Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: BrdVNXo9T6LjXHSQtqRV4GTC8xkQJW62P5WRmKm37Y0=
Subject key identifier: 94:FC:FC:77:3E:CE:C0:2C:65:61:F1:C1:43:68:B5:47:F8:9A:06:A4
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019EC148990B214B98BA92154D3BF10D3EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 14:00:20 +0000
Manifest this update: Sat 13 Jun 2026 14:00:20 +0000
Manifest next update: Sun 14 Jun 2026 14:00:20 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: 9/V4TwV1CNnVQoEfU2QaqkUMLtXKs2JxykD7FW6CYzE=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:99:0b:21:4b:98:ba:92:15:4d:3b:f1:0d:3e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jun 13 14:00:20 2026 GMT
Not After : Jun 14 14:00:20 2026 GMT
Subject: CN=94fcfc773ecec02c6561f1c14368b547f89a06a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:62:8d:f7:4c:62:e6:ae:89:96:99:11:26:
ee:94:61:a8:5b:7a:cf:16:b7:3b:09:b9:1d:c3:17:
25:ae:d8:23:24:bd:4d:50:ad:4c:9f:de:b1:06:00:
e3:ec:f3:2b:ab:28:02:72:e1:d0:3f:66:b5:ba:24:
62:1b:b8:55:f9:e1:72:d8:cb:59:11:f5:fc:41:c3:
59:3d:05:a7:70:dc:d3:5a:d9:3a:1e:45:96:c5:e8:
e0:1e:38:e3:45:11:0b:2c:b3:69:8c:e2:c6:09:9a:
ac:52:f4:a6:9d:38:21:de:b2:15:4f:e1:0b:f7:1c:
47:3c:62:83:5d:8f:47:ec:5b:bd:a7:72:ac:63:73:
6b:0a:eb:b3:55:dc:08:d8:3d:6d:91:48:ff:4b:83:
b8:48:5e:e6:f0:57:d9:87:89:6e:4d:c4:56:a1:9d:
47:07:8a:97:a1:95:55:a7:7b:59:2f:8f:90:54:a1:
55:b4:b6:48:39:53:69:3d:96:3f:ea:c2:9a:9e:d6:
20:47:bd:db:7a:39:e5:63:11:b9:04:4a:41:03:8c:
ef:79:96:ca:be:1e:13:31:6c:4a:57:be:bd:cc:18:
70:22:3a:da:65:da:51:55:4e:ab:eb:d7:87:2c:e4:
ab:51:c0:1a:b1:8f:d5:1e:42:b0:ae:ef:d9:0a:69:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:FC:77:3E:CE:C0:2C:65:61:F1:C1:43:68:B5:47:F8:9A:06:A4
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:96:3e:13:12:f4:53:63:ca:e5:ae:30:83:a7:5b:76:49:
ce:78:3b:bb:d7:64:78:84:2b:c8:83:23:36:09:60:b6:2d:ee:
ca:d9:13:fc:db:3f:30:5a:8c:05:7a:2e:83:f7:43:c5:82:f5:
b6:99:1d:11:25:af:b2:ff:e3:7b:60:fe:53:ac:a1:f1:f2:7f:
32:91:96:3e:fc:54:6a:34:0a:b8:8d:78:8d:11:31:24:9e:7f:
6d:bd:ae:00:72:e3:31:b9:93:e4:38:35:77:12:b3:c7:1b:b4:
67:97:89:95:53:c1:7c:6a:15:88:6a:91:97:90:d2:4d:36:9d:
93:94:12:9f:d0:5e:e9:99:e2:9b:ff:80:6c:38:7c:48:cd:bd:
fe:cd:01:a7:6e:82:c1:f4:9a:3b:9d:6f:f2:e6:12:08:98:0b:
07:83:2f:a0:30:2a:45:0d:23:c3:61:77:52:a8:67:8d:b0:9f:
a6:a0:34:a4:f3:8e:bf:88:89:6e:5c:19:e7:47:0a:8e:2c:42:
06:b1:e0:d7:ec:1f:1d:24:83:46:8f:80:79:79:6c:62:e6:52:
51:28:03:a2:51:d6:85:5d:53:b1:b3:ea:0a:d6:84:8a:d3:e0:
cf:96:2e:be:df:b8:14:ba:7a:6c:e6:80:c0:db:d4:78:18:42:
ba:59:2c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSJkLIUuYupIVTTvxDT72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5
ODUzMjQwHhcNMjYwNjEzMTQwMDIwWhcNMjYwNjE0MTQwMDIwWjAzMTEwLwYDVQQD
Eyg5NGZjZmM3NzNlY2VjMDJjNjU2MWYxYzE0MzY4YjU0N2Y4OWEwNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+VijfdMYuauiZaZESbulGGoW3rP
Frc7CbkdwxclrtgjJL1NUK1Mn96xBgDj7PMrqygCcuHQP2a1uiRiG7hV+eFy2MtZ
EfX8QcNZPQWncNzTWtk6HkWWxejgHjjjRRELLLNpjOLGCZqsUvSmnTgh3rIVT+EL
9xxHPGKDXY9H7Fu9p3KsY3NrCuuzVdwI2D1tkUj/S4O4SF7m8FfZh4luTcRWoZ1H
B4qXoZVVp3tZL4+QVKFVtLZIOVNpPZY/6sKantYgR73bejnlYxG5BEpBA4zveZbK
vh4TMWxKV769zBhwIjraZdpRVU6r69eHLOSrUcAasY/VHkKwru/ZCmn/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT8/Hc+zsAsZWHxwUNotUf4mgakMB8GA1UdIwQY
MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt
ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4
LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKmWPhMS
9FNjyuWuMIOnW3ZJzng7u9dkeIQryIMjNglgti3uytkT/Ns/MFqMBXoug/dDxYL1
tpkdESWvsv/je2D+U6yh8fJ/MpGWPvxUajQKuI14jRExJJ5/bb2uAHLjMbmT5Dg1
dxKzxxu0Z5eJlVPBfGoViGqRl5DSTTadk5QSn9Be6Znim/+AbDh8SM29/s0Bp26C
wfSaO51v8uYSCJgLB4MvoDAqRQ0jw2F3UqhnjbCfpqA0pPOOv4iJblwZ50cKjixC
BrHg1+wfHSSDRo+AeXlsYuZSUSgDolHWhV1TsbPqCtaEitPgz5Yuvt+4FLp6bOaA
wNvUeBhCulksjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:22 2026 by rpki-client