Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: xpT3HOmcctKHVd957OSZ2sIqeJBKISoLTm2u+c6hnqw=
Subject key identifier: F9:CA:A2:BC:94:32:C4:4C:0E:F6:5E:2E:37:7A:09:60:D2:99:6D:88
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01A0FAC5FFA5D42BB54D2B7A2450CF1F62C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0ED5
Signing time: Fri 02 Oct 2026 04:01:14 +0000
Manifest this update: Fri 02 Oct 2026 04:01:14 +0000
Manifest next update: Sat 03 Oct 2026 04:01:14 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: uU5BryMEzExKmXEVQhXlbAjrItYw++SfzQ+E1Nb1srE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:c5:ff:a5:d4:2b:b5:4d:2b:7a:24:50:cf:1f:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Oct 2 04:01:14 2026 GMT
Not After : Oct 3 04:01:14 2026 GMT
Subject: CN=f9caa2bc9432c44c0ef65e2e377a0960d2996d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:d1:a5:90:e4:ec:34:dc:b1:71:30:e1:06:
a8:4f:00:a5:f7:e1:28:d8:12:dd:66:2c:7e:9a:8e:
cf:28:89:a2:37:e6:af:64:ad:79:6e:c1:ae:48:9f:
98:b4:cf:97:88:bb:24:2f:75:9c:dd:25:24:5d:1e:
e9:9d:d4:9f:54:46:50:f9:ec:9d:0b:ee:cf:0c:98:
c4:d7:13:76:fa:91:d3:2e:be:db:bd:13:30:3d:3c:
ef:be:ef:1b:9e:6b:0d:43:ce:a0:6e:f4:3a:1a:fe:
d4:37:f8:fd:52:f8:9e:79:ac:17:21:41:4a:0b:0a:
43:25:ed:13:5b:9b:55:2a:49:6d:e4:2c:f4:ec:04:
35:14:b4:8f:a7:b6:7d:7a:26:f5:2e:7e:f3:47:2e:
7c:a5:92:08:1c:bb:1a:cc:93:7e:dc:c1:9c:e2:de:
55:7e:ce:dc:f4:9a:86:91:00:72:94:58:6e:35:e8:
f2:a5:96:bd:bf:86:49:77:4e:e5:b9:da:bf:4d:2b:
78:98:ea:16:b9:2e:b3:0b:6f:2e:91:20:9b:a8:6c:
eb:51:77:80:b1:79:ec:7e:4a:5c:b6:4b:b6:c8:af:
9d:8c:46:0e:46:9f:d0:09:76:53:67:9b:81:c0:19:
76:5f:c0:00:e6:50:08:6f:7d:54:c2:02:c1:d3:38:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:A2:BC:94:32:C4:4C:0E:F6:5E:2E:37:7A:09:60:D2:99:6D:88
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:46:bb:7e:d3:bd:23:cf:58:18:f3:b6:07:d9:e4:52:e5:
5d:0c:b2:d1:e1:6b:20:94:08:5f:4a:14:f1:e4:f0:b6:2f:de:
b6:c7:79:4a:b5:10:03:52:5f:f7:f5:b3:27:ef:b0:90:17:4e:
f8:54:cf:33:68:bd:a0:27:94:50:51:1a:ca:44:fd:62:92:c7:
ad:a1:fe:19:e7:e9:f6:01:04:c3:51:d8:8e:af:8d:92:90:2a:
ad:2a:01:7f:a5:54:5a:64:2e:1f:28:a1:e7:86:c2:95:f2:c5:
78:7b:9e:a4:d7:fc:dd:e9:7a:61:17:91:0d:f6:86:1c:a0:b7:
48:9e:1d:b9:cc:e0:f6:55:7c:46:fe:8b:0f:8b:2a:06:e9:38:
9a:5a:4c:94:e3:89:1f:7b:5c:09:36:67:8a:2f:cf:ed:a5:82:
4d:b9:dd:31:15:7c:e7:6c:87:ab:90:a7:80:8a:d2:a1:7d:e4:
4f:43:ee:86:f5:38:3a:f7:73:84:cd:b9:f0:25:3b:74:a5:bd:
86:8f:56:f4:15:18:94:87:f0:c3:6c:6b:5d:37:51:f4:61:a0:
5a:b6:2b:75:93:a3:2e:2c:a2:18:5e:20:99:43:c7:7f:7e:96:
fe:dc:79:e0:8a:26:de:d5:e2:e4:60:9c:2f:bd:28:34:c8:c1:
9c:1f:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:54:33 2026 by rpki-client