Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: aDNfMvIumAz0GG+JuTwzlrhKHwFnlG5oBrVestCPcp0=
Subject key identifier: 00:BE:56:58:F2:D1:B7:EE:B4:CE:B8:A6:16:42:48:50:1D:DF:1E:BD
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01A1DEA728D14270ACC8A4364C1FD6933394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0F4B
Signing time: Sun 15 Nov 2026 10:00:59 +0000
Manifest this update: Sun 15 Nov 2026 10:00:59 +0000
Manifest next update: Mon 16 Nov 2026 10:00:59 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: tqVvHFx3zfajekfNXFoAMCUd8RQBL9uZIfGslbvhCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:28:d1:42:70:ac:c8:a4:36:4c:1f:d6:93:33:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Nov 15 10:00:59 2026 GMT
Not After : Nov 16 10:00:59 2026 GMT
Subject: CN=00be5658f2d1b7eeb4ceb8a6164248501ddf1ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:92:7a:9c:18:f4:22:fd:b4:83:a0:e5:95:
b1:31:ba:47:38:6c:7c:20:4b:d6:19:46:04:16:fe:
90:af:34:44:79:d4:e4:2c:fc:d2:6e:74:67:cb:32:
83:ac:7f:02:86:0b:de:a5:50:1f:81:99:0d:49:d3:
f3:f8:ec:6e:59:c1:e6:50:10:25:df:53:3f:c8:53:
ee:5f:21:a7:fd:5e:ce:b6:66:0a:eb:0c:ec:85:b1:
37:a5:4c:49:3d:4d:a7:b8:5e:03:38:e6:d7:4d:b1:
f2:83:e9:9d:51:62:5e:87:cc:8d:30:ad:6c:a9:37:
87:8c:ad:cc:89:a6:92:5f:b8:6c:55:08:55:29:59:
dd:57:47:c2:d2:ce:a2:6e:64:19:ac:b9:31:14:08:
94:f6:6d:8c:a3:c4:69:75:5b:3d:5e:2f:b2:9c:15:
88:7a:a0:63:e6:09:15:bc:21:94:4d:91:09:38:ca:
6b:e1:be:6d:ef:ce:ba:81:d0:31:e0:03:a1:32:a5:
50:9f:2f:68:fa:fb:fc:be:3e:3b:59:6c:de:9d:c9:
3f:2d:8b:7c:3d:0b:c3:0d:e4:50:ee:0d:05:fc:22:
f5:9f:67:cf:f0:99:97:2b:ec:5c:04:bd:e3:4f:68:
05:05:79:6a:b4:f7:73:4c:1e:c0:b5:d9:04:90:a9:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:56:58:F2:D1:B7:EE:B4:CE:B8:A6:16:42:48:50:1D:DF:1E:BD
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1c:42:0e:7a:e9:13:06:8d:74:fc:58:8f:cd:19:65:66:70:
f7:8c:9f:99:1b:c3:90:9a:61:0d:4c:22:6e:25:a7:d4:b6:c8:
d9:19:c3:43:96:64:5d:ba:cb:9d:74:fa:b3:a8:c4:60:89:a5:
a8:a2:66:0e:38:e7:f5:45:f2:49:a2:9a:09:57:8d:77:80:32:
34:0f:68:36:03:98:fb:ba:84:1d:b5:e1:21:46:08:dc:4e:01:
c4:a0:ba:66:e7:35:44:fe:80:e6:6b:88:96:8b:7a:3b:d1:d3:
b1:a0:d8:11:d5:28:1f:af:5a:00:80:07:d2:95:ad:c4:f5:7a:
7a:82:91:7e:0d:58:2e:b1:52:38:f6:b9:84:cd:f9:d1:74:60:
09:aa:93:a5:41:a7:15:f3:01:b3:57:80:35:8b:ff:c3:a4:c5:
d6:b6:f5:89:00:f6:b9:57:f2:b6:1b:b0:f1:29:14:fe:c1:65:
9a:27:2c:9a:f8:00:f8:99:00:6b:94:6f:19:e7:37:54:9b:67:
41:bf:35:5d:6e:2b:91:27:6c:c8:4b:05:28:1f:3f:5b:2a:8b:
48:70:66:59:72:a0:b2:f6:51:0e:90:0b:c4:fd:40:f5:a1:ca:
5c:9a:4c:7a:15:0d:c6:f6:47:17:35:58:0d:e5:21:ed:0d:78:
f2:68:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:37:11 2026 by rpki-client