Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: 4wEaNvNa3+dGPOSfSwV4edaxNIGNmeX5ZKyEddcQScA=
Subject key identifier: 82:26:A8:FA:B3:69:00:D9:78:C4:85:33:F6:A8:12:85:68:FD:68:E8
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 01A0016EBEAC42AC4D8A97E6D8B956D8420E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 18BE
Signing time: Fri 14 Aug 2026 18:00:29 +0000
Manifest this update: Fri 14 Aug 2026 18:00:29 +0000
Manifest next update: Sat 15 Aug 2026 18:00:29 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: hhEmD5sNM89wvnuo4c7Frgk9PZRa6KoSYGiC+OWC9uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:be:ac:42:ac:4d:8a:97:e6:d8:b9:56:d8:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Aug 14 18:00:29 2026 GMT
Not After : Aug 15 18:00:29 2026 GMT
Subject: CN=8226a8fab36900d978c48533f6a8128568fd68e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:70:fb:0a:e0:40:fe:6a:c4:8c:41:e8:db:
01:87:69:63:b7:fc:70:29:35:a4:9e:f3:84:08:4e:
20:b5:74:93:cb:5e:8b:84:36:49:75:e5:b4:02:71:
61:a4:95:0a:40:eb:2e:ff:59:38:25:40:be:99:2f:
f8:0e:88:26:88:d4:68:36:aa:b7:e4:f4:56:3f:23:
e6:9b:d8:c6:55:ac:e7:6e:78:4f:45:67:f4:7c:c8:
85:8f:b6:13:0f:b3:e2:4b:b5:af:37:01:03:2c:6e:
ac:d5:c4:a8:b8:56:ac:84:7f:30:ac:5d:e3:ad:66:
44:cf:c2:b2:c1:6b:78:9c:02:d8:9b:8c:24:71:77:
d5:0e:23:6a:ec:ca:6e:e9:fb:7f:db:07:a8:57:de:
7e:f8:b6:a5:e9:37:0c:4f:0d:85:e7:0a:8c:d8:c3:
15:30:24:ad:69:0b:91:ca:0f:63:5b:a9:e3:41:cc:
9d:4e:f3:78:de:ea:a7:2d:c5:a1:05:7e:d1:65:68:
3f:ec:3e:3b:ce:71:37:da:f6:20:a7:8d:63:34:d0:
25:51:f7:51:11:90:cb:a1:9d:69:87:a0:20:40:02:
21:99:14:f0:5e:e1:4a:66:02:28:da:af:eb:11:c5:
51:7b:5d:b1:3f:9b:6b:28:54:4a:2e:d7:f9:70:33:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:26:A8:FA:B3:69:00:D9:78:C4:85:33:F6:A8:12:85:68:FD:68:E8
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:36:90:d4:9a:29:57:38:1d:66:6f:ea:46:5b:45:cc:66:90:
fd:2b:6f:2e:9f:e2:03:76:4f:61:aa:a4:7b:02:32:0f:8f:db:
a3:11:ab:94:3e:bf:97:71:2c:10:38:cf:d0:03:58:02:64:2c:
0c:6d:10:49:3e:f8:ea:6a:9d:bc:bf:45:ec:15:a8:58:39:99:
b2:80:2e:7f:4b:f1:20:dc:47:b6:f1:78:bb:72:8d:b8:29:06:
ae:0b:4f:c4:11:f7:5c:11:9f:fc:b7:7b:79:fb:39:65:2c:aa:
f6:5a:0d:c0:00:f3:13:08:91:87:f1:da:39:54:44:b3:1c:6a:
f8:8b:06:df:49:de:99:b9:1f:7d:c9:d1:9b:2e:4e:50:ad:26:
e5:5a:7c:72:ba:81:d9:88:fe:f8:ad:67:fe:8f:cc:fc:f4:4b:
06:4f:59:6f:00:64:ca:7c:af:4a:06:b9:a6:fd:a8:4a:d9:4f:
fe:93:12:f3:39:f5:43:2b:70:6a:8b:39:d6:9e:19:69:1f:61:
8d:cd:3f:2f:4b:f4:71:83:13:d2:5b:f5:3c:0c:34:05:5c:4d:
18:04:fc:69:35:77:69:d1:40:49:ab:aa:00:ed:da:a1:a7:90:
89:2a:d0:63:9a:fc:11:0c:25:73:c8:80:bf:8a:72:07:96:b3:
7b:c1:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:40 2026 by rpki-client