Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: uLLLtPJAd1sadP/qVXWpJLRdJRJ2Utqz2NKHLWQYtVs=
Subject key identifier: 99:C9:30:73:B0:FE:F0:60:DC:DD:8B:13:F9:05:C8:9D:9F:B4:19:52
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019FA8CFDAC80ACA08F93D04607EA0EF8CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0E26
Signing time: Tue 28 Jul 2026 13:00:21 +0000
Manifest this update: Tue 28 Jul 2026 13:00:21 +0000
Manifest next update: Wed 29 Jul 2026 13:00:21 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: kSYZkeo09d1X/dHF9l8USFx9/HUexmfa3CFHuQBQ958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:da:c8:0a:ca:08:f9:3d:04:60:7e:a0:ef:8c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jul 28 13:00:21 2026 GMT
Not After : Jul 29 13:00:21 2026 GMT
Subject: CN=99c93073b0fef060dcdd8b13f905c89d9fb41952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:11:40:d0:1f:ca:93:1a:6b:0a:e0:9e:fb:5f:
25:89:01:7a:b7:82:fa:69:2d:32:28:89:c7:fd:37:
e4:b8:8e:d3:1f:f7:1d:5b:3d:d7:9a:64:f2:bf:f9:
5e:aa:3f:5d:4f:c4:d2:2f:88:ad:a6:66:6b:24:f0:
61:e8:0a:d9:6c:37:9f:39:2a:8a:be:da:56:31:56:
e0:25:52:b8:c2:d2:42:5e:9b:4b:59:c7:bc:dc:3c:
fc:25:75:5b:e4:52:53:e9:99:3d:72:9d:32:d0:51:
18:22:2a:74:3f:e0:05:05:0e:1c:c6:63:38:fe:e7:
51:33:77:c9:1e:48:dd:d3:f2:8a:fa:d3:f9:8d:0b:
18:b8:dd:ff:cd:df:3a:e2:cc:08:07:ac:2c:8c:b5:
21:b1:fb:77:4b:eb:5c:ff:68:e2:f5:a0:6a:1f:c1:
16:24:91:24:a3:9f:71:a4:2a:cb:b8:32:fc:5c:70:
9a:81:c4:74:eb:e2:ca:da:85:9c:23:10:cb:02:9a:
19:11:44:2f:26:de:c9:6c:7c:62:43:0b:b4:df:e9:
73:ef:7a:d2:99:ca:57:b7:d9:b5:b9:01:1a:54:e8:
2b:6e:34:bd:cf:51:fa:2e:c2:73:2c:06:cd:a0:3d:
ca:fd:4d:05:9b:7a:c5:b7:d2:c2:0e:b5:da:c8:c6:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:30:73:B0:FE:F0:60:DC:DD:8B:13:F9:05:C8:9D:9F:B4:19:52
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:05:8c:99:2d:79:6c:95:5f:19:8a:8c:7c:09:88:3c:06:4f:
64:eb:1b:0a:5e:89:4f:6a:37:04:1c:a1:19:15:e0:41:4a:fa:
46:e6:e1:ff:7e:d6:24:d8:f6:ca:8f:ba:04:01:cb:42:92:f3:
af:99:de:63:3d:a2:f8:9c:67:60:d3:a1:8f:7b:58:4c:11:15:
d0:c2:d8:c3:c8:9f:41:56:0d:50:91:20:14:cd:c8:a6:8b:64:
7f:e2:ea:10:05:9f:f0:74:4f:7a:7d:4d:33:ae:cb:4a:73:8f:
62:aa:0f:e7:31:67:78:3e:fd:05:a4:a9:d5:9d:7a:f5:a7:5e:
45:06:a4:f3:10:b3:c2:99:a2:59:f2:86:6b:02:e8:7f:18:e8:
8b:d0:92:8f:d5:fb:8e:79:68:66:07:f5:80:ca:d5:17:b6:1f:
cc:ae:0d:6d:ab:f0:df:79:f2:42:0d:86:71:24:79:58:ff:cb:
f1:e8:c9:a3:5d:a2:51:52:fe:84:c0:87:b2:ee:d5:e3:d9:bf:
2d:6a:33:db:21:03:25:ee:e0:5c:0c:33:02:50:f5:59:4f:6a:
4e:50:a4:6b:b5:9a:3b:2a:5b:27:c4:f3:2a:78:23:23:8c:1f:
11:fe:d3:bc:ae:c9:15:5d:82:ea:6d:36:3b:48:a7:a8:ba:49:
6b:ef:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:26 2026 by rpki-client