Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: Zl24vpp7MxSqW86ih8LOeL92yjsB6C/l9wFyXAqFK+0=
Subject key identifier: 08:A3:9A:D4:A3:CF:05:BA:CF:F6:F3:1F:A4:F3:4B:94:CA:D2:7B:8C
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019E3004D8294E7E0BA89431DB958B966658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 17CD
Signing time: Sat 16 May 2026 09:01:24 +0000
Manifest this update: Sat 16 May 2026 09:01:24 +0000
Manifest next update: Sun 17 May 2026 09:01:24 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: 5OwwjBOecB0O2Pz/8/Xm9CNDiRF/MsC5hMKLaDpxnkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:d8:29:4e:7e:0b:a8:94:31:db:95:8b:96:66:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: May 16 09:01:24 2026 GMT
Not After : May 17 09:01:24 2026 GMT
Subject: CN=08a39ad4a3cf05bacff6f31fa4f34b94cad27b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:d5:70:76:af:f9:09:84:2f:5b:67:67:a5:
9e:08:6a:0d:5f:2f:12:a5:cc:b2:cd:d2:e8:52:bd:
80:06:a2:11:a6:a4:06:4e:a1:cc:21:32:12:eb:f0:
43:5c:f1:87:f1:96:cf:58:8f:4d:bf:f2:e7:99:29:
d5:11:09:79:4a:e5:26:30:87:9e:34:92:02:00:77:
8f:30:c8:c3:4a:25:88:e7:c9:95:ee:2e:8d:0a:ef:
fd:d3:51:21:34:43:6a:6d:8e:00:47:e6:88:2b:5e:
91:59:69:57:78:d1:d4:43:be:fd:db:ae:09:67:eb:
b9:83:92:a9:d0:61:ed:db:f9:e2:80:5b:b4:6c:5e:
78:27:a9:21:cd:3b:06:5c:f0:50:5f:8b:36:d8:4d:
7a:24:fb:39:06:e3:85:b5:bd:bc:c6:ec:a2:8c:cf:
14:66:8d:80:a0:0b:d5:87:15:ba:81:d9:24:95:a7:
f6:69:9a:bb:7b:af:9f:eb:8c:a4:c9:2a:c5:a7:a5:
af:68:c5:7f:88:c2:00:2f:e0:68:c7:20:fa:4d:f7:
5e:b3:16:c7:12:fd:bf:64:01:9a:5b:9f:89:ab:71:
02:b3:28:34:32:b6:60:6f:b1:d1:0f:c9:94:51:51:
49:a6:ce:85:4b:cc:82:b1:de:5e:f2:ed:df:48:43:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:9A:D4:A3:CF:05:BA:CF:F6:F3:1F:A4:F3:4B:94:CA:D2:7B:8C
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:49:87:6c:2b:5c:63:f0:b1:09:d9:b3:95:51:87:30:da:4c:
e7:34:ff:bd:d5:a1:5d:a6:2b:d2:a5:61:9b:b1:b9:80:15:4e:
71:da:b1:6e:f3:87:0b:01:0c:02:1a:35:0b:19:f3:b8:62:28:
48:d2:b0:a9:82:3e:73:60:8a:35:c2:57:0d:f6:24:c9:4d:11:
47:08:db:4b:49:1e:6b:fb:1b:f1:fc:4b:38:eb:88:91:ad:ff:
57:ec:b5:32:57:59:e2:46:fc:53:dc:4c:a5:61:96:80:b8:21:
0f:5b:52:7c:8d:23:bf:eb:5d:89:89:a0:1a:e2:75:f7:8b:54:
d2:4b:0e:26:d7:f9:2e:dc:b8:7f:0f:5c:63:bb:27:f3:53:db:
52:e6:d3:b5:e8:fb:65:95:78:2c:b0:a8:0b:f0:56:c7:74:57:
f9:39:26:d2:b6:f9:da:c4:f7:be:26:82:0c:fe:bf:56:97:37:
1c:e6:fd:73:fd:bd:1c:b8:cf:c0:8b:0b:88:8c:65:07:a3:c5:
ed:f1:60:09:6a:c5:ec:1e:b4:33:10:e9:b3:ec:0d:23:e3:15:
a0:b3:28:6c:8c:de:df:1b:06:ed:07:a5:ec:ac:44:92:aa:00:
49:f0:6f:dc:6a:d2:5b:ef:7d:29:0a:79:50:58:87:c6:6d:14:
75:8d:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:45 2026 by rpki-client