Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File: 42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier: WKfVQHfS/C6vCNg1XAWy+Jqycr0MrOVZ/cbj6GbFGtI=
Subject key identifier: 94:52:D5:89:B3:77:09:24:5B:B2:32:4C:7E:44:13:E3:05:1E:90:52
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer: /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial: 04A41F494EC8E27BED8FDAD8D6648004F1CDD912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number: 21
Signing time: Tue 12 May 2026 15:25:35 +0000
Manifest this update: Tue 12 May 2026 15:20:35 +0000
Manifest next update: Wed 13 May 2026 15:54:35 +0000
Files and hashes: 1: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: sPc82Mt9lX84bmzcemTZv/1Ok1a+VCxv95thZ7/uAXU=)
2: AS205941.asa (hash: KnHD+PETxACMy5dzP4DPSm9wPvguxoY0r6N7X+N1Klc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a4:1f:49:4e:c8:e2:7b:ed:8f:da:d8:d6:64:80:04:f1:cd:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Validity
Not Before: May 12 15:20:35 2026 GMT
Not After : May 13 15:54:35 2026 GMT
Subject: CN=9452D589B37709245BB2324C7E4413E3051E9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:bb:bc:71:e2:9d:75:3b:21:94:47:f9:50:
76:5f:c8:41:ad:ea:58:b6:d3:cf:87:3a:ad:97:83:
e0:bf:14:d4:42:0c:d0:6b:ee:02:0a:0d:7b:5b:81:
c3:0e:8e:ee:23:d0:27:25:b8:de:41:d7:b5:d9:1c:
44:98:85:82:3d:f0:09:09:72:49:c9:2e:e5:54:e5:
b2:b8:cc:73:7c:20:7b:75:da:1e:24:31:b4:aa:b6:
e4:83:b4:51:4f:41:3f:ce:c6:43:85:cc:af:7c:b9:
af:a4:fe:5d:42:92:6a:8c:6f:ab:83:d4:0c:dd:f7:
85:83:36:82:17:f9:bb:90:a2:cd:8b:48:d7:4f:17:
1d:de:f9:79:a6:a6:a8:8c:5d:77:c7:1a:19:56:9a:
36:73:0d:e8:d4:f2:4e:2e:a5:c2:46:0c:db:ae:c0:
89:8f:6d:f7:32:91:8f:02:2c:4b:e4:f9:85:c2:7a:
7f:19:1e:77:1b:db:74:5b:b4:fa:40:77:70:9b:76:
b7:67:7f:0c:b2:15:1c:8a:7b:12:67:73:b1:4c:4d:
17:1a:43:ea:ab:43:34:2d:b1:0e:ef:6a:d5:0b:4f:
5f:7a:ea:f2:72:12:fc:fc:68:fa:13:1a:df:61:f9:
3f:bb:6a:c2:55:86:70:29:bb:9a:2f:98:34:d8:83:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:D5:89:B3:77:09:24:5B:B2:32:4C:7E:44:13:E3:05:1E:90:52
X509v3 Authority Key Identifier:
keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:56:1f:97:e8:1a:8e:d7:2d:4a:82:76:92:35:1b:f3:82:a6:
24:9b:b0:c9:7f:cb:d8:b5:ee:e3:5c:78:0a:ce:19:3e:16:c5:
83:cd:ca:68:95:3b:e5:8c:32:e7:98:ab:9a:30:ea:97:80:f3:
cd:6a:9b:03:aa:ae:a4:fc:ee:33:58:b5:a3:ea:ed:29:e4:16:
76:02:2e:1c:ce:23:e2:c3:5c:2a:b2:49:74:af:cc:ca:f9:59:
a2:8d:3d:55:86:41:cf:f1:4c:9f:ae:89:58:b8:c8:3b:13:89:
71:d3:ec:46:38:dc:45:27:28:00:1e:9a:df:b3:0a:e4:30:f7:
5e:7c:bc:b3:3b:41:16:64:23:8f:ba:8d:88:f3:76:bd:6d:6a:
1b:26:41:dc:c6:b5:c3:fc:56:0e:2c:30:30:0c:87:90:4a:34:
6a:24:bc:07:49:1a:59:fa:14:3e:56:52:97:ba:00:f6:63:69:
d8:cf:4e:01:60:f7:14:c7:e8:70:43:53:13:f6:ad:7f:69:37:
51:d3:c3:88:41:3d:f4:6d:e8:35:67:2c:10:63:db:af:25:f8:
86:15:48:da:f2:20:4f:37:b8:4b:2b:1f:72:06:4d:d6:97:a3:
da:c5:80:51:33:5b:a2:f7:71:c0:64:c3:a2:32:9a:10:1b:fd:
ee:84:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:49 2026 by rpki-client