Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: hZVOYvNRpSxreL9VWG0dNPzseJ9dzGKUxk/ZJLmP9KQ=
Subject key identifier: 62:C6:CC:AB:0B:F7:7F:A5:E5:EA:B8:3F:0A:A0:CC:50:24:D3:9C:52
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019D99D096ABB6BB331C231AA692CC3E5D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: WsbAXN2fTjiQokwaiYrjs4xcSHaMc0I0kQkWWO4TUhA=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:96:ab:b6:bb:33:1c:23:1a:a6:92:cc:3e:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=62c6ccab0bf77fa5e5eab83f0aa0cc5024d39c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:19:9c:1e:a5:72:37:0b:ed:22:c6:61:e1:
57:26:db:ad:d4:e8:d3:5f:75:09:0f:a4:9c:81:db:
a7:bc:f7:fb:8c:6d:fc:51:fc:c2:fb:bd:8e:d1:4a:
61:a7:41:92:45:57:4a:17:29:f9:9c:1c:97:77:ad:
7a:ea:89:65:7e:06:bb:f1:38:54:3f:a8:c7:40:3a:
6d:e5:ff:3c:9a:1e:ad:7e:ef:31:46:cd:87:19:cb:
8e:8c:82:42:cb:15:63:5b:24:a1:3f:8c:35:ed:bc:
93:ef:d0:b7:16:f4:47:53:f2:67:fc:ff:2a:4a:4b:
17:0a:5e:c3:e5:3f:33:5e:db:94:fb:13:f9:4a:f3:
b3:1b:9a:23:be:b9:b5:35:21:66:0e:70:c7:be:fa:
dd:de:cd:1f:31:10:ee:d2:1b:93:a9:a1:1f:97:51:
f0:63:7c:e9:32:fc:5f:d5:19:b0:ec:f1:93:cb:54:
23:7d:e2:61:a2:e1:a8:cc:a3:b4:43:4e:ab:0d:10:
07:c6:05:f9:52:94:6e:05:00:5b:1d:c4:aa:fd:b5:
b5:2c:d3:f5:09:e4:0e:3f:d4:ab:71:d5:57:d5:56:
0b:bd:b8:55:6e:c3:a4:a2:53:d0:b5:a8:bc:3b:60:
50:9f:7d:bc:63:3f:5d:50:bd:91:c7:7a:f8:40:f2:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:CC:AB:0B:F7:7F:A5:E5:EA:B8:3F:0A:A0:CC:50:24:D3:9C:52
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:d7:a7:e7:d2:67:cd:2c:39:09:65:65:b8:f3:42:17:67:
6d:ce:78:ac:5b:fe:3c:db:c1:0e:43:3b:fc:43:52:5e:cb:62:
ee:52:fc:ec:a1:38:90:31:85:82:5f:96:1b:b1:d1:c8:3e:88:
be:b8:72:3c:72:98:a4:5d:06:17:0f:8f:f6:47:ff:25:5f:3d:
3a:fd:10:41:72:2a:9b:ca:7c:8c:9a:d2:b9:91:ee:38:a9:be:
ae:90:8d:e1:bd:52:8d:a1:91:4e:3b:fb:26:66:0a:77:48:0a:
f5:16:a0:07:fa:7d:31:30:3d:38:ce:5a:96:e5:2e:96:74:4e:
52:98:1a:92:74:b7:71:29:f5:26:bc:eb:17:74:a7:a9:50:9f:
5c:a4:2c:cf:56:95:4f:58:d0:a8:fe:29:81:ea:be:b3:cb:ac:
df:67:fa:a6:54:ec:d7:89:7d:26:27:a4:87:c7:01:9e:ed:00:
eb:9b:8f:9a:64:4d:9b:53:01:65:47:e9:fd:0c:e8:95:e3:d8:
ea:7f:4a:98:0d:1e:cb:29:8e:0a:f9:b5:9c:32:50:59:99:10:
40:34:5a:ef:0f:09:1d:ce:56:1e:dd:1a:a8:04:25:4a:e6:fc:
91:c1:a2:88:61:3e:8a:9f:a8:1b:99:bc:db:9b:18:cc:4d:57:
1c:86:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:03 2026 by rpki-client