Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: OZU4jFmBNTX4+rfLMtVCEg6L/jfnQDSCeQU16KOfpeo=
Subject key identifier: 0A:F0:83:D5:CA:A1:DB:80:B7:28:1B:97:39:37:F7:D9:B7:F6:93:0B
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019DA30A69D3E3546C40B316599C15623858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1784
Signing time: Sun 19 Apr 2026 00:01:01 +0000
Manifest this update: Sun 19 Apr 2026 00:01:01 +0000
Manifest next update: Mon 20 Apr 2026 00:01:01 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: 80guRE1khuyslVA+CUxoOrYBtoggeTMlEQZIVBqNRmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:69:d3:e3:54:6c:40:b3:16:59:9c:15:62:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Apr 19 00:01:01 2026 GMT
Not After : Apr 20 00:01:01 2026 GMT
Subject: CN=0af083d5caa1db80b7281b973937f7d9b7f6930b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dc:00:06:96:e8:9e:dd:6e:4e:91:ee:56:8c:
69:ab:26:c8:e9:7a:c2:be:84:3d:76:f8:da:87:ad:
f9:e9:9d:74:d0:75:35:7c:52:28:49:6a:8b:67:0c:
a5:15:52:41:ef:81:5a:eb:8c:3c:ae:8f:69:32:4f:
e7:b8:62:5f:b3:4a:cc:97:51:38:09:da:52:de:ae:
71:e7:a3:a1:9d:eb:9b:cb:a3:7c:70:89:e9:93:66:
b7:a0:1d:4f:a3:be:08:37:1b:52:0a:30:3f:05:9c:
7a:ce:4f:68:2d:c5:f4:d8:bc:30:6e:b1:bb:2e:a2:
4d:f3:c1:05:83:ce:d2:25:d7:ef:1c:80:9a:c9:8a:
3c:58:65:34:00:d5:4a:bd:b6:c7:71:91:52:80:a3:
0b:c3:99:91:bb:a0:74:63:34:6c:8e:d6:8b:48:45:
b1:d2:48:d9:01:c1:ce:04:ca:cf:fe:98:99:37:12:
d8:7c:96:88:6f:48:9d:d6:42:43:bb:9f:63:12:38:
42:97:72:ae:7d:c9:6a:0b:cb:f2:1c:9e:74:b8:6a:
09:7c:85:e2:49:55:e2:e8:a3:69:89:7a:13:9e:1d:
57:e9:f2:a3:ca:2d:ed:f0:f8:db:a6:00:82:a0:84:
2b:eb:30:64:51:af:59:65:e7:d9:49:14:4f:2f:0c:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:83:D5:CA:A1:DB:80:B7:28:1B:97:39:37:F7:D9:B7:F6:93:0B
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f7:86:a6:34:a8:6c:ca:8e:2d:d1:30:70:a7:ff:5b:22:84:
a9:b6:85:21:d7:4d:8e:c3:5c:fd:5b:5b:e8:7c:ed:25:c8:16:
ce:47:ec:2e:7b:3d:db:4d:94:fe:ff:7c:e1:02:62:79:0a:18:
ca:bc:07:9c:e1:cb:52:71:a1:f2:26:0f:c0:7b:02:4a:52:67:
9a:2c:09:ec:98:66:6b:5c:40:66:12:91:92:d8:06:64:17:34:
7e:a6:23:3a:50:b8:18:32:a8:c9:2a:96:b1:0a:fa:4c:c2:cd:
26:b6:24:6e:b2:5c:bd:53:8b:0e:be:0b:b8:fa:54:7c:0c:b3:
25:77:3a:e1:f3:e6:ce:a9:4e:3e:09:b0:f1:4b:5b:4c:2d:44:
cc:70:f3:24:5c:da:31:74:39:82:82:a5:1d:73:3c:13:5e:8a:
d3:63:29:01:c7:f4:28:a9:37:36:94:2e:2c:2d:5f:c7:db:0c:
37:25:cb:c6:9e:f4:88:7b:bf:03:fd:4d:54:76:89:ee:1b:f3:
16:04:70:7d:07:ac:5f:fa:04:8c:8b:66:00:ee:87:74:47:10:
08:76:a1:7d:1a:28:3f:6c:27:9b:4e:e2:7f:0d:31:75:e4:f4:
04:93:f7:0b:7d:fa:48:ad:03:c7:1e:93:06:bc:47:e4:68:25:
a4:78:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:32 2026 by rpki-client