Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: F29HvqiETBdqiDcKJXQAMYqirHAMTiUL2k4p1ve8OHM=
Subject key identifier: 27:64:DC:59:21:89:B3:CA:4C:7F:D0:1E:60:78:83:88:F6:92:61:5B
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019CE5FF9B40A15F4CA13EA112205F922B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0CB8
Signing time: Fri 13 Mar 2026 07:00:59 +0000
Manifest this update: Fri 13 Mar 2026 07:00:59 +0000
Manifest next update: Sat 14 Mar 2026 07:00:59 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: T+dgG3j2CSzTjJPQqTSJWvHJ6pjo45i68GqIIOz9ykA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:9b:40:a1:5f:4c:a1:3e:a1:12:20:5f:92:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Mar 13 07:00:59 2026 GMT
Not After : Mar 14 07:00:59 2026 GMT
Subject: CN=2764dc592189b3ca4c7fd01e60788388f692615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:3e:04:ee:bb:af:97:3d:21:0c:00:96:31:
f2:c1:df:3d:b3:a5:f3:ee:d8:0f:91:93:87:30:65:
62:df:47:4c:69:11:fd:ad:bb:1b:9f:cc:06:4e:25:
e8:80:a9:d3:d3:85:0b:a8:94:0e:fd:6f:82:27:f7:
13:fa:b9:ae:fd:09:bb:ec:07:c1:63:9f:59:7c:83:
86:72:32:be:5b:d1:c0:ec:12:38:17:ae:19:6f:0e:
e4:db:77:3d:a6:e8:86:4f:42:04:28:42:6b:49:4f:
82:25:fc:2a:49:81:3e:7a:f4:c1:33:6c:21:d9:e6:
a0:e8:6b:d7:4d:e6:59:62:60:cc:9d:72:df:9b:56:
97:ce:4d:4e:0f:b8:83:c5:1c:d3:17:ed:ce:9f:e6:
9c:0b:ab:08:ea:8c:54:71:ec:0e:ac:ee:c5:09:10:
5f:c2:3a:93:6c:4a:68:e5:49:d8:11:16:42:a7:f5:
65:f0:ca:eb:bd:82:aa:68:9a:34:e5:de:02:d9:4e:
9f:be:79:6c:3d:e6:f2:eb:b4:5a:71:7e:82:78:9f:
8f:63:66:c8:d4:eb:6d:9f:32:33:c7:00:30:41:8a:
d1:9a:f0:71:9c:d2:73:d0:88:8e:0a:ae:e0:62:e0:
b9:e1:17:38:0d:5d:8e:7d:c4:1b:31:7e:a3:db:5b:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:DC:59:21:89:B3:CA:4C:7F:D0:1E:60:78:83:88:F6:92:61:5B
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:47:e8:81:c7:41:9c:d1:8f:30:31:db:5f:58:03:24:bd:
11:d7:18:c0:2e:73:db:db:bd:c0:e0:37:6f:98:bf:82:2e:3b:
10:06:8f:eb:c3:16:7a:91:b3:81:ee:56:5a:9b:6a:66:e4:23:
48:23:5e:8f:91:18:df:a5:fa:7f:9c:0c:61:bd:17:16:1c:fa:
b3:6d:fc:e2:8f:5f:f0:ed:ba:c4:64:50:1c:c8:63:73:c5:6a:
61:8c:fc:e4:29:77:17:de:aa:69:d1:77:c1:d8:93:dd:35:31:
fb:79:12:a0:06:41:25:3c:3f:2d:df:e5:68:a8:95:4b:86:00:
9a:97:73:56:bc:34:7c:70:eb:77:d1:eb:a3:5c:1b:b2:8b:b0:
b5:7e:d8:ad:52:e9:c5:83:b7:b4:62:e9:9e:bd:b3:86:cf:0d:
b7:32:a0:c4:0a:1f:d7:a5:92:4b:41:99:23:22:de:c1:46:7b:
61:a5:c4:fb:10:d8:c4:fc:5d:d7:99:57:85:be:1e:76:61:6d:
4d:15:b3:0f:82:01:2a:95:de:97:b2:94:3a:49:9c:ab:4c:94:
1e:a2:48:07:bf:0d:e3:75:3e:7a:76:b1:00:4c:5c:25:39:25:
c6:78:d4:bb:e5:8d:77:3c:12:9e:b8:b8:39:0e:92:22:06:47:
c4:44:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:29 2026 by rpki-client