Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
File: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft (raw, json)
Hash identifier: 18RaJ2qNlWTcl13Ey5Yn48g2gH7EsKVaSEtoywxkof4=
Subject key identifier: 4B:DA:61:C3:B0:80:BC:63:99:FD:A7:29:88:35:54:D7:48:DA:4B:08
Authority key identifier: E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
Certificate issuer: /CN=e360387485e8cf7958cec936357502ff46657319
Certificate serial: 019FA2CDB32AD880D6A45851004C88D82373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:17 +0000
Manifest this update: Mon 27 Jul 2026 09:00:17 +0000
Manifest next update: Tue 28 Jul 2026 09:00:17 +0000
Files and hashes: 1: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl (hash: NZq8pRr+rwBhfmsrrtGfRsLMdDG9h87sn66diOa1uEk=)
2: E49_PkP793V5I4YZCHvag_165PI.roa (hash: UXhuh1q1LOISHVBMZXe7sQENj99zD9a6dTROADJKZCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:b3:2a:d8:80:d6:a4:58:51:00:4c:88:d8:23:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e360387485e8cf7958cec936357502ff46657319
Validity
Not Before: Jul 27 09:00:17 2026 GMT
Not After : Jul 28 09:00:17 2026 GMT
Subject: CN=4bda61c3b080bc6399fda729883554d748da4b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:9c:66:4b:70:97:15:f2:25:0e:11:a5:98:
5f:22:2a:6f:f9:91:d1:b6:59:6c:31:f5:54:2b:97:
c3:73:7a:7c:cd:29:43:27:42:c8:2a:88:a4:95:77:
5b:85:d6:7a:02:c2:a0:ef:33:6e:4a:b8:c9:26:bb:
df:07:04:e7:4a:9a:1b:98:73:69:f9:51:17:19:f1:
d5:3b:ca:ca:c4:41:19:0b:63:18:26:b4:29:fa:c1:
29:c9:9b:c8:77:01:68:4c:85:d0:c9:35:4a:25:24:
7c:79:b6:45:7f:52:7a:10:2c:6d:f6:55:a1:00:6a:
f5:fb:66:2e:73:3e:6f:8b:fb:49:7b:cc:10:34:d4:
5d:31:c7:68:79:d3:58:0c:0b:9b:d9:31:8e:49:16:
d0:b3:2f:ab:60:fb:55:42:4e:ef:b0:be:48:e2:24:
b3:57:a1:48:18:d3:7e:f7:80:0f:d4:da:9b:55:14:
06:1b:95:7f:18:3f:0b:8d:0d:97:17:00:17:61:ae:
10:f3:14:10:a9:71:61:13:49:f5:a5:47:05:24:78:
9e:0b:57:47:55:07:f1:61:50:d8:1b:bd:3f:b0:20:
b0:b0:41:29:18:6c:14:20:77:b7:7d:01:2f:46:98:
e2:65:ca:2c:91:af:63:1b:56:81:8a:f1:1f:9e:26:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DA:61:C3:B0:80:BC:63:99:FD:A7:29:88:35:54:D7:48:DA:4B:08
X509v3 Authority Key Identifier:
keyid:E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:df:b0:b4:44:01:91:da:f4:58:a7:ad:ec:67:78:9d:9c:
a7:b0:c0:02:6a:71:0c:10:f2:ae:2f:b2:c5:57:bc:91:9c:35:
2d:29:c4:c0:8a:55:72:46:6e:69:07:e2:05:6e:fa:20:f2:fc:
e2:4e:a5:f5:0e:e8:3a:70:a2:a5:e1:08:1e:f2:bb:2b:fd:ad:
a8:7a:8a:96:3c:81:ea:6c:c1:c0:66:f0:c5:d3:63:0a:dc:35:
c7:49:af:e2:ab:25:b8:00:45:71:07:6a:47:a6:e3:10:3e:eb:
30:f4:87:2d:32:02:a5:3d:22:b1:f8:2c:34:42:df:df:60:f8:
6c:22:5d:7b:26:5e:24:c2:c2:d3:39:d3:08:71:2a:5c:9d:3d:
91:d1:db:2d:17:b6:b1:88:0e:de:85:74:3a:01:c1:6e:1b:a7:
f2:99:8d:f9:0a:b6:89:e6:1c:f5:5d:01:14:d1:9e:62:44:aa:
d2:c4:0a:dc:c8:59:a8:71:10:ac:6a:0c:8e:12:b6:2f:2e:a6:
15:b1:f8:de:8e:69:f7:59:2d:03:27:fc:6e:82:07:ef:8e:e9:
dd:81:34:b2:57:3e:41:63:68:b6:f7:30:9b:13:c2:d0:a5:0d:
cd:d0:f8:b6:b9:b2:c9:90:c7:20:61:21:81:7a:7f:c2:b7:7d:
88:6d:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:44:35 2026 by rpki-client