Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
File: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft (raw, json)
Hash identifier: dNGK0f92pIgdnwyXPi1zepH11UqWB6oGj/eRRKimQe0=
Subject key identifier: F9:3A:91:F2:01:A6:BA:4F:9C:15:F9:69:2C:32:4D:4B:7D:81:77:B3
Authority key identifier: E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
Certificate issuer: /CN=e360387485e8cf7958cec936357502ff46657319
Certificate serial: 01A0D9BBA52759A1B3F37124F9837D9B0CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:28 +0000
Manifest this update: Fri 25 Sep 2026 18:02:28 +0000
Manifest next update: Sat 26 Sep 2026 18:02:28 +0000
Files and hashes: 1: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl (hash: JHUbm1RdQ68PQqeNzGp38WfIiTj6PRc2PCchLmRqiW4=)
2: E49_PkP793V5I4YZCHvag_165PI.roa (hash: UXhuh1q1LOISHVBMZXe7sQENj99zD9a6dTROADJKZCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:a5:27:59:a1:b3:f3:71:24:f9:83:7d:9b:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e360387485e8cf7958cec936357502ff46657319
Validity
Not Before: Sep 25 18:02:28 2026 GMT
Not After : Sep 26 18:02:28 2026 GMT
Subject: CN=f93a91f201a6ba4f9c15f9692c324d4b7d8177b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:10:25:99:fe:21:90:ae:5f:99:2d:d3:77:
ff:22:f1:a8:b9:32:fe:0c:74:69:b6:e8:4a:16:32:
17:09:8f:0e:b7:24:4c:3a:9e:52:a3:ad:55:76:27:
bc:84:8f:7f:8b:ae:ea:51:15:87:e8:3c:f2:b0:43:
7c:dc:1b:09:7c:f1:59:6b:85:4b:18:09:ac:14:ff:
76:1f:7a:d6:be:ef:38:d4:25:e3:9d:32:46:31:06:
e2:95:b0:23:17:2f:67:fa:8c:f3:12:cd:e0:e5:c8:
19:d2:5e:2c:86:ca:82:4d:46:5f:49:62:b0:f6:7e:
75:6e:ea:5d:b6:73:7b:e3:4c:62:50:cc:57:fc:65:
28:af:d4:55:11:6f:13:90:f6:92:4b:0c:44:8f:b3:
16:7e:d1:e9:ea:21:6c:ad:3f:cb:0d:ec:8c:bc:b6:
cb:f0:a7:f6:ce:64:e5:11:c1:22:02:0c:5d:a4:a1:
92:a0:36:58:dd:a4:b6:86:4c:5b:d3:17:43:39:52:
e5:0e:0d:81:b0:ec:cf:2b:f0:75:4b:80:eb:3a:76:
66:8e:dd:17:96:21:94:a4:58:4d:52:29:68:11:a6:
07:be:ee:c1:b5:7e:bd:b4:64:11:2f:3e:14:56:80:
ef:61:e0:74:a1:f3:b0:1e:25:0d:82:eb:c3:03:ba:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:91:F2:01:A6:BA:4F:9C:15:F9:69:2C:32:4D:4B:7D:81:77:B3
X509v3 Authority Key Identifier:
keyid:E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:eb:23:09:2a:ec:c2:55:51:e1:f5:64:f0:13:f3:85:c2:6f:
fd:93:fe:45:14:c2:03:69:90:0d:49:aa:03:8f:dd:31:a9:7d:
3a:78:69:90:62:a7:6c:c2:10:98:a8:d5:46:72:f1:a5:31:8a:
f8:f8:c3:2b:9d:fd:34:4e:0c:50:ba:7c:1a:86:28:52:a6:ab:
d7:56:bb:85:3c:cc:42:80:1d:e6:1c:e3:d1:1a:59:1e:d5:48:
76:81:d9:c9:31:6e:7e:9b:3f:29:46:1b:c7:57:50:2f:ac:58:
10:49:5e:5b:b3:bc:30:ab:f8:3a:df:9d:5c:d3:89:1d:7e:1c:
5d:1d:df:e3:e6:be:0e:be:26:ea:e8:81:fa:d0:ca:20:09:1e:
f5:f8:1d:ca:77:23:8c:ea:67:81:7d:86:0b:55:e9:bd:83:d8:
42:71:ae:50:06:02:7a:ac:fe:19:d1:9f:2d:97:0a:89:49:56:
14:cd:bf:f8:be:00:7d:23:7d:42:f4:c2:d9:80:d4:24:6a:6e:
28:36:ca:39:5e:0a:5b:75:79:1e:42:e5:7a:f1:3b:46:88:94:
2f:dc:36:e8:08:2b:22:06:8f:08:b7:a0:4b:f9:bc:f5:6b:54:
cd:57:8e:bc:43:27:09:99:ac:0f:4e:37:82:b3:69:65:bf:89:
8e:b3:df:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu6UnWaGz83Ek+YN9mwzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjAzODc0ODVlOGNmNzk1OGNlYzkzNjM1NzUwMmZmNDY2
NTczMTkwHhcNMjYwOTI1MTgwMjI4WhcNMjYwOTI2MTgwMjI4WjAzMTEwLwYDVQQD
EyhmOTNhOTFmMjAxYTZiYTRmOWMxNWY5NjkyYzMyNGQ0YjdkODE3N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiEQJZn+IZCuX5kt03f/IvGouTL+
DHRptuhKFjIXCY8OtyRMOp5So61Vdie8hI9/i67qURWH6DzysEN83BsJfPFZa4VL
GAmsFP92H3rWvu841CXjnTJGMQbilbAjFy9n+ozzEs3g5cgZ0l4shsqCTUZfSWKw
9n51bupdtnN740xiUMxX/GUor9RVEW8TkPaSSwxEj7MWftHp6iFsrT/LDeyMvLbL
8Kf2zmTlEcEiAgxdpKGSoDZY3aS2hkxb0xdDOVLlDg2BsOzPK/B1S4DrOnZmjt0X
liGUpFhNUiloEaYHvu7BtX69tGQRLz4UVoDvYeB0ofOwHiUNguvDA7oXUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk6kfIBprpPnBX5aSwyTUt9gXezMB8GA1UdIwQY
MBaAFONgOHSF6M95WM7JNjV1Av9GZXMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt
NmExN2UyMWNhNmM3LzEvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3
LzEvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOsjCSrs
wlVR4fVk8BPzhcJv/ZP+RRTCA2mQDUmqA4/dMal9OnhpkGKnbMIQmKjVRnLxpTGK
+PjDK539NE4MULp8GoYoUqar11a7hTzMQoAd5hzj0RpZHtVIdoHZyTFufps/KUYb
x1dQL6xYEEleW7O8MKv4Ot+dXNOJHX4cXR3f4+a+Dr4m6uiB+tDKIAke9fgdyncj
jOpngX2GC1XpvYPYQnGuUAYCeqz+GdGfLZcKiUlWFM2/+L4AfSN9QvTC2YDUJGpu
KDbKOV4KW3V5HkLlevE7RoiUL9w26AgrIgaPCLegS/m89WtUzVeOvEMnCZmsD043
grNpZb+JjrPfcQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:34 2026 by rpki-client