Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
File: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft (raw, json)
Hash identifier: M2dTR6uVRRc/bEj+5V55wuBURZIBOc5XVyRtpC+lBTI=
Subject key identifier: 93:19:61:7D:33:6B:15:47:11:D1:D7:3D:7D:7D:A6:86:AF:71:B9:0A
Authority key identifier: 42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17
Certificate issuer: /CN=42ea91e83aea0a647da82c5c13866cdfb6893917
Certificate serial: 5819839C9F0C94BF8B1674151752560FD0731E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
Manifest number: A0
Signing time: Sun 29 Mar 2026 04:12:12 +0000
Manifest this update: Sun 29 Mar 2026 04:07:12 +0000
Manifest next update: Mon 30 Mar 2026 04:43:12 +0000
Files and hashes: 1: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl (hash: X8qNURdMdHb9jk7MXTF8y7mF9knjQXZgIa+7nvy/6gg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl
rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:19:83:9c:9f:0c:94:bf:8b:16:74:15:17:52:56:0f:d0:73:1e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ea91e83aea0a647da82c5c13866cdfb6893917
Validity
Not Before: Mar 29 04:07:12 2026 GMT
Not After : Mar 30 04:43:12 2026 GMT
Subject: CN=9319617D336B154711D1D73D7D7DA686AF71B90A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:eb:c0:63:81:e0:3b:d2:b5:d3:cb:8d:13:
a2:47:0c:d9:98:83:70:66:6b:b6:3c:06:43:11:cb:
69:4f:09:d5:55:3c:35:ee:8e:15:52:65:1b:ac:aa:
38:c8:43:d8:0c:af:71:ae:09:0e:2e:e5:dd:2b:7c:
30:37:5f:01:4f:57:35:f4:eb:31:20:fd:b4:73:e3:
b6:69:4e:8f:29:5e:fb:52:76:4f:9a:25:b9:cb:92:
09:07:e1:1a:db:c8:32:a6:95:50:3a:bc:75:0c:a2:
98:0b:3f:7e:20:0f:21:71:27:65:5b:b5:0b:fa:19:
3f:f7:54:98:bd:f1:31:dc:2f:bb:b8:76:31:cc:64:
d4:4e:73:48:58:ee:79:45:17:ab:b1:a2:3f:65:a6:
6a:fa:80:b7:d3:20:40:3b:ba:f5:26:78:8d:23:7d:
5e:77:41:a2:f7:dc:e1:0f:20:0c:2a:bd:77:18:0a:
7e:db:87:49:eb:5c:18:60:a7:47:ae:39:25:ab:5e:
3d:71:2a:3d:50:7b:eb:7c:ac:03:05:3c:04:f5:1a:
04:a0:51:a5:ab:67:41:3b:ab:a7:2c:85:cf:54:17:
c6:76:3b:f0:2d:78:06:69:16:72:dd:04:87:12:08:
88:93:c0:91:f5:c3:6f:ec:7b:fc:f4:0f:77:c7:bd:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:61:7D:33:6B:15:47:11:D1:D7:3D:7D:7D:A6:86:AF:71:B9:0A
X509v3 Authority Key Identifier:
keyid:42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2b:20:06:2a:42:6c:73:fb:1e:57:4d:db:e6:a0:a9:b6:07:
96:84:6c:09:f9:0e:a6:2b:80:78:5a:12:ec:85:36:d5:62:ff:
22:6b:16:3f:5f:ac:c8:43:74:0a:b0:f4:15:19:ac:ae:fe:d8:
81:56:e6:26:c3:4d:6d:fd:09:72:02:00:75:94:ef:a1:7c:61:
3e:55:9e:d9:4a:f3:c0:56:92:13:9f:f5:3b:30:a4:90:e0:2a:
49:67:84:df:9a:f5:b3:8a:63:b7:d2:4c:a4:63:d6:1c:47:6f:
2a:c2:d1:66:bb:d3:fa:1a:96:a5:5f:a6:d0:4b:81:1b:b4:91:
6d:e6:a3:08:98:44:1a:f0:06:71:44:de:ed:22:30:31:1d:6a:
8e:74:f4:07:b9:8a:ad:86:98:ba:01:69:9c:66:26:38:7b:a9:
38:c0:50:df:63:b6:b9:4b:c6:03:e6:32:f7:16:f9:2e:1f:41:
fa:17:be:42:3b:cf:69:34:b4:b8:2e:7e:50:ca:08:2a:6f:82:
90:a5:4f:e3:12:55:21:a6:a2:bf:fc:c5:60:b8:b4:15:94:a2:
dc:b0:67:44:19:69:0c:f5:bf:24:67:40:3e:f7:b6:d9:cb:f6:
06:c8:41:5f:91:8e:0c:ba:6c:7f:c6:7c:3f:14:3c:80:62:f0:
fe:8d:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:39 2026 by rpki-client