Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File: 42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier: p+0ZiBQ2G7oCPUUBMULsNu7wj9yc3U6FNBDMHwN9cZI=
Subject key identifier: CD:20:57:37:9C:63:9A:D9:2A:D9:83:DF:A0:A1:24:0F:19:69:EB:B5
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer: /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial: 53D7807DBBA035A2954D69E778819A3FE9023463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number: 10
Signing time: Wed 29 Apr 2026 15:55:16 +0000
Manifest this update: Wed 29 Apr 2026 15:50:16 +0000
Manifest next update: Thu 30 Apr 2026 18:38:16 +0000
Files and hashes: 1: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: 9ZwsaUv5Uv5vZEOJn2+KS+87x2AKXmONn4rFQz0cKRI=)
2: AS205941.asa (hash: KnHD+PETxACMy5dzP4DPSm9wPvguxoY0r6N7X+N1Klc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 18:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d7:80:7d:bb:a0:35:a2:95:4d:69:e7:78:81:9a:3f:e9:02:34:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Validity
Not Before: Apr 29 15:50:16 2026 GMT
Not After : Apr 30 18:38:16 2026 GMT
Subject: CN=CD2057379C639AD92AD983DFA0A1240F1969EBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8f:7e:cb:2a:80:a2:89:a4:49:63:fd:70:13:
68:5e:a2:25:3b:4a:3d:a8:76:fa:c5:59:d9:d7:7f:
be:91:03:56:09:75:5d:1e:97:e6:cf:8c:24:92:57:
31:65:63:98:4f:08:75:41:38:99:6b:2e:54:67:32:
ae:6e:77:0f:3c:dc:64:bc:1e:4e:e7:4d:34:04:97:
ab:07:34:2e:68:10:00:e0:25:f1:61:e5:72:bf:4e:
21:d1:ae:06:53:fd:33:4b:87:9a:39:55:00:cb:86:
d5:0c:6d:d7:47:1a:1c:06:0b:ea:74:96:91:ca:58:
4b:2d:e7:f3:64:c5:07:b4:92:4a:fd:8e:3f:d5:27:
69:f8:34:74:27:72:11:fd:e3:97:da:8b:62:55:ee:
2b:9a:5d:fa:ed:7a:21:8e:73:5f:ec:f9:05:74:61:
47:c3:56:fc:b8:e2:48:8c:ed:b1:13:82:dd:a4:94:
f7:a1:64:97:82:95:88:6b:47:24:96:90:77:a3:2e:
cc:00:40:9c:08:27:8a:e5:12:34:5f:43:e8:9e:a1:
24:46:04:84:80:43:c5:a5:41:32:98:d4:d5:29:2a:
5d:b5:33:15:0c:fd:49:b6:4a:2a:dd:d6:35:92:8e:
e8:7b:fb:5f:e6:b4:b4:34:6b:73:f3:be:3e:fc:00:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:20:57:37:9C:63:9A:D9:2A:D9:83:DF:A0:A1:24:0F:19:69:EB:B5
X509v3 Authority Key Identifier:
keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:b2:84:cd:39:59:c2:b8:66:41:c9:b0:17:19:f1:e5:b1:
d6:23:d9:5c:97:10:76:a8:d9:df:f4:bd:c2:c3:dd:2f:ad:f5:
e5:6e:09:d8:8e:0a:bb:64:01:90:6e:4d:9d:b9:c0:85:77:4b:
e5:a3:08:85:1a:8b:53:5b:98:d7:33:87:26:95:bf:c6:87:f4:
eb:3a:5c:7e:f3:e2:dc:87:87:04:5a:e1:23:92:15:b9:d4:93:
a2:f2:12:c5:53:f4:91:0e:b5:05:19:2f:4e:a1:65:04:33:5c:
55:af:e0:00:9f:1d:b0:b3:b5:43:d7:c2:fd:ed:63:ef:bb:25:
4b:3b:f2:d5:68:4d:e7:b3:c4:1f:cb:b4:38:9d:f7:c9:17:97:
85:a1:ce:7d:5d:de:d2:a1:9c:58:82:a7:33:85:20:e4:78:ed:
9a:fd:c6:2e:2f:ed:be:95:ed:1b:ed:fa:c7:80:65:5d:0f:48:
51:cd:cb:fb:1e:f2:40:70:92:da:19:a4:25:e5:a4:b9:c1:35:
a3:81:5b:10:a4:e3:54:28:5d:7e:5c:cb:e2:4c:9d:ab:af:aa:
5c:7e:c7:5c:b3:29:6c:56:96:ce:db:a9:5e:7c:ea:2f:fa:e8:
ab:32:af:be:2f:b3:1a:ae:88:73:1f:a0:26:3b:09:1a:3e:56:
fd:e1:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:18 2026 by rpki-client