Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: c4n27DDq7Q6ja8FDBmTHaHHywTLEtW0OsfM5FU4r9MI=
Subject key identifier: 7C:86:79:AB:25:1A:3A:22:CD:92:EC:9F:8D:43:BD:53:99:55:4C:7F
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01A0C2C440C75BB99A4467928F25E82EFA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0EB8
Signing time: Mon 21 Sep 2026 07:00:36 +0000
Manifest this update: Mon 21 Sep 2026 07:00:36 +0000
Manifest next update: Tue 22 Sep 2026 07:00:36 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: MOn5TT2/EZJy63svgepdZKWne7URMtajhaC5vhvUB1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:40:c7:5b:b9:9a:44:67:92:8f:25:e8:2e:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Sep 21 07:00:36 2026 GMT
Not After : Sep 22 07:00:36 2026 GMT
Subject: CN=7c8679ab251a3a22cd92ec9f8d43bd5399554c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:0a:63:05:22:ab:c6:40:53:a0:aa:bf:e3:
24:06:cc:23:d3:75:4f:4c:b1:df:8d:5b:13:7f:72:
5f:19:ec:52:82:63:61:4a:c6:9b:1a:ee:f9:47:22:
b6:e4:92:6d:01:6f:82:bd:a7:b8:15:02:fc:40:3c:
e8:07:2e:83:35:bd:7b:d0:26:3a:fe:41:f0:0a:65:
6c:99:4f:72:9c:38:4d:54:af:fe:50:bf:05:f3:d9:
06:c7:11:5d:13:08:04:79:9b:6b:fe:00:8a:bc:18:
cd:e5:1e:31:d1:4e:9b:0b:ed:de:6f:74:87:6b:88:
4b:20:00:40:0d:5e:2c:3e:90:96:ec:7c:14:c9:59:
af:de:2d:60:db:14:2d:18:dd:56:48:8d:e8:99:e1:
18:97:ea:45:bb:83:14:4e:8b:ea:c7:64:14:0b:75:
ac:d0:c7:8e:ae:bb:d5:e9:a2:7c:af:44:4f:f5:e8:
9b:97:85:cf:31:5b:78:3e:5b:92:6c:57:d1:4d:eb:
2e:71:77:a7:5c:10:78:9c:ec:4d:eb:cf:41:17:a3:
29:77:35:2c:f3:80:23:e3:7a:90:4d:1c:1b:d0:3e:
f8:27:cb:a6:ae:58:35:76:ab:82:b8:67:32:55:8c:
a9:86:da:43:c2:31:28:5e:88:57:6a:3c:c2:ab:c4:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:79:AB:25:1A:3A:22:CD:92:EC:9F:8D:43:BD:53:99:55:4C:7F
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3c:6c:02:d7:dd:b4:6f:cb:2f:cb:b4:5d:ba:9f:da:76:12:
04:b8:9c:75:6e:c1:3f:9a:dc:79:bd:85:72:37:b5:39:e3:fc:
fa:9f:3f:f0:42:54:7b:05:21:be:c8:97:0e:3a:33:59:97:97:
32:55:da:70:4c:2c:76:50:b6:a6:0f:4d:47:75:8b:e1:33:ac:
3c:c7:f6:4e:24:d9:04:fb:37:ef:95:4b:e1:7d:a4:dd:06:92:
cf:08:2e:07:07:1d:14:f7:96:c7:33:af:32:84:25:7f:89:ac:
ea:03:02:0e:57:e8:6d:2f:20:e7:93:88:50:bf:88:dc:3a:5a:
ad:cd:13:a0:1f:b9:75:c1:58:d2:4d:25:2c:9c:4b:0a:84:81:
e3:03:dc:61:2a:66:65:01:e8:13:a2:25:0f:67:a0:83:f8:32:
ae:bc:86:b9:d0:d9:a8:a7:62:56:b7:bc:62:07:ce:9c:33:7f:
78:ee:e0:ba:cc:32:5a:25:2a:d1:8e:04:6b:88:54:32:3e:e9:
78:58:05:53:38:cf:cd:65:ba:c4:d0:1d:6f:cb:27:c4:ae:16:
3e:b9:7d:b7:8b:4a:47:fe:6e:37:70:0a:9f:43:20:1a:62:6c:
84:63:d3:94:b6:09:cd:09:82:d2:1f:67:7c:e6:74:22:fe:b6:
9c:9a:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:47 2026 by rpki-client