Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: il/ulD5f3sTBrROdwphSz0s5DPWCwXgLEUR7R3+1ChI=
Subject key identifier: 71:FD:39:80:FB:BC:0C:DD:36:DC:63:A6:5E:AB:AB:C1:9D:9D:CB:79
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019F17F93786685C934939A952E833C232D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0DDB
Signing time: Tue 30 Jun 2026 10:00:36 +0000
Manifest this update: Tue 30 Jun 2026 10:00:36 +0000
Manifest next update: Wed 01 Jul 2026 10:00:36 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: 9zd0gK65Zwlk6nX/kZ+GE8VQFWIhC4DQ6qdfKIN1tTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:37:86:68:5c:93:49:39:a9:52:e8:33:c2:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jun 30 10:00:36 2026 GMT
Not After : Jul 1 10:00:36 2026 GMT
Subject: CN=71fd3980fbbc0cdd36dc63a65eababc19d9dcb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:0d:51:dc:e2:98:af:cd:cc:9b:ed:93:3b:
9a:f8:7f:aa:cd:2d:5e:70:97:c3:e4:8a:4e:6b:db:
8c:31:bc:fe:3e:bc:cf:c4:84:a8:6c:71:8c:47:9c:
b2:a8:cb:c5:fa:f6:f5:6b:b0:62:67:a4:65:1c:39:
6c:1b:a2:e7:97:4a:40:82:79:26:f5:98:69:2c:0f:
91:ef:e0:42:92:8c:3b:af:73:d1:b1:07:57:9c:05:
ce:41:af:7e:31:2b:1d:ea:af:c9:7a:48:de:e5:e7:
88:a9:19:8a:8a:3a:4c:aa:69:87:81:98:3e:6b:78:
0c:52:b6:22:09:69:28:d1:b0:df:9f:30:54:cf:d0:
ed:b3:09:e9:8d:61:41:7f:f7:36:bb:bb:94:1b:51:
0d:96:d8:4b:a1:51:99:34:e1:89:5f:77:6c:ff:e7:
76:d3:9d:9c:f7:20:a9:41:56:f1:eb:10:aa:92:27:
cf:e2:bd:18:df:32:01:ce:2c:f0:de:44:96:9c:79:
8f:7c:87:48:1b:ae:5c:18:44:af:55:02:e8:75:0b:
ec:50:1f:fb:d4:8a:3f:5d:67:12:37:ad:1b:e1:69:
98:4e:d6:e9:ee:00:ff:1d:69:54:9d:3b:c7:71:2b:
0f:e4:4b:4b:4f:ff:88:ac:fb:c4:05:33:68:90:ab:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:39:80:FB:BC:0C:DD:36:DC:63:A6:5E:AB:AB:C1:9D:9D:CB:79
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f3:91:c1:bd:dc:39:ff:13:66:29:52:89:29:3b:a2:6d:ac:
5a:63:8c:0f:34:cf:4c:30:6b:49:2f:b7:20:07:17:10:e3:f8:
e0:8e:ac:18:70:2f:54:99:e0:c6:c0:a1:ab:fd:ca:bd:02:23:
ac:b0:ae:a4:75:04:a7:0b:74:b4:ac:bb:dd:47:12:ba:02:51:
69:76:b7:07:82:2f:55:95:85:b1:7e:1c:07:12:6f:30:0f:cb:
b5:a5:79:1e:c5:5d:0c:cd:c8:4d:18:a1:c2:3c:4c:51:d0:b0:
9b:69:1a:be:7a:c1:6e:b8:5d:af:d9:16:75:87:29:99:72:3f:
20:f2:16:ee:cd:30:bf:df:b1:97:ba:c2:8a:60:31:72:91:c9:
a5:e8:a5:58:54:f0:30:a7:e5:71:d2:b7:1c:1b:05:eb:40:a8:
22:4f:78:f3:d1:06:dd:73:c3:f1:84:12:e7:20:d0:7b:3b:f1:
d3:27:34:1b:8e:b0:f6:6c:86:4d:ae:97:08:de:c9:e6:8a:d5:
2a:eb:1a:6b:ca:1b:5a:50:17:31:c1:9f:16:5c:eb:d0:dc:94:
04:1f:74:6f:b4:67:2f:b7:04:0c:eb:7d:61:70:4a:f2:f5:7a:
e0:19:1c:59:54:7e:e8:8e:01:de:26:94:23:e3:d4:74:81:31:
c8:98:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:06 2026 by rpki-client