
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File: 42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier: z7o4jAC5hV9CEQl/CuuYbFpljmnKbuA/ELb+Wk5i7aA=
Subject key identifier: BB:5F:0D:43:74:86:FC:BA:35:53:5A:60:2C:62:D6:75:87:35:24:A1
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer: /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial: 58C4A59F50534246A81E75DE5ABD39BE0B0F85FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number: C0
Signing time: Mon 31 Aug 2026 18:44:00 +0000
Manifest this update: Mon 31 Aug 2026 18:39:00 +0000
Manifest next update: Tue 01 Sep 2026 22:36:00 +0000
Files and hashes: 1: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: Q9UwjdNmsxjr0ITz7SnYOlXhWJKjYgTCxFC9rrtPpJ4=)
2: AS205941.asa (hash: RSQS4jpSR851Ak6RhtcwU5FcZaXidS/C/rK6Y6TFzRQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c4:a5:9f:50:53:42:46:a8:1e:75:de:5a:bd:39:be:0b:0f:85:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Validity
Not Before: Aug 31 18:39:00 2026 GMT
Not After : Sep 1 22:36:00 2026 GMT
Subject: CN=BB5F0D437486FCBA35535A602C62D675873524A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:ef:dc:b1:1d:88:fe:51:01:14:d9:2b:14:
4d:82:12:80:e2:f1:e6:2d:71:b1:81:a0:e1:59:7d:
e9:03:09:92:e4:e1:08:2e:c0:2f:a4:d8:84:57:e7:
8f:c6:18:f5:43:63:ca:b7:62:6a:d8:76:f5:a8:0c:
41:5b:81:9d:3f:39:5c:a0:6f:f2:2f:eb:2c:e2:56:
e1:e6:54:03:0f:0d:e6:f8:68:64:92:99:d8:64:00:
75:16:2a:f5:21:91:9c:83:e6:8f:a5:bc:f3:6e:98:
b3:41:4e:1e:82:49:3e:28:47:a4:87:38:8a:5c:c2:
0b:df:bc:fc:09:4b:4d:74:e9:15:4f:46:dc:b4:ca:
09:10:0f:9c:b1:ee:51:53:ee:cb:b9:bd:90:4e:44:
c1:4f:92:5e:e5:f1:47:91:fa:3f:40:f3:67:bd:85:
40:73:1e:9b:d1:4c:16:9a:03:5a:81:4a:1c:2c:b1:
d8:08:07:d5:d5:c4:d3:86:65:67:f7:74:87:81:5a:
84:37:9d:fe:e4:ea:e5:2c:ce:3f:82:d7:69:8e:68:
9e:85:2f:de:17:5b:66:65:8c:36:e7:77:43:2c:1d:
e2:db:65:33:c4:6f:65:34:e2:7b:ab:18:49:6b:f2:
28:3f:c8:c3:7a:c5:0d:26:99:3e:2a:ff:60:98:bf:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:0D:43:74:86:FC:BA:35:53:5A:60:2C:62:D6:75:87:35:24:A1
X509v3 Authority Key Identifier:
keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c4:72:df:80:ce:1f:bc:92:fb:35:c9:85:5e:a6:80:33:f5:
d0:d8:00:ec:d9:1d:7c:b8:79:33:46:4b:d8:7b:46:07:fa:37:
ea:b7:47:10:52:94:98:3d:6a:c0:e1:d8:d3:46:70:26:a9:4b:
64:cb:39:a0:f1:2b:d1:cd:f1:1e:e0:4a:cb:2a:2a:df:d0:8a:
1d:6e:74:44:d7:e0:11:5e:6b:0a:a0:77:e8:d5:f6:7f:06:34:
e5:7d:2b:90:64:c5:25:6a:0d:25:58:75:07:dc:68:d5:49:9b:
e9:94:1b:94:0f:1e:20:6e:70:bf:1f:f1:2a:b1:82:14:ee:19:
87:ae:67:b4:5d:36:62:b2:74:f2:c8:ce:72:c2:99:be:1f:3f:
df:3f:30:af:78:f7:b9:b7:27:0a:72:eb:1e:92:13:ef:ec:de:
7f:84:5d:9b:96:04:9a:34:be:d4:de:f9:17:2e:02:c5:bb:79:
ac:b8:ef:89:2a:48:5f:77:9e:17:7c:d1:72:d8:26:ea:ce:95:
42:0c:67:f7:32:99:95:73:74:8f:34:f4:0d:e7:cf:44:12:22:
5e:2d:13:ca:bf:a0:9a:52:35:9a:08:fb:29:93:6b:73:9b:b1:
d3:28:40:5b:68:d9:72:b2:72:e2:d9:60:8e:4b:bb:5b:32:30:
e1:be:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:18 2026 by rpki-client