:cb:02:00:e9:25:59:73:b6:34:d9:06:
7b:e6:83:3f:30:66:2e:c5:c5:35:b4:c9:00:ba:d1:
16:c8:ad:4e:08:fb:c6:bc:9f:01:6c:74:eb:e9:96:
1d:15:db:40:8b:07:82:c1:12:af:bd:4a:b6:d7:a2:
c8:bf:90:e6:8a:54:16:46:d9:a3:05:f4:88:18:15:
77:2c:f7:1f:0b:04:b4:33:04:f9:49:f7:22:f7:03:
e3:ed:37:93:c3:f8:f4:35:b9:ff:c8:2e:09:7d:11:
79:37:2b:b7:c6:8f:32:19:cc:b1:7f:97:e9:5a:ae:
cb:67:ea:9c:60:3a:eb:ce:00:b3:d7:e0:7c:29:01:
23:7f:ec:66:32:39:6a:4c:96:af:89:9e:a6:f1:34:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:6C:DC:51:C9:E7:A0:BA:68:CF:57:3A:DC:4A:E9:F2:00:2C:FA
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:08:47:42:ab:be:9b:d0:29:37:dd:ef:0a:a0:2d:eb:93:35:
3d:04:21:e2:10:15:d0:19:95:ef:a7:dc:c4:b7:77:5b:ac:e4:
d3:f4:5b:7e:51:e6:97:3f:45:45:40:f6:1c:95:ec:e6:4f:a0:
4a:62:f1:c3:d4:f7:a4:42:f1:0a:02:fa:be:8d:20:f5:84:38:
0c:d0:43:1b:0e:6d:4a:ce:fa:5b:8a:c1:a3:dd:cb:91:45:e3:
c1:81:d0:8b:c5:bf:2d:f4:84:5d:bf:41:f9:a9:4e:60:6a:60:
e7:6a:32:ba:a8:e1:bc:31:24:8e:fa:bb:ac:ce:b2:48:40:93:
3e:a9:7e:0b:2e:f6:b1:d3:fa:c1:83:cc:dd:85:be:a0:24:85:
3f:45:b2:cd:d4:86:dd:75:d6:cc:49:ab:f3:ce:e5:92:d1:01:
59:45:ae:15:86:e7:7e:36:7d:62:e1:8a:68:08:9e:2a:ea:13:
e5:12:5a:90:7f:85:fb:ef:ce:3b:e5:97:96:f5:1e:f0:32:f9:
64:5a:bf:6d:bd:c3:32:0c:f4:11:09:c7:8f:c4:de:a7:9e:df:
1e:26:92:93:9e:55:67:21:51:ad:cf:50:05:ea:b8:f4:7a:f4:
73:77:41:5a:34:e4:96:b9:49:32:6f:66:be:30:af:ad:5b:3f:
5f:7c:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:56 2026 by rpki-client