Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
File: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft (raw, json)
Hash identifier: Z4q5HD3xBBpF92RzC3WZkGcCh90SE0QuiwFFtTs2cak=
Subject key identifier: C8:CF:3E:95:98:BC:D9:40:16:7C:99:79:0F:33:AA:74:70:B7:84:BF
Authority key identifier: 42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17
Certificate issuer: /CN=42ea91e83aea0a647da82c5c13866cdfb6893917
Certificate serial: 589B4E12EAA6576D0FC116BF84F4367FBE6E75A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
Manifest number: 9E
Signing time: Sat 28 Mar 2026 05:07:12 +0000
Manifest this update: Sat 28 Mar 2026 05:02:12 +0000
Manifest next update: Sun 29 Mar 2026 07:35:12 +0000
Files and hashes: 1: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl (hash: VUn6d+vOpZxCpwsiuh6NXI4L+8M3+2RTVN8WNXRktEM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl
rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9b:4e:12:ea:a6:57:6d:0f:c1:16:bf:84:f4:36:7f:be:6e:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ea91e83aea0a647da82c5c13866cdfb6893917
Validity
Not Before: Mar 28 05:02:12 2026 GMT
Not After : Mar 29 07:35:12 2026 GMT
Subject: CN=C8CF3E9598BCD940167C99790F33AA7470B784BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:40:31:8f:b0:88:9e:bb:76:05:c4:2b:a1:
51:bf:36:6c:c6:99:7d:88:26:74:d7:da:b7:e1:09:
07:6b:fb:3a:ba:f2:c0:97:f3:da:85:42:9e:9a:e5:
20:c6:3a:a4:b8:de:de:33:f1:b8:08:6e:1e:f9:a7:
f4:42:70:ef:53:b0:77:3f:49:65:71:29:74:07:27:
95:09:1b:a0:e0:31:83:bb:3c:43:54:f5:60:af:73:
17:af:95:43:dc:28:16:3f:5c:6f:bf:5a:a6:d1:e0:
54:18:d0:66:4b:d2:2a:d3:1d:f5:72:f1:79:0e:27:
37:d3:f4:dd:af:38:67:d6:1b:d1:73:69:bd:62:f7:
bf:f0:e0:51:03:0e:f4:a5:1a:2e:d6:41:ba:db:d9:
66:7f:af:22:7f:44:04:eb:54:6e:c0:83:43:56:a4:
3e:fd:bc:78:54:a7:5c:bf:90:61:83:6e:3e:f9:32:
aa:4b:6d:8f:d2:70:77:0a:f6:4f:58:c5:81:56:fd:
c6:20:00:d5:e0:a8:66:e4:df:07:ee:4f:a4:9b:cb:
03:b3:65:fe:16:f0:04:c1:d1:20:7e:0e:e8:3f:0b:
40:a2:44:b8:19:84:a5:c5:e2:00:80:70:77:87:e6:
44:e2:ed:35:73:93:b3:de:51:f7:51:6c:7e:b1:9d:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:3E:95:98:BC:D9:40:16:7C:99:79:0F:33:AA:74:70:B7:84:BF
X509v3 Authority Key Identifier:
keyid:42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7f:26:8b:4f:cf:42:25:11:1e:ba:66:5e:11:d0:73:be:94:
3a:48:3f:3e:1b:4c:3e:cb:d1:98:5d:b4:8a:d7:fe:80:14:af:
4b:bd:2a:0c:3c:12:19:21:7e:39:35:26:06:d1:65:d0:a8:22:
51:ab:cb:ee:dc:9a:9f:7c:a4:56:35:52:a1:28:87:b0:c4:1f:
a2:0f:fb:a7:d1:49:e1:dc:b3:2f:44:b2:32:11:03:eb:79:d8:
d7:db:7a:1e:4b:fb:40:7a:ad:3c:04:52:ad:d4:77:01:50:7f:
0f:ae:84:8e:6d:4f:32:35:45:0b:40:05:0c:21:60:ec:8f:71:
33:6c:f8:d5:0b:18:ba:d5:1c:25:dd:94:86:b2:a5:9c:da:b5:
62:05:de:99:ae:b4:57:d2:85:41:22:3b:07:a0:10:4b:61:03:
13:1a:c9:04:7d:3e:64:a9:50:6a:72:43:25:a5:c9:1d:ff:3a:
bd:e6:a9:0c:38:72:50:72:d9:c3:13:c6:22:2f:98:3c:33:80:
b0:50:cd:9c:23:7b:d0:81:51:12:35:cf:38:d9:e5:3d:7f:de:
0f:02:6e:20:6e:8f:9a:34:2d:92:3f:3c:ca:a6:f5:6c:51:08:
2d:39:24:4e:c6:81:8f:f4:15:7a:8a:4c:2a:7d:c8:65:6d:e1:
6a:2e:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:55:06 2026 by rpki-client