Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File: 42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier: yuoesOrBx6yAmoeP+gdbk8hpxsARJ12dM0UPpJ0GXVQ=
Subject key identifier: BB:10:1B:28:81:40:D2:3B:C7:75:E4:E3:C0:36:A7:E7:37:A0:D5:D0
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer: /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial: 0262F275E4EE4EFB8B03D8BA8100C75EE64C28F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number: 0122
Signing time: Sun 25 Oct 2026 18:18:48 +0000
Manifest this update: Sun 25 Oct 2026 18:13:48 +0000
Manifest next update: Mon 26 Oct 2026 19:50:48 +0000
Files and hashes: 1: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: yKl61cIV3nlG6ah1Lc2hTkRELvFFaPxhFnTzOwTIWjM=)
2: AS205941.asa (hash: 0pQn6Y7wqcBy95vSLWTQiJLfGKcAjyBJZODPAACcWcE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:62:f2:75:e4:ee:4e:fb:8b:03:d8:ba:81:00:c7:5e:e6:4c:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Validity
Not Before: Oct 25 18:13:48 2026 GMT
Not After : Oct 26 19:50:48 2026 GMT
Subject: CN=BB101B288140D23BC775E4E3C036A7E737A0D5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:11:4f:d7:96:c1:98:19:8e:8e:ea:ac:fd:
b7:09:77:fa:c2:49:da:4d:ec:e9:57:35:3d:c0:55:
73:38:2a:dd:58:c8:1a:61:b6:e1:20:7e:0f:2b:65:
af:c6:60:49:03:7c:35:99:1b:9d:74:9c:6f:d0:50:
0d:ad:c7:b7:d3:69:09:15:30:d6:55:8b:ee:37:24:
82:46:95:31:57:19:cf:92:95:50:8f:18:ae:24:85:
79:f5:b7:9b:15:04:71:b0:1f:0c:13:ae:78:6e:32:
dc:69:c3:05:59:db:43:7a:a4:82:6a:6b:0b:14:f0:
19:d8:6b:39:52:53:f0:2f:c7:e8:29:53:b2:1c:bd:
47:a2:79:85:fc:9c:f2:e6:2e:29:76:4e:83:e7:74:
f1:b8:25:54:8e:20:50:0a:4d:fd:4c:5a:82:c5:81:
af:8b:4c:0b:8e:f9:5d:fa:b2:a3:33:53:1b:f1:05:
12:c7:c6:4a:17:62:6f:71:61:fb:81:8b:be:9c:9e:
4b:36:2e:06:26:c1:0b:3d:96:31:ce:f2:64:b2:59:
fa:1b:2f:33:db:e3:fc:83:de:20:bb:83:aa:74:b8:
91:11:23:e6:6f:31:f6:64:76:f3:51:bc:c5:d0:7f:
9e:59:32:d9:be:7e:b5:a1:c8:b0:d0:87:50:77:e8:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:1B:28:81:40:D2:3B:C7:75:E4:E3:C0:36:A7:E7:37:A0:D5:D0
X509v3 Authority Key Identifier:
keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:ea:e9:96:c5:7d:ba:04:2f:3f:95:f6:97:89:63:30:c2:
93:f4:5d:d7:bb:8b:3b:a9:42:d1:6b:90:19:09:5c:73:80:60:
9d:12:ae:e3:16:47:c3:64:87:ca:47:5b:29:d0:7f:e4:13:71:
16:29:a7:b9:7c:a4:7c:44:78:70:c1:ab:7e:1d:99:a8:54:0a:
1f:81:8e:3a:5b:0e:f3:46:69:f7:81:a6:3d:e0:30:c8:78:87:
65:98:8d:a0:86:87:c5:52:f3:19:77:f1:e9:35:ec:7a:53:0b:
35:79:eb:b7:4c:1f:a6:b5:d4:e5:4e:2f:32:ee:9c:76:b4:42:
7b:52:83:25:55:1f:1e:b7:53:c3:0e:ce:9c:8f:e5:d7:15:ea:
69:ac:48:91:98:22:2b:aa:96:6c:9b:a5:c6:8c:2a:fb:db:e0:
ce:38:53:ad:19:15:de:4e:3c:a4:f7:30:19:37:31:1c:f7:fa:
c6:10:ef:c4:f0:b3:3b:2f:61:f4:2e:56:30:d5:c6:bf:95:3c:
8d:c9:b0:51:5e:ea:94:23:fc:4d:e9:05:f6:9b:73:a5:ac:2b:
72:18:70:4b:26:2b:e6:71:b8:72:b9:8f:ca:bd:f9:9a:fd:ef:
ec:06:f6:e5:12:04:c8:c3:c4:84:ec:f2:13:93:7b:e4:89:4d:
1b:ce:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:48:35 2026 by rpki-client