Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: Q21t7s09VusxUuEslNKZnxx5Gqtakr6STzqcG64E5+k=
Subject key identifier: BD:CB:AE:AD:B7:F3:FB:39:C8:0F:40:FA:78:EA:D7:A9:AB:46:EF:40
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019CADFEC4B8AC427A69167B01F267DC0098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0C9B
Signing time: Mon 02 Mar 2026 10:01:20 +0000
Manifest this update: Mon 02 Mar 2026 10:01:20 +0000
Manifest next update: Tue 03 Mar 2026 10:01:20 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: YAa+rcP5h2taOByayXIZCay4QaSk4IPmKAcVX+0mqzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c4:b8:ac:42:7a:69:16:7b:01:f2:67:dc:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Mar 2 10:01:20 2026 GMT
Not After : Mar 3 10:01:20 2026 GMT
Subject: CN=bdcbaeadb7f3fb39c80f40fa78ead7a9ab46ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:13:bd:d2:3c:90:32:87:f7:61:d6:c8:c1:
d4:17:23:c1:3a:91:6e:6a:57:52:e1:a6:3c:f6:91:
14:9b:f6:b8:d4:2c:f0:b0:68:19:41:eb:1f:9b:25:
95:be:a3:04:0f:30:e0:08:0d:e9:d3:c4:ef:3d:b6:
f7:77:64:b8:bf:a8:46:3b:f6:5b:43:1b:88:3d:36:
63:76:fe:61:b7:be:e3:4b:c1:02:f8:d0:fa:ef:ee:
6b:f6:ed:62:6e:28:58:dd:ad:cf:ee:52:0e:d8:c2:
d0:d9:9c:39:c4:65:3e:0b:cf:da:c5:71:16:00:3e:
44:25:df:24:a3:4b:e5:42:51:1b:06:6d:6e:64:5f:
c6:62:43:27:12:8b:87:94:8d:19:c7:ff:08:18:52:
3f:7e:0b:18:23:a1:fa:bb:50:a0:76:4c:be:b9:ff:
1f:52:c0:d0:c8:2b:26:ce:29:92:ca:e0:ca:66:02:
22:8e:5b:15:f0:cb:54:2c:fe:af:f9:78:3b:9c:fa:
64:d6:9b:9e:4a:8c:8f:1d:67:73:51:db:8d:a5:bc:
08:42:bb:8c:9d:1e:7c:0f:71:de:6e:53:6d:31:3d:
90:96:01:61:d0:96:81:89:eb:bc:a4:77:c3:d6:d6:
25:70:cb:61:85:2d:3e:bc:25:49:dc:d1:01:2f:0b:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:AE:AD:B7:F3:FB:39:C8:0F:40:FA:78:EA:D7:A9:AB:46:EF:40
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:8b:30:81:57:5e:83:ac:d1:ec:32:07:10:0f:cb:83:94:
4d:8f:50:7b:f0:9d:b6:fd:b7:92:a9:e3:ec:cb:de:35:cd:7a:
6c:5d:df:3e:e6:26:a2:7e:39:09:ab:61:e4:01:27:9c:75:70:
9b:75:6e:2c:0b:05:40:61:5d:74:e8:2b:8a:e8:d1:d9:a4:32:
7c:90:20:6e:3f:a1:16:ae:31:b3:dd:99:91:4d:65:8c:93:b1:
f7:8a:d6:f6:47:c3:21:f2:57:6d:d6:19:72:fb:23:88:08:00:
b1:7d:60:0f:05:19:91:70:1d:95:11:12:31:71:fa:e4:a7:32:
ae:7d:cb:b0:2f:ae:e8:1a:1e:da:ee:4a:f0:00:66:57:f0:db:
0d:f4:e8:99:09:bf:e3:c8:44:ae:c2:06:5b:57:5b:da:23:90:
e8:6f:a5:c7:dd:be:34:ee:2b:5a:4e:69:e8:c8:44:40:84:2b:
ee:5a:3e:4b:70:e2:90:6f:89:a2:57:1e:a0:ce:3b:6a:a5:68:
62:d4:4b:93:ce:75:54:0f:1a:0e:18:77:60:f6:e5:84:8c:25:
a8:29:77:a5:dd:8c:65:82:fb:d8:0c:f3:e1:3f:cd:9f:29:b8:
f4:13:0b:51:c1:83:fb:07:c2:f3:40:c9:19:e5:fa:c6:b4:d7:
3a:6b:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:15 2026 by rpki-client