Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: xbJWnFoV4Q/TdKvlxMEcj5/bf1iJazmivpIWmJUZrg0=
Subject key identifier: 82:9A:CD:8D:ED:11:C5:FB:5C:A2:EA:3C:CB:07:5C:43:4E:91:74:85
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019EBF240D5B6D9A950F80018AF6CB9FB4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0DAD
Signing time: Sat 13 Jun 2026 04:01:11 +0000
Manifest this update: Sat 13 Jun 2026 04:01:11 +0000
Manifest next update: Sun 14 Jun 2026 04:01:11 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: b5IOj4Px6/30noMdB3O0i+D7Ne4yzBwxNFTx/TnD/8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:0d:5b:6d:9a:95:0f:80:01:8a:f6:cb:9f:b4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jun 13 04:01:11 2026 GMT
Not After : Jun 14 04:01:11 2026 GMT
Subject: CN=829acd8ded11c5fb5ca2ea3ccb075c434e917485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:98:7c:0c:dd:c8:ea:ac:6a:51:7d:c1:79:
a1:f1:f2:05:5f:d1:00:b9:cd:2e:b7:38:98:b7:4b:
5e:35:6f:a6:e3:dd:da:bf:9d:ed:35:1f:84:4f:27:
f5:8b:ab:83:ae:fb:f8:26:54:e1:cf:28:8e:08:10:
1d:b7:74:50:21:bf:e6:6a:17:38:21:ed:eb:02:1f:
f1:e6:ae:2f:e7:e5:bd:55:18:de:9e:2e:85:0f:f6:
3d:f3:51:70:6e:25:79:6c:b6:f7:a0:e1:5c:1e:66:
f6:39:69:2a:fe:d9:57:d3:2e:99:77:c8:9b:5b:dc:
83:38:d2:8d:96:8f:e5:50:9c:1d:36:53:35:13:9f:
e1:28:99:77:a9:6e:39:9f:0e:73:64:aa:32:34:be:
59:fc:31:32:d0:27:7b:12:a1:b8:1c:59:ed:0f:58:
08:fb:56:de:f8:1c:95:68:7f:6c:9a:0b:8e:02:33:
6d:f9:a0:ed:87:7c:e1:ca:e2:2a:b1:82:95:15:4b:
be:24:e7:7c:fe:7b:40:2c:7a:9f:c0:dd:54:1c:54:
1b:e8:d1:79:63:ec:11:87:e5:d2:0a:bc:c1:1b:59:
3b:41:7a:c6:10:e8:f1:39:29:0f:0f:0c:94:39:ae:
f2:1a:6d:8b:d7:d2:45:aa:b3:58:b4:6b:7c:d8:ae:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:CD:8D:ED:11:C5:FB:5C:A2:EA:3C:CB:07:5C:43:4E:91:74:85
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f3:51:cb:31:6b:35:03:66:08:bd:7a:2b:eb:ae:d6:36:08:
f2:be:f5:42:14:20:45:2d:f5:46:bf:2f:a7:78:1f:b2:e1:25:
1e:f5:41:9d:b5:cb:31:b6:49:ca:23:46:d0:a2:a4:aa:b2:9b:
ae:54:bd:b4:de:2d:0f:7a:5d:ef:a3:30:db:e1:b7:b5:74:5e:
60:d0:fa:87:1c:36:14:3c:5c:2a:72:a9:03:5f:ab:e4:6c:35:
36:6e:f6:f9:fb:19:d5:0e:ac:19:7d:ba:cc:d4:ec:ea:40:41:
1d:70:68:a4:05:b6:b5:00:fc:77:ff:6c:70:3c:28:55:47:67:
9c:92:f7:46:4f:3f:82:60:d8:e1:ee:88:6e:10:30:1c:3f:c6:
61:67:8e:de:38:33:b2:e9:64:13:d8:25:a7:0f:a4:54:be:94:
90:d3:94:10:15:cd:f5:c5:c3:ce:cb:17:c2:13:15:21:dd:1b:
95:99:c8:d1:97:a9:f0:99:84:bf:5e:7f:13:21:b5:24:ad:e2:
c9:54:bf:3f:b1:f8:9b:9e:cc:bb:7b:02:39:b8:ad:48:56:4d:
19:80:9e:36:79:49:14:af:e4:4a:27:c7:eb:7d:a4:32:74:1b:
cc:9e:a0:fb:21:eb:71:82:7b:39:ec:be:28:06:8b:0b:df:60:
81:3e:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:54 2026 by rpki-client