Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: AhHK+swmmf6tFbxa+ezKJLJbHBbPsOiIMbqaUaZR5JQ=
Subject key identifier: 1B:63:5B:79:45:84:F4:1C:C7:B0:3C:C5:BC:15:4E:7B:F1:63:7B:5B
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019EBEEC9BCA6ED91C92AD42DBDA25A6343A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1817
Signing time: Sat 13 Jun 2026 03:00:37 +0000
Manifest this update: Sat 13 Jun 2026 03:00:37 +0000
Manifest next update: Sun 14 Jun 2026 03:00:37 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: y5uUEgorO8HKdqT3JoCcmrggZnM8pOw+F76QAC9lls8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:9b:ca:6e:d9:1c:92:ad:42:db:da:25:a6:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Jun 13 03:00:37 2026 GMT
Not After : Jun 14 03:00:37 2026 GMT
Subject: CN=1b635b794584f41cc7b03cc5bc154e7bf1637b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:1d:70:5e:8a:ce:24:2b:78:f0:e6:dc:ea:
a8:f9:13:e8:1f:b0:78:44:49:fa:8a:c2:fc:cb:97:
f2:97:48:f9:46:9d:9c:c1:3e:e8:e6:70:b7:8d:16:
36:1c:cb:03:03:8a:eb:58:98:d1:60:86:59:1f:29:
83:38:43:31:c1:86:79:e1:cf:2d:97:f1:ba:33:3b:
d4:a9:d2:be:f8:64:ba:c4:9a:15:d4:80:6c:92:52:
b6:1c:15:49:33:1c:63:b5:df:23:cb:f4:45:b6:35:
54:be:6d:52:60:fc:c8:57:43:28:d2:d3:f8:c9:c3:
25:2c:d1:87:d4:82:1f:5c:a2:88:7f:d8:1d:8a:b3:
0c:ff:0e:5f:53:a0:51:15:41:11:63:3d:b1:a0:a0:
80:d0:ce:50:3c:71:7a:b9:62:97:22:33:38:38:1d:
35:a6:61:f6:a2:b0:05:79:c7:9c:56:91:c2:1f:dc:
0d:06:48:ac:d7:83:34:52:17:6e:5a:9c:aa:2b:29:
4b:6b:bd:79:9e:47:a7:0d:9a:1c:fe:34:ae:a7:57:
13:a2:cc:dd:47:e0:37:0d:c3:bd:a8:3c:fe:9f:05:
d1:ca:99:ec:0e:b6:f9:a5:73:48:b0:ae:77:d2:86:
c6:5d:66:c0:53:0c:0f:bd:93:59:55:8e:1b:72:38:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:5B:79:45:84:F4:1C:C7:B0:3C:C5:BC:15:4E:7B:F1:63:7B:5B
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d0:96:2d:c0:30:8a:fc:58:24:90:bf:12:91:10:52:aa:79:
db:36:ec:47:79:46:b1:22:fa:7c:86:0c:4c:f0:57:84:ef:f4:
18:7e:9b:ac:a6:5c:02:fb:77:69:a1:dc:21:34:74:d6:74:9d:
a1:f8:a7:39:8f:97:d2:f9:e7:b6:81:16:2c:56:f7:c2:fd:46:
ba:1c:78:28:9f:9c:04:0c:c4:22:5a:ad:64:92:bf:de:9a:5b:
39:b9:d0:5c:7c:24:17:63:98:64:f5:a9:f6:09:be:df:4e:a7:
14:52:6c:24:94:1e:26:02:f6:78:bd:7c:71:1e:6c:73:9c:59:
3b:fd:f4:c4:a0:ed:58:9a:7e:32:46:a2:d0:3e:ff:16:f5:5f:
7b:fe:8c:ac:b6:ef:08:58:3e:55:22:7d:20:8e:b0:26:de:b5:
da:b0:1d:00:2b:9d:a5:b8:6f:d8:65:2f:c9:49:c0:01:e6:5e:
6e:8d:83:87:60:7e:e4:b1:c2:10:c2:98:44:b3:83:fc:f6:35:
bd:3a:e6:61:7f:45:3e:3e:b5:ba:09:97:d9:2c:fa:b1:d2:a9:
bf:29:8f:3d:87:1e:48:b3:8e:13:5a:8b:98:75:1f:45:39:3c:
e5:28:88:17:e9:4a:cb:70:65:f3:61:34:2e:47:87:c2:6c:5d:
17:bd:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:55 2026 by rpki-client