Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: NtwqznSw/dH1hWP9MiZ11UpxjDkLZnN+ZnwpLy4m5Sw=
Subject key identifier: 98:5D:EF:03:5B:21:B1:42:CB:94:19:7F:FF:52:BD:67:82:0E:D7:0B
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01A11BD0D1754A12D3361BA1BD8753816B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1A98
Signing time: Thu 08 Oct 2026 14:00:32 +0000
Manifest this update: Thu 08 Oct 2026 14:00:32 +0000
Manifest next update: Fri 09 Oct 2026 14:00:32 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: PWyurcEGfizJfhmtQ+ZNsufr8rZscStQVj4jmHQGBPc=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:d1:75:4a:12:d3:36:1b:a1:bd:87:53:81:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Oct 8 14:00:32 2026 GMT
Not After : Oct 9 14:00:32 2026 GMT
Subject: CN=985def035b21b142cb94197fff52bd67820ed70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:18:11:ba:46:79:bf:57:89:0c:59:1a:4b:
b5:f0:01:28:bf:2f:e7:e5:09:25:d2:85:3a:9d:92:
86:71:2d:59:89:17:3c:03:7e:4c:b2:fc:97:b6:d8:
4d:2c:00:68:64:f7:25:c8:df:46:33:05:d6:48:6d:
fc:58:11:ba:36:08:3f:db:b3:c7:fe:35:46:2d:c2:
ea:10:c4:56:4f:be:05:9c:48:52:75:9f:26:cc:15:
37:85:03:a0:88:55:24:cd:cb:6b:f2:fe:2c:b6:b9:
97:3a:f4:f8:1e:dc:0a:a0:98:fa:61:43:25:68:cb:
58:fd:d3:50:26:db:4e:65:c1:e0:61:78:51:39:ed:
10:14:b6:e3:85:90:a4:13:fe:4a:38:c6:51:43:b2:
75:5f:f7:fd:31:fe:0f:4e:78:64:64:79:57:83:01:
2d:ec:f6:bc:09:65:84:44:ae:6a:4a:c2:30:f9:68:
69:f1:c2:a8:89:d5:01:59:6d:0f:f2:7b:35:90:5d:
fa:dd:cb:1a:66:51:ba:60:76:6e:c2:b2:69:87:20:
98:b2:e1:10:0d:b0:61:31:05:1f:ca:8c:e2:e2:84:
16:23:27:62:fa:14:31:25:87:3f:aa:2b:43:82:66:
bf:83:81:b4:08:d8:26:ef:ed:21:be:5d:b0:8a:14:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:EF:03:5B:21:B1:42:CB:94:19:7F:FF:52:BD:67:82:0E:D7:0B
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3c:83:17:a1:1b:fb:3e:7f:b2:bd:68:70:d5:f9:c2:a3:32:
b6:bd:31:f6:72:c1:c8:04:7d:5b:91:c1:ea:06:2c:59:87:0f:
8c:be:7c:06:1a:b9:65:19:8b:26:52:f8:ca:c2:bf:38:67:3c:
19:ec:14:68:72:fe:7f:ea:b8:6b:cc:ca:39:92:28:1b:be:c9:
e9:4c:91:f7:94:19:cc:00:72:ae:6d:cc:1c:48:0c:7b:f2:69:
57:d1:81:e6:c4:7f:42:bf:e6:c4:93:ba:a3:37:b9:f8:a1:c1:
44:fd:8e:e0:bb:f2:bc:83:90:c9:a9:d1:b5:5d:3e:6c:fb:76:
59:5e:8d:0d:f7:51:a5:a9:be:89:6d:6e:43:b6:50:89:98:dc:
cc:97:92:39:50:ce:73:a7:7b:7a:2f:e6:10:ca:d1:3b:ed:10:
b2:80:8c:4e:f3:5a:bb:85:61:ef:cf:97:5c:78:c1:2d:0d:41:
61:4a:36:8d:6a:81:da:98:13:13:27:ba:af:38:9f:82:c0:fc:
7b:e2:74:d5:75:52:db:ff:0d:c5:4d:5e:ae:7a:ac:ca:bf:b8:
fb:89:ba:de:61:85:eb:01:af:79:35:6c:89:d3:9b:9a:08:07:
4a:15:69:2c:f4:10:e1:21:d4:dd:66:8a:8c:80:ea:18:60:6d:
59:e6:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:16:18 2026 by rpki-client