Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: /Loz9xk0/4WZmzmCJKUlXiwHMgX8Dl/cxGAVfGp5gg4=
Subject key identifier: BE:BC:D4:7B:5D:58:BD:3C:03:2C:4A:1F:8C:84:9F:82:DA:62:60:10
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019F17C24068E8BF44F7D12AC6869ED4F5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1845
Signing time: Tue 30 Jun 2026 09:00:34 +0000
Manifest this update: Tue 30 Jun 2026 09:00:34 +0000
Manifest next update: Wed 01 Jul 2026 09:00:34 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: QEHfWyuKIR0D8CW/wNAa4/2PEaczY5eJDLvPSQzsw80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:40:68:e8:bf:44:f7:d1:2a:c6:86:9e:d4:f5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jun 30 09:00:34 2026 GMT
Not After : Jul 1 09:00:34 2026 GMT
Subject: CN=bebcd47b5d58bd3c032c4a1f8c849f82da626010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:32:80:fc:18:25:5a:cd:0c:ce:8e:c7:de:
61:41:59:86:0f:6f:2b:99:df:68:d9:0e:93:6b:da:
a8:9d:b2:e2:1d:67:80:eb:1e:96:b8:a0:f3:be:28:
94:4d:e7:55:d3:0b:9f:55:d1:47:3d:1f:f9:9f:79:
b3:fe:37:04:6d:67:0d:50:4a:23:10:10:de:60:4b:
e7:0a:97:74:2e:fe:e4:86:9b:7a:16:a4:2c:9d:19:
d9:13:80:6d:8f:8e:b3:bd:3e:a3:77:79:6d:24:af:
2b:dd:59:4c:ae:ed:7e:d6:12:b9:e3:9a:87:c8:13:
4a:86:ff:95:df:c4:ca:39:42:e5:6e:0c:0c:d5:ec:
4b:60:c3:18:4e:2a:15:46:38:60:3d:4f:dd:3c:14:
f6:4e:88:d7:c2:27:17:d9:99:2b:f9:f7:28:ed:6c:
63:c1:1f:b2:2c:cb:c3:a4:83:0b:31:6a:48:d7:34:
79:0c:ab:e0:85:fc:94:5c:1c:89:03:01:b6:91:f3:
73:fe:a8:43:7f:1f:6d:20:1b:33:91:fa:75:8c:fa:
d8:67:1b:93:71:da:93:d9:44:95:79:74:7e:82:3d:
10:3a:56:cc:98:4f:71:f9:a5:3a:da:4b:13:e3:1e:
4c:2d:45:9f:29:2a:4d:90:4f:d4:07:72:c3:f4:5c:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:D4:7B:5D:58:BD:3C:03:2C:4A:1F:8C:84:9F:82:DA:62:60:10
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:fe:c7:91:0f:0e:1b:c1:4b:fe:17:0f:9d:25:db:c2:6e:
91:b3:d3:3a:72:01:85:90:41:d4:55:68:79:6e:d2:9c:4d:0e:
3b:c6:f0:04:1e:cf:1f:62:98:ad:5e:80:0a:ec:59:73:26:9d:
40:20:58:61:80:7f:23:d0:ee:60:19:54:7c:11:16:d0:e2:53:
4a:ee:ac:f4:6b:cd:43:0f:e5:a2:2d:b2:5e:a6:1a:f4:96:e0:
70:8c:1e:37:75:55:12:fe:0b:b1:ec:68:29:7c:62:d1:e4:e8:
42:3c:47:7a:3f:90:17:24:7c:0e:77:bd:12:1e:a7:a6:51:4a:
17:7b:93:ec:32:85:84:87:1b:92:4a:01:e2:c3:37:e0:11:1d:
a1:80:d5:7a:6e:6e:79:5e:54:e2:97:f6:c9:7e:a7:76:e4:3c:
d2:fb:81:d4:f7:b7:78:c2:19:63:11:ff:6f:61:27:66:5e:73:
00:f4:f6:cd:9a:18:52:58:95:42:2c:6f:a7:d9:8c:af:39:93:
8a:bc:80:91:d0:2f:8e:68:66:9e:7a:3e:52:d0:04:6c:00:7c:
73:0d:1f:f0:08:64:36:2d:b6:1a:46:b2:0e:df:67:30:c3:7e:
6c:16:17:cd:66:b8:d4:ac:25:72:5b:a8:e5:a6:ac:1d:16:93:
7f:94:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:28 2026 by rpki-client