Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: rHQrBEO4YJ7PlTor3SGzmhgXXBixL5PNMp+INvVES5M=
Subject key identifier: C8:5F:AD:BE:22:01:54:F6:3C:53:14:14:B9:EE:B7:BD:FA:72:E5:3F
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019EBF5A37490FA50A4C2A150F9AB87DD8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 05:00:20 +0000
Manifest this update: Sat 13 Jun 2026 05:00:20 +0000
Manifest next update: Sun 14 Jun 2026 05:00:20 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: QonncsGZoJ9b3tE3m1s9FcWwr0X9K3XXpqENjhs4XEY=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:37:49:0f:a5:0a:4c:2a:15:0f:9a:b8:7d:d8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jun 13 05:00:20 2026 GMT
Not After : Jun 14 05:00:20 2026 GMT
Subject: CN=c85fadbe220154f63c531414b9eeb7bdfa72e53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:24:39:0b:06:09:4b:bf:d1:b0:a4:67:fc:
16:f7:dc:98:c4:e3:c3:23:fd:5f:4d:2e:d6:0d:af:
a7:31:57:e9:b3:2c:0b:12:0e:91:a5:e6:8c:47:9e:
d2:0e:1a:0a:ec:65:25:88:97:77:14:f2:a6:0f:a2:
d2:c8:32:65:81:e7:d6:a6:82:8f:93:45:c5:d4:85:
da:e0:b8:e5:67:e2:dd:7e:a6:b5:2d:a4:2e:6d:db:
05:ba:a7:97:92:eb:05:b0:70:f7:96:56:14:34:f4:
ce:1b:ea:ca:ed:63:35:f2:3d:a9:b8:22:a2:4b:33:
84:49:d7:77:dc:e6:b7:4a:e2:81:b4:bb:77:39:d6:
c5:84:7a:6a:d0:23:99:91:f0:69:c4:e4:39:44:f7:
f9:72:54:a7:56:ac:fe:ae:66:22:d8:64:bb:c6:4c:
1e:17:ea:e0:0c:58:23:03:a1:28:b3:cd:69:e0:45:
3f:d3:ec:6a:ad:bf:27:07:29:42:d8:cd:4c:ec:76:
8c:77:04:db:8f:2d:c1:71:3c:05:32:03:76:10:db:
20:15:f5:04:17:de:cf:e4:3b:9f:1c:c1:3f:04:65:
0e:e4:e9:96:c8:ba:88:17:ca:9c:0d:df:33:94:94:
a0:89:16:bc:9c:70:2b:41:99:f2:bb:1c:ee:2f:69:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:AD:BE:22:01:54:F6:3C:53:14:14:B9:EE:B7:BD:FA:72:E5:3F
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:97:42:a8:b1:b3:9b:d9:36:e3:89:eb:80:f9:7e:74:22:73:
1f:93:d1:08:79:5b:df:d5:df:ac:7a:ae:00:c9:6b:30:46:62:
d3:9f:f2:d5:b4:9e:ae:da:ce:8d:ea:78:ea:af:83:dd:4c:dd:
bb:98:28:71:b2:a9:5c:02:1d:1b:11:7c:5e:69:94:bd:57:30:
2c:f1:fc:68:84:e1:5f:95:47:86:47:ea:e6:bd:83:0b:1f:4c:
82:e3:47:d0:8e:23:ad:87:a9:bf:41:cf:cd:54:b6:04:20:cf:
98:22:79:50:46:e3:52:76:91:4f:59:90:c6:52:96:4b:c1:e1:
32:1d:6f:b3:71:d8:28:74:67:82:29:5b:95:6b:96:eb:a7:08:
ea:b9:8b:cb:d4:2e:f2:f1:d5:81:7b:17:c2:dd:bd:05:08:bb:
94:ea:40:12:92:0c:59:cf:f2:24:6c:97:77:d2:3f:78:fb:ea:
99:b6:b5:7b:dc:a4:5a:bb:ad:42:68:65:63:5c:a7:b4:8b:65:
49:87:0d:2d:e2:da:12:aa:39:a2:62:ce:0d:1a:13:05:4b:a6:
ea:a4:16:5b:a0:87:aa:3d:67:f3:50:82:22:21:5a:5c:db:13:
99:d0:12:c3:85:c1:a7:ec:e8:e9:81:20:7a:4d:e4:53:1e:1b:
75:d4:6f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WjdJD6UKTCoVD5q4fdj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5
ODUzMjQwHhcNMjYwNjEzMDUwMDIwWhcNMjYwNjE0MDUwMDIwWjAzMTEwLwYDVQQD
EyhjODVmYWRiZTIyMDE1NGY2M2M1MzE0MTRiOWVlYjdiZGZhNzJlNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJwkOQsGCUu/0bCkZ/wW99yYxOPD
I/1fTS7WDa+nMVfpsywLEg6RpeaMR57SDhoK7GUliJd3FPKmD6LSyDJlgefWpoKP
k0XF1IXa4LjlZ+Ldfqa1LaQubdsFuqeXkusFsHD3llYUNPTOG+rK7WM18j2puCKi
SzOESdd33Oa3SuKBtLt3OdbFhHpq0COZkfBpxOQ5RPf5clSnVqz+rmYi2GS7xkwe
F+rgDFgjA6Eos81p4EU/0+xqrb8nBylC2M1M7HaMdwTbjy3BcTwFMgN2ENsgFfUE
F97P5DufHME/BGUO5OmWyLqIF8qcDd8zlJSgiRa8nHArQZnyuxzuL2kaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhfrb4iAVT2PFMUFLnut736cuU/MB8GA1UdIwQY
MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt
ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4
LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJdCqLGz
m9k244nrgPl+dCJzH5PRCHlb39XfrHquAMlrMEZi05/y1bSertrOjep46q+D3Uzd
u5gocbKpXAIdGxF8XmmUvVcwLPH8aIThX5VHhkfq5r2DCx9MguNH0I4jrYepv0HP
zVS2BCDPmCJ5UEbjUnaRT1mQxlKWS8HhMh1vs3HYKHRngilblWuW66cI6rmLy9Qu
8vHVgXsXwt29BQi7lOpAEpIMWc/yJGyXd9I/ePvqmba1e9ykWrutQmhlY1yntItl
SYcNLeLaEqo5omLODRoTBUum6qQWW6CHqj1n81CCIiFaXNsTmdASw4XBp+zo6YEg
ek3kUx4bddRvsw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:33 2026 by rpki-client