Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: Oq8HN0x50NS6tFD6UfnzITNzaNVoQTRQbONZ+I69+sY=
Subject key identifier: AB:1E:EC:6C:F4:8B:C4:EE:30:58:0F:59:4C:1B:2E:23:E1:36:71:E8
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 01A13E26E8D59BE3AD1EC2D1E6480BBBE9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1962
Signing time: Thu 15 Oct 2026 06:01:39 +0000
Manifest this update: Thu 15 Oct 2026 06:01:39 +0000
Manifest next update: Fri 16 Oct 2026 06:01:39 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: IL1fDYJcuCfK6FlvqCVTAHukRYq66d8Jo3WBTkjaaKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:e8:d5:9b:e3:ad:1e:c2:d1:e6:48:0b:bb:e9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Oct 15 06:01:39 2026 GMT
Not After : Oct 16 06:01:39 2026 GMT
Subject: CN=ab1eec6cf48bc4ee30580f594c1b2e23e13671e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:7a:bb:a3:4b:67:5c:b3:57:0c:7c:61:f6:
fd:38:97:7f:da:53:8f:b5:4e:ef:2b:e4:83:62:58:
98:c2:fd:11:3f:c0:c1:ce:a4:71:a3:71:55:86:28:
73:ba:17:f4:8a:51:74:5e:bc:08:e5:84:b9:a2:1d:
eb:8f:34:09:26:26:f8:5b:6c:85:a2:08:9c:92:41:
7a:a7:21:91:c8:19:eb:ec:40:af:25:a0:a0:74:58:
1d:e7:2e:1f:7f:2e:91:e1:56:78:c1:f1:53:c3:52:
19:66:46:e5:10:a7:17:f4:7d:5e:04:a3:b7:ee:ca:
1a:7e:6d:05:3c:c6:24:ed:98:e7:12:62:33:be:fa:
f2:43:0b:21:f6:9f:5a:7f:40:08:38:ab:56:5e:7d:
6b:db:5c:a4:16:74:cd:50:ec:e5:8b:e9:5a:47:ec:
9b:58:3e:98:45:70:72:2e:eb:e1:aa:94:cb:7e:1e:
56:b0:57:5b:a8:de:48:c4:36:ec:13:fc:a2:7b:c8:
51:ea:f2:92:81:c3:27:18:1d:5e:da:35:3f:b7:41:
de:bc:5a:9d:1f:65:90:4e:9a:c4:b1:06:b0:99:31:
25:d1:21:9f:36:93:b5:2c:2f:64:24:da:09:2b:02:
6b:f8:aa:dd:fb:ef:c4:95:33:4c:a2:e8:9a:75:81:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:EC:6C:F4:8B:C4:EE:30:58:0F:59:4C:1B:2E:23:E1:36:71:E8
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:58:8f:c1:77:d6:c9:bc:6f:56:14:e0:75:87:5b:d3:4f:c8:
b9:b2:b5:85:d1:f7:13:a2:a9:a0:ee:cd:95:d0:0f:32:89:92:
7d:9b:9f:26:69:95:4b:e6:92:79:ea:56:66:48:50:eb:a5:5a:
b3:85:b6:25:9b:85:22:a1:45:4b:03:9a:b1:d3:d8:45:52:a7:
e0:15:3c:1a:2e:03:bd:ee:dd:cb:2d:bb:39:40:2c:49:76:90:
cd:31:99:d1:3b:e8:e0:3c:ba:ed:e5:40:d6:de:26:ef:2e:1e:
48:14:55:10:5e:49:ae:74:fd:05:75:85:62:be:db:85:57:2f:
a0:39:d3:c3:43:96:5b:51:f3:37:e0:8f:a6:bc:27:01:fa:be:
c4:cd:20:9e:59:29:49:fd:d0:02:fb:9a:08:a3:4e:f4:0f:2d:
30:46:46:ba:7b:d3:2e:70:44:c3:c3:da:a5:45:1d:72:b5:57:
84:d2:0b:74:f0:f7:e2:32:28:a4:aa:b7:b8:b0:16:42:33:c5:
27:e3:b9:a2:dc:49:3b:93:73:0a:c1:e1:72:4f:91:5b:05:e8:
b4:e0:5f:b5:b0:03:e6:bc:7d:f3:18:83:bf:96:f4:06:2c:db:
bb:11:c9:6b:ea:03:f6:e6:f7:8d:51:47:45:85:18:dd:0f:09:
b5:9a:8f:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JujVm+OtHsLR5kgLu+nwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0
NjU4NzAwHhcNMjYxMDE1MDYwMTM5WhcNMjYxMDE2MDYwMTM5WjAzMTEwLwYDVQQD
EyhhYjFlZWM2Y2Y0OGJjNGVlMzA1ODBmNTk0YzFiMmUyM2UxMzY3MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J96u6NLZ1yzVwx8Yfb9OJd/2lOP
tU7vK+SDYliYwv0RP8DBzqRxo3FVhihzuhf0ilF0XrwI5YS5oh3rjzQJJib4W2yF
ogickkF6pyGRyBnr7ECvJaCgdFgd5y4ffy6R4VZ4wfFTw1IZZkblEKcX9H1eBKO3
7soafm0FPMYk7ZjnEmIzvvryQwsh9p9af0AIOKtWXn1r21ykFnTNUOzli+laR+yb
WD6YRXByLuvhqpTLfh5WsFdbqN5IxDbsE/yie8hR6vKSgcMnGB1e2jU/t0HevFqd
H2WQTprEsQawmTEl0SGfNpO1LC9kJNoJKwJr+Krd++/ElTNMouiadYHFxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKse7Gz0i8TuMFgPWUwbLiPhNnHoMB8GA1UdIwQY
MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt
YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2
LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1iPwXfW
ybxvVhTgdYdb00/IubK1hdH3E6KpoO7NldAPMomSfZufJmmVS+aSeepWZkhQ66Va
s4W2JZuFIqFFSwOasdPYRVKn4BU8Gi4Dve7dyy27OUAsSXaQzTGZ0Tvo4Dy67eVA
1t4m7y4eSBRVEF5JrnT9BXWFYr7bhVcvoDnTw0OWW1HzN+CPprwnAfq+xM0gnlkp
Sf3QAvuaCKNO9A8tMEZGunvTLnBEw8PapUUdcrVXhNILdPD34jIopKq3uLAWQjPF
J+O5otxJO5NzCsHhck+RWwXotOBftbAD5rx98xiDv5b0BizbuxHJa+oD9ub3jVFH
RYUY3Q8JtZqPIg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:09 2026 by rpki-client