
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
File: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft (raw, json)
Hash identifier: 4BWzH7q8lUAuuxk1kzhevRn+7Ly49zJ+BCUsFnXoB6c=
Subject key identifier: 45:C4:5F:3A:00:10:9B:BD:B3:AB:0A:B3:45:87:82:73:50:13:0B:8D
Authority key identifier: E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
Certificate issuer: /CN=e360387485e8cf7958cec936357502ff46657319
Certificate serial: 019F916C8B6E7669629CA2D36B762492C2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:37 +0000
Manifest this update: Fri 24 Jul 2026 00:00:37 +0000
Manifest next update: Sat 25 Jul 2026 00:00:37 +0000
Files and hashes: 1: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl (hash: 51PlQtICR91dG27aWduBbAZyDR9CaNuzNVTYMztQeQA=)
2: E49_PkP793V5I4YZCHvag_165PI.roa (hash: UXhuh1q1LOISHVBMZXe7sQENj99zD9a6dTROADJKZCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:8b:6e:76:69:62:9c:a2:d3:6b:76:24:92:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e360387485e8cf7958cec936357502ff46657319
Validity
Not Before: Jul 24 00:00:37 2026 GMT
Not After : Jul 25 00:00:37 2026 GMT
Subject: CN=45c45f3a00109bbdb3ab0ab34587827350130b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:65:9f:78:1f:b8:e2:d3:cb:c6:45:1d:fc:
f8:00:f3:1b:7b:a0:e4:44:8c:bc:52:a3:cf:58:93:
73:23:6a:f1:e6:f7:b4:24:a5:8f:74:f3:9d:00:c1:
aa:f9:ec:f3:d3:66:f4:e4:cb:33:ea:2a:9e:ca:2d:
1b:a9:85:0f:1c:b9:99:88:d9:a9:92:ac:af:88:6b:
a1:a6:ab:42:fb:46:f5:70:73:48:b6:f3:51:77:96:
3e:0b:95:a0:af:23:25:20:60:3d:a6:00:9f:f8:7f:
a7:89:6f:a2:21:ff:ce:c2:fc:55:0e:f3:cc:4b:bd:
28:61:2b:e7:ec:db:1d:0c:88:8a:72:a4:d4:d9:39:
0c:cb:bd:99:c2:71:15:64:e0:3a:1d:af:a7:f9:b7:
68:18:93:60:47:45:9a:0c:8e:d1:88:2f:0d:76:6f:
21:b0:0f:01:9c:f8:73:b5:42:29:90:06:70:15:4f:
ba:da:c3:c7:2f:1d:59:b1:34:f6:ae:3e:d1:6f:6d:
88:d7:f9:b0:c0:70:b5:1c:75:46:ad:6f:00:f6:b0:
de:71:38:2a:47:3c:ac:3f:70:56:a8:61:aa:25:b2:
1b:a0:ba:e0:3a:3f:b9:f5:ca:b1:94:59:ae:03:f5:
45:01:17:63:ed:c9:19:fe:4b:d0:c8:47:39:94:3d:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C4:5F:3A:00:10:9B:BD:B3:AB:0A:B3:45:87:82:73:50:13:0B:8D
X509v3 Authority Key Identifier:
keyid:E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:81:c9:d8:fe:dd:1d:57:c0:79:9f:26:5a:00:39:8c:0f:fd:
b5:ec:7a:9e:ef:3a:d6:55:89:16:03:03:e8:cb:50:33:8f:ec:
d9:dd:15:63:4f:c3:5e:87:12:8c:4b:24:da:84:00:0e:ff:ac:
9f:9f:35:61:86:9b:e0:5a:fd:a5:49:a2:9e:d5:01:21:21:c8:
a5:ed:eb:a0:b7:98:81:8a:9d:99:e1:fd:59:8d:ac:ee:6f:08:
3c:2b:35:d3:11:2e:3f:a5:4d:ca:86:ec:f0:fe:b0:54:92:50:
5d:b3:78:15:da:18:a4:fd:48:9a:e7:d5:7f:ba:dd:14:a4:4e:
8e:e7:c1:c9:37:bf:43:e7:46:4a:a2:d1:fc:df:25:b0:b0:24:
a1:a1:ff:fb:5e:f5:9f:1d:90:d2:0a:a2:55:7a:23:9e:a8:d8:
b2:de:0f:43:cf:0f:84:ca:64:7b:2d:34:69:e4:31:95:67:c1:
7f:e4:37:d1:88:94:a5:7e:7c:97:bc:ce:2b:cf:cd:d6:bb:0c:
aa:a7:70:69:e6:f5:f6:3c:21:98:ef:08:e8:10:f2:ac:62:69:
8b:b4:d7:08:71:40:cb:57:d6:ab:1d:2d:91:59:dd:5e:2a:99:
07:55:61:cd:4c:e2:e1:f6:5e:5e:37:f6:f8:b9:75:30:d1:c9:
fd:18:db:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbItudmlinKLTa3YkksLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjAzODc0ODVlOGNmNzk1OGNlYzkzNjM1NzUwMmZmNDY2
NTczMTkwHhcNMjYwNzI0MDAwMDM3WhcNMjYwNzI1MDAwMDM3WjAzMTEwLwYDVQQD
Eyg0NWM0NWYzYTAwMTA5YmJkYjNhYjBhYjM0NTg3ODI3MzUwMTMwYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHdln3gfuOLTy8ZFHfz4APMbe6Dk
RIy8UqPPWJNzI2rx5ve0JKWPdPOdAMGq+ezz02b05Msz6iqeyi0bqYUPHLmZiNmp
kqyviGuhpqtC+0b1cHNItvNRd5Y+C5WgryMlIGA9pgCf+H+niW+iIf/OwvxVDvPM
S70oYSvn7NsdDIiKcqTU2TkMy72ZwnEVZOA6Ha+n+bdoGJNgR0WaDI7RiC8Ndm8h
sA8BnPhztUIpkAZwFU+62sPHLx1ZsTT2rj7Rb22I1/mwwHC1HHVGrW8A9rDecTgq
RzysP3BWqGGqJbIboLrgOj+59cqxlFmuA/VFARdj7ckZ/kvQyEc5lD0iXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXEXzoAEJu9s6sKs0WHgnNQEwuNMB8GA1UdIwQY
MBaAFONgOHSF6M95WM7JNjV1Av9GZXMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt
NmExN2UyMWNhNmM3LzEvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3
LzEvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYHJ2P7d
HVfAeZ8mWgA5jA/9tex6nu861lWJFgMD6MtQM4/s2d0VY0/DXocSjEsk2oQADv+s
n581YYab4Fr9pUmintUBISHIpe3roLeYgYqdmeH9WY2s7m8IPCs10xEuP6VNyobs
8P6wVJJQXbN4FdoYpP1ImufVf7rdFKROjufByTe/Q+dGSqLR/N8lsLAkoaH/+171
nx2Q0gqiVXojnqjYst4PQ88PhMpkey00aeQxlWfBf+Q30YiUpX58l7zOK8/N1rsM
qqdwaeb19jwhmO8I6BDyrGJpi7TXCHFAy1fWqx0tkVndXiqZB1VhzUzi4fZeXjf2
+Ll1MNHJ/RjbWg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:58 2026 by rpki-client