Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: ywHRfD3AMv/fQnRPkFg7v1RsPDHyh7Jro2dL4SfGR08=
Subject key identifier: 08:01:67:BB:36:DB:3F:4F:AC:2E:2F:8F:0A:73:14:1E:D3:42:49:42
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019CAC46A2C222DE11B7430CB01E27556FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 02:00:36 +0000
Manifest this update: Mon 02 Mar 2026 02:00:36 +0000
Manifest next update: Tue 03 Mar 2026 02:00:36 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: KXlX15MQDQISICZ5JoPrjDh5+jcZY52C+8383OUew7A=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a2:c2:22:de:11:b7:43:0c:b0:1e:27:55:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Mar 2 02:00:36 2026 GMT
Not After : Mar 3 02:00:36 2026 GMT
Subject: CN=080167bb36db3f4fac2e2f8f0a73141ed3424942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:5f:9d:81:2d:ac:73:59:02:7b:59:72:2c:
24:ff:c6:13:f1:87:15:37:07:c7:a7:e0:27:42:db:
02:16:2a:c8:0f:9f:c7:bb:3e:3a:de:66:2c:14:79:
6f:94:72:96:9a:cc:d4:ad:1a:82:03:a7:eb:5d:a0:
f9:cf:dd:97:21:53:26:7a:69:87:8c:b6:93:d6:04:
21:95:cd:d0:45:63:a2:52:69:7d:a1:8f:71:6d:1b:
4c:25:c1:41:5d:dc:99:51:48:09:ad:fd:bf:08:ac:
3c:af:51:2a:b4:8a:a5:84:e6:17:0c:89:34:42:fa:
6b:dc:ac:06:72:ef:3f:be:33:fc:69:d5:d8:cf:5c:
16:3e:5d:ea:e3:b7:cf:b4:3b:d6:ac:43:03:00:eb:
d2:fc:4c:61:90:15:e8:97:82:72:95:97:73:7c:e7:
5a:af:ce:02:45:6d:95:72:69:ff:71:a8:b9:6c:c6:
36:29:e2:ed:eb:a0:b5:4f:12:3d:ad:75:0c:78:b5:
6b:24:4e:ac:38:37:21:bb:3e:01:b2:ae:21:f7:ad:
e2:b3:5c:16:4c:af:2b:a5:45:8e:ad:12:a1:22:3d:
58:ca:39:bf:50:00:7d:46:1c:73:84:55:4e:60:99:
5d:3f:07:82:14:6b:67:b4:69:40:4a:27:79:c4:85:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:67:BB:36:DB:3F:4F:AC:2E:2F:8F:0A:73:14:1E:D3:42:49:42
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:79:69:e4:61:1b:dd:9e:1d:7d:65:1c:89:6d:65:17:96:
7e:75:68:ab:be:2d:51:99:1d:67:40:bb:df:df:4c:d3:3f:7e:
b7:f9:a5:c6:58:7a:99:2c:ce:7a:b8:97:ae:e3:d5:68:cd:33:
5d:2d:6d:c9:d7:7a:6e:c9:1c:8c:22:2f:0f:21:25:5e:d3:e5:
b6:d7:7f:3f:c9:ed:95:94:76:a7:91:80:a8:01:df:71:fd:be:
49:04:8c:b9:be:9a:42:71:4a:f0:10:fb:ba:4f:19:00:f9:dd:
90:d3:bc:35:ae:cc:8b:72:81:fd:78:ed:04:62:ee:8b:d8:a1:
dc:e4:f8:b2:f8:4e:45:b6:14:28:1a:c0:3b:24:4d:d8:aa:99:
92:49:38:20:5f:37:e5:45:6e:01:e0:40:58:3f:a8:a5:09:87:
4c:da:b2:2e:7b:e1:16:5f:39:a7:17:04:f4:73:81:42:dd:48:
87:0a:32:12:7b:75:fb:b8:29:bd:3e:30:d8:36:b5:28:46:52:
99:c0:3c:63:90:c3:93:50:97:ae:f1:25:68:fa:40:5d:24:7a:
a5:ce:54:62:b9:01:3a:4b:19:48:77:a9:76:9f:2e:d5:1e:ab:
f2:ee:4d:db:d1:bf:03:b1:7a:87:21:0b:0f:1c:ce:f6:4d:17:
e6:02:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:25 2026 by rpki-client