Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: U7FHZpNV4m4mbFWuq2Gt2hVXyb8YTfQ3zCzOhrIJnKM=
Subject key identifier: 40:BF:B2:F9:AB:65:DC:DC:A2:AF:FA:06:C7:23:94:94:F9:3F:3A:2E
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019D9999706AC942E195BAF52A28F1B1950D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0D15
Signing time: Fri 17 Apr 2026 04:01:02 +0000
Manifest this update: Fri 17 Apr 2026 04:01:02 +0000
Manifest next update: Sat 18 Apr 2026 04:01:02 +0000
Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=)
2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: ydWiY+ag3t3wgty+sh+D+Ynp7RcNE4i3ZER1ScEN41I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:70:6a:c9:42:e1:95:ba:f5:2a:28:f1:b1:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Apr 17 04:01:02 2026 GMT
Not After : Apr 18 04:01:02 2026 GMT
Subject: CN=40bfb2f9ab65dcdca2affa06c7239494f93f3a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:dd:43:f4:35:d5:13:40:f5:9b:3b:3e:90:
c8:86:af:ee:51:7b:30:21:cb:54:09:46:76:9a:69:
e3:95:71:f3:28:89:69:bc:5b:0e:8c:e8:2a:6f:ec:
4f:3e:43:6b:5e:b6:ac:12:d5:af:72:6c:64:90:7a:
f2:cb:3b:44:c1:8c:d8:15:8c:0d:48:d2:9d:b5:da:
f9:bd:c8:ad:bb:56:b0:e9:b3:ac:d5:bc:16:03:8f:
af:e4:b6:0a:f7:50:db:44:01:1e:fc:66:69:b7:7a:
0c:a2:da:ed:3a:7c:b0:6d:85:3d:ab:c7:0f:85:4c:
63:5b:b3:b2:34:e2:a9:af:0d:ef:8e:87:8a:cb:15:
b9:5c:51:f6:47:f7:ec:2a:89:25:31:68:31:2f:e3:
ee:ee:8c:9a:a9:3d:2c:08:c3:4f:9c:7f:e1:cc:35:
ae:e5:f2:6d:58:44:39:a1:ec:8a:29:0b:7b:98:02:
94:f6:e0:51:02:f7:d7:89:e4:7b:5e:b4:b4:86:7d:
16:c4:8d:c3:27:ee:9b:77:a7:89:af:08:58:ec:dc:
2f:90:5b:1a:65:7d:4e:11:1b:81:31:c6:16:38:a8:
0d:35:57:e3:13:f1:9d:ab:ec:27:e5:c9:9e:63:01:
5f:3f:d9:67:1e:79:84:f1:fa:5a:62:c6:76:5b:9f:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:B2:F9:AB:65:DC:DC:A2:AF:FA:06:C7:23:94:94:F9:3F:3A:2E
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8e:ba:3a:e1:3c:22:85:c4:74:31:92:dc:d6:a6:b1:6a:fc:
8a:1e:4f:43:6c:9c:23:c0:21:cd:ef:db:61:19:ee:d0:ae:cb:
c1:fb:bd:11:db:6c:3f:9e:3c:a8:87:86:c6:6a:1b:8c:a9:72:
c4:b3:27:5c:8a:a5:ab:1e:46:4c:db:fa:78:34:74:b8:c4:fb:
c5:7f:25:19:0e:e1:72:43:42:3c:01:35:92:5d:69:37:da:36:
ba:d1:19:28:3f:0a:b2:e1:02:3e:f6:6b:de:9e:0d:01:d6:9d:
61:9f:2d:74:84:46:e1:c1:f7:c0:6c:9e:f0:45:d9:4c:36:34:
07:16:d7:1e:3e:6f:f7:03:df:d1:ca:3d:11:e4:d7:be:96:c0:
f6:5f:59:64:08:4c:a8:4b:0f:bb:88:b8:aa:e4:3a:ab:4d:91:
c4:89:c1:17:31:25:6b:9c:3d:0e:19:9c:24:1e:5d:c3:44:55:
9c:3b:1e:42:e8:68:14:a9:72:f1:e3:64:2c:e9:6c:d7:59:29:
3c:55:97:21:f6:70:98:11:01:40:57:94:41:4e:4e:e5:b0:75:
fd:60:41:f6:97:f2:4e:58:33:7f:a9:a6:b2:ac:6f:ff:15:0c:
e3:b2:7b:01:15:0c:99:1a:ec:87:76:a2:b6:b6:04:ce:d7:37:
7d:32:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:20 2026 by rpki-client