Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: foAZ+7QJnhsr1PILK/e7Elzv45WkrPnhzYN+25irYiM=
Subject key identifier: 37:B3:EA:BA:6F:96:F0:33:06:1A:1D:D2:39:34:F2:45:30:8A:5F:A4
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019D38D337A02F956B4E3BF6427A9EA3936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 174D
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: z85fmPZv1BHxImEgCSrjMWFzRNLIYZrttZnjayE/M3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:37:a0:2f:95:6b:4e:3b:f6:42:7a:9e:a3:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=37b3eaba6f96f033061a1dd23934f245308a5fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:0b:e1:0e:32:b0:f7:3b:de:fb:bf:9f:56:
a7:64:97:b8:04:fa:e2:39:3a:fe:d0:f8:b2:5f:b4:
a3:dd:0b:c5:5a:8e:e0:fa:13:f1:8c:8f:67:e9:19:
a2:f8:11:fc:a0:4a:53:5b:3f:f6:4a:08:0a:4d:2d:
bb:09:ae:12:91:c5:02:ee:a5:60:74:02:7d:41:69:
42:01:2a:54:61:28:cc:f3:cc:5d:ac:35:b4:77:1e:
6e:30:5e:07:db:57:b5:4f:d4:8d:69:79:37:44:3d:
49:c8:d3:35:4a:5b:52:2a:11:ca:41:2e:a0:12:20:
16:a3:bb:15:20:78:ea:5d:4c:29:d9:b2:14:cd:4e:
9e:67:79:c2:74:c7:f7:82:e6:0c:c2:bd:c5:15:80:
0b:c2:75:35:b2:87:a3:2f:12:9c:eb:fb:06:22:dc:
48:8e:b5:a2:38:a5:83:f3:af:24:6d:2f:66:bc:b4:
13:29:3f:15:70:71:38:c7:f0:95:56:9d:61:a8:c1:
e0:1e:ed:50:5a:52:f6:80:82:12:f3:87:0a:72:5a:
0f:25:0b:29:4e:a1:ef:a3:92:58:11:54:7d:7e:24:
62:81:f8:49:34:d2:f9:f4:c9:67:ec:d8:03:c3:c3:
2e:09:0a:e7:45:70:d6:1a:ef:54:83:4b:43:91:6d:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:EA:BA:6F:96:F0:33:06:1A:1D:D2:39:34:F2:45:30:8A:5F:A4
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:e6:a4:88:e9:31:34:48:d1:bd:1a:ba:73:b8:8b:51:72:
0c:b9:b5:6c:13:56:00:6d:25:21:fc:ad:bb:ae:6a:a0:d0:d2:
aa:9d:68:de:fa:e0:8e:52:61:a2:91:4d:84:ea:6d:51:77:85:
c1:f6:86:27:8b:1f:22:44:e5:4f:5b:2e:ee:e7:70:1b:28:51:
c2:85:6b:e7:9f:bf:0a:98:ce:43:3d:d0:fc:e1:f8:54:a1:f2:
a8:4e:d3:f9:ee:b6:47:8c:44:0e:f5:de:e3:50:1b:2f:fb:d2:
df:73:37:eb:4c:46:6b:c9:af:d7:cc:9c:18:6d:c8:e1:b3:1c:
5c:b7:0d:a4:38:6c:ea:e0:ef:27:b1:1a:f7:b3:c6:6f:7f:bf:
3f:b7:fe:af:c4:11:cf:19:f3:a3:ad:b2:51:a0:ec:c6:f4:fa:
b8:d5:83:3f:ff:8c:ef:f7:b7:45:df:34:74:34:1b:a6:99:36:
f1:cf:fd:98:19:e9:d8:3d:79:d5:0f:e8:85:a7:bf:d3:91:2e:
ce:f9:da:86:7d:1f:c1:f4:14:c5:69:f6:4c:62:25:3a:e5:ff:
75:c0:c9:1d:fa:e8:7a:33:b5:15:5b:22:04:3b:a9:e1:e4:9b:
7b:44:9d:3d:52:77:8f:29:17:18:18:5e:44:a4:89:18:cd:80:
c8:05:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:04 2026 by rpki-client