Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: Z+sSeKjcjfKf3pYq3U01VCwgRYkWxQYAUX2kiDnOTzo=
Subject key identifier: D2:CC:60:99:C1:35:D1:27:E6:71:08:F7:9E:28:F9:40:B4:61:13:32
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019F1830CF69ECCFD1436B4CA838227BCF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 11:01:19 +0000
Manifest this update: Tue 30 Jun 2026 11:01:19 +0000
Manifest next update: Wed 01 Jul 2026 11:01:19 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: W1RJmVKKcXD244jU+MwggNPj2ZHjAl9SyMWAC3GtgoU=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:cf:69:ec:cf:d1:43:6b:4c:a8:38:22:7b:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jun 30 11:01:19 2026 GMT
Not After : Jul 1 11:01:19 2026 GMT
Subject: CN=d2cc6099c135d127e67108f79e28f940b4611332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:11:1d:0e:16:34:65:f3:2b:29:d5:3a:a8:
ab:83:fb:d6:53:b2:ae:0a:a4:89:68:3f:ef:49:b4:
d0:8c:69:04:52:dd:03:2c:46:cc:00:84:d4:f0:99:
31:ac:ab:f4:ee:f2:96:dc:6e:ba:19:00:33:5a:2d:
34:ba:15:0d:40:a6:c8:f1:5a:f4:ae:fe:8b:8a:eb:
c5:4d:0b:d8:3a:9f:ff:05:cc:50:3b:4f:f1:31:24:
81:d1:5f:4d:c7:2e:92:52:4d:65:31:ee:a1:50:4c:
b9:2f:ab:3b:df:f3:0e:cb:04:ed:05:09:e0:b1:b7:
9b:76:18:fc:ed:e9:ac:48:cb:c1:d4:16:a8:67:60:
8d:ca:7d:fd:cd:0d:6e:2e:88:1b:af:62:ca:cc:28:
e7:f2:9d:eb:28:15:5c:de:19:ab:86:cb:39:c5:10:
64:08:72:95:c0:c3:59:91:aa:08:b4:dc:05:82:0c:
fe:88:0f:79:da:55:04:33:a2:37:64:bc:34:55:40:
f8:59:56:5e:b4:a6:38:ca:94:46:c4:be:82:b0:b2:
b5:76:13:0d:06:51:c6:36:15:16:a3:bc:08:5d:88:
13:6d:fb:7b:15:1d:c5:53:33:b8:47:62:00:5e:fc:
18:a6:7b:0f:09:d2:e9:00:9f:21:e6:39:b7:b2:b8:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:60:99:C1:35:D1:27:E6:71:08:F7:9E:28:F9:40:B4:61:13:32
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:a6:6f:cc:14:c2:f5:b1:98:2b:92:6b:eb:fe:6a:1c:4b:
ac:42:54:89:1f:5f:0e:28:32:eb:a0:2a:52:1b:71:82:d1:9f:
0d:19:5b:05:87:af:3b:f1:d1:30:90:53:7b:0b:d3:2e:7d:e2:
98:96:35:c3:2a:fb:9d:e8:4a:1b:c3:da:78:bf:a6:5c:9a:3a:
81:93:ab:31:c3:32:4d:fb:77:45:ad:ab:aa:f5:3e:09:6f:04:
9d:11:9a:e9:ad:65:1d:22:72:c2:6d:57:d4:44:61:0f:6b:0e:
a1:77:6f:f2:40:3f:15:fb:06:3e:ea:da:91:96:c8:ed:12:4c:
c7:c5:97:ab:6c:15:79:d1:db:59:20:13:10:f8:bb:80:20:b3:
2a:7c:85:69:6e:9c:8e:c4:2d:12:7e:15:1f:3e:a4:97:da:46:
10:5b:b6:23:71:da:b3:f1:b5:0f:58:95:cb:f9:f4:c3:03:09:
6e:92:bd:00:bb:f4:3c:38:d9:37:53:78:2e:a2:51:77:ae:f4:
8c:a1:19:6d:bc:ef:f9:6a:e5:43:c9:cf:c7:ee:fa:a6:44:25:
5b:e2:5d:00:d2:a2:87:52:06:80:ec:ce:92:b3:21:e7:72:30:
a2:b8:37:5f:4f:39:5e:06:b5:ef:02:1b:2b:9c:c8:08:0a:80:
cd:fb:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:15 2026 by rpki-client