Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: vZnPa/dh2QMcKOY+bq0pwMZTeM0nvFhKHHdxe+zLfvo=
Subject key identifier: 1C:9F:01:AA:34:63:F8:3F:93:3F:F1:07:A7:A3:B3:81:97:27:B3:5E
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 01A0C47CB6622F72A65380B1FD0A35076FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1923
Signing time: Mon 21 Sep 2026 15:01:42 +0000
Manifest this update: Mon 21 Sep 2026 15:01:42 +0000
Manifest next update: Tue 22 Sep 2026 15:01:42 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: Gz4CvZU9xydzcbjML/wtM3BpWjzEMIYs7xdAGNi53F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:b6:62:2f:72:a6:53:80:b1:fd:0a:35:07:6f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Sep 21 15:01:42 2026 GMT
Not After : Sep 22 15:01:42 2026 GMT
Subject: CN=1c9f01aa3463f83f933ff107a7a3b3819727b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:84:f3:06:85:e5:0a:8c:95:54:80:bf:bd:
e9:95:fe:c7:63:38:bb:a2:a5:fb:bf:a1:f8:2d:2e:
71:e6:7e:5f:75:45:7b:d5:f5:7f:a7:09:0b:02:4e:
9b:b1:9c:ae:ea:5c:d2:2c:fe:1e:2d:2b:4d:c3:5d:
62:f5:fc:cf:0c:20:e7:bb:79:ee:98:48:bc:3f:58:
35:c0:a3:34:4e:db:33:7a:b3:4f:52:d1:97:ac:d5:
5f:01:37:c9:62:0b:6d:a5:3e:57:45:80:bb:69:3e:
96:e2:a8:de:d2:48:b1:12:6e:53:b1:27:05:80:8a:
db:9e:17:d1:c7:bd:b4:03:85:79:23:72:3a:98:b9:
d2:4a:01:6e:e2:94:56:47:26:1a:c3:cf:5d:a1:4f:
40:12:2c:89:2f:92:89:e2:05:5b:d3:e2:6d:23:c9:
70:96:fc:40:25:17:eb:9f:da:71:6c:ba:db:ee:23:
f1:da:9b:aa:09:94:89:b5:8b:91:e1:32:d7:c2:9e:
42:fa:7c:c9:fe:c3:76:97:d3:d8:df:d1:bf:c0:af:
fa:eb:c5:cb:02:20:78:88:2c:a7:49:63:dc:12:ec:
f5:c2:a5:e9:59:6f:13:7f:15:d8:34:75:a0:dc:d6:
fb:97:9d:c0:31:04:a0:76:75:b0:cf:9b:d3:4c:73:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:01:AA:34:63:F8:3F:93:3F:F1:07:A7:A3:B3:81:97:27:B3:5E
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c2:37:89:02:09:da:f0:c6:f9:08:14:cc:02:39:63:63:7a:
dc:30:86:4c:d5:57:83:39:1f:9b:a4:ae:7a:32:bc:49:9d:56:
a0:56:6f:8e:5d:8e:27:5b:65:ca:06:aa:40:32:0f:69:2b:cc:
68:6b:97:bf:1e:99:eb:87:3f:1d:e2:5d:5a:9a:f2:5a:c2:a8:
ad:e8:6c:3a:8f:ef:1b:7e:83:3a:12:dc:db:2e:35:78:68:84:
f6:76:67:ca:88:31:2e:4e:1c:21:09:a6:2f:9b:13:f6:1d:fc:
b8:28:01:87:2a:06:c5:60:0e:53:26:24:64:39:d8:0f:76:ff:
2c:6b:2c:a7:cc:60:07:59:3d:b0:1d:08:8a:85:ad:c9:1b:ec:
94:63:6f:4c:88:70:83:e2:22:2e:22:84:a6:10:d8:50:9d:6e:
38:0b:83:e0:d2:30:4d:5e:34:9e:50:8b:dd:f1:be:56:a3:78:
c7:dd:c5:c2:14:bf:e0:df:a2:9b:c8:92:54:66:9b:ab:83:85:
44:6a:80:90:76:d4:2f:e2:31:fb:0d:23:ab:92:01:de:09:47:
b8:54:4d:02:1c:68:b8:02:5f:3d:ad:6e:85:5e:32:0c:4e:96:
6b:54:f7:41:0a:43:82:73:54:21:ff:fa:4d:53:e9:0a:78:f7:
32:c5:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:47:36 2026 by rpki-client