Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
File: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft (raw, json)
Hash identifier: Qfr1fWmB4YDZhDC02uKirDuFszAPRLBad57YVcy8oyU=
Subject key identifier: 0A:79:F6:D3:C1:B1:63:7B:9A:4E:37:0D:AF:89:59:A1:9F:6B:0D:1C
Authority key identifier: E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
Certificate issuer: /CN=e360387485e8cf7958cec936357502ff46657319
Certificate serial: 01A17A03E9854113DAF8C0C34D6229A0C93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:39 +0000
Manifest this update: Mon 26 Oct 2026 21:00:39 +0000
Manifest next update: Tue 27 Oct 2026 21:00:39 +0000
Files and hashes: 1: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl (hash: Vl6dn7CaEfKe55NAxsaD6Pcf99GCMX/PUKUEzE4op8U=)
2: E49_PkP793V5I4YZCHvag_165PI.roa (hash: UXhuh1q1LOISHVBMZXe7sQENj99zD9a6dTROADJKZCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:e9:85:41:13:da:f8:c0:c3:4d:62:29:a0:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e360387485e8cf7958cec936357502ff46657319
Validity
Not Before: Oct 26 21:00:39 2026 GMT
Not After : Oct 27 21:00:39 2026 GMT
Subject: CN=0a79f6d3c1b1637b9a4e370daf8959a19f6b0d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:53:25:6b:ad:1f:eb:62:6b:37:d3:d0:0f:
03:a3:03:72:6b:42:c2:ae:db:6e:44:3d:e5:38:51:
4b:b2:61:8c:cb:2c:97:72:cc:56:55:f3:e1:19:29:
e0:ee:b0:8f:8f:3a:e2:42:6a:94:73:cc:7f:07:6b:
6a:71:18:d8:bc:50:93:66:31:33:b3:b1:a8:a4:02:
6f:d1:3e:1d:6d:e1:56:fc:62:12:21:f5:ab:ac:50:
ff:23:67:59:73:40:b1:eb:82:41:c7:dc:e2:bc:d7:
eb:96:b5:1b:f3:15:00:ef:a6:27:cc:e2:ee:11:d6:
45:43:ba:3a:26:ff:30:76:68:0c:85:47:a0:69:31:
ec:33:bf:85:68:f1:26:c7:46:25:3b:28:7e:5d:13:
90:b8:aa:04:4b:22:ee:dd:7d:b7:ad:c1:43:f2:06:
2c:43:d8:7c:5e:89:dd:94:22:77:01:77:1d:d0:27:
61:52:36:48:d0:96:8c:01:a3:c3:0e:aa:ab:f3:57:
55:4a:df:15:69:e3:8f:bb:68:10:0a:78:55:3f:93:
94:7c:92:f9:9f:1a:b6:28:aa:8a:4b:1b:a9:2d:5c:
e5:96:54:12:ce:e5:1e:ae:37:19:8c:6e:79:70:ce:
ca:df:26:a6:24:4d:f4:6d:ce:3e:49:a9:8e:1b:9f:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:F6:D3:C1:B1:63:7B:9A:4E:37:0D:AF:89:59:A1:9F:6B:0D:1C
X509v3 Authority Key Identifier:
keyid:E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1a:df:f8:bc:a5:ba:6c:44:eb:fd:a3:dc:d8:46:1f:54:3d:
24:bd:8e:d8:ea:29:ed:d0:97:2e:8a:ab:6c:41:50:00:a0:5e:
29:ea:91:52:ef:1e:a7:4c:16:bf:7e:f4:73:22:69:31:ab:75:
c4:f1:fb:57:a3:a4:92:23:59:f0:8d:f1:df:4e:9d:e4:d6:3c:
03:36:d3:43:f8:17:71:19:89:f8:af:9d:01:af:f8:74:ac:9a:
ca:aa:c0:78:72:3c:6c:e6:5c:fc:8a:f7:20:99:2d:a2:93:e3:
97:7b:17:21:15:bc:0e:b2:98:78:03:13:3f:66:8c:ab:8c:e9:
e5:6c:b4:76:e9:00:1f:8b:73:2a:43:b7:54:9f:df:5c:a3:3c:
24:76:a4:4c:b6:3d:b3:8e:5b:a0:6c:02:dc:45:25:48:b4:fe:
38:df:42:e8:4b:dc:9c:12:fb:4b:6f:ee:f8:ac:11:9b:b4:4d:
df:fc:5b:ba:51:0e:64:cd:9d:78:8e:cf:fa:86:5e:2c:4f:d5:
d1:a6:35:05:35:f9:a0:6b:fb:d9:0e:c5:80:54:e8:af:8e:07:
48:1b:d9:ae:3b:e7:89:c9:fe:dc:14:26:b9:41:a7:81:02:26:
64:67:f2:f6:1a:a4:98:05:65:86:8f:04:2d:3a:9e:66:95:af:
6e:39:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:52:09 2026 by rpki-client