Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: LHKw2OJzyh8SgCp4X981TdkE23K0pWTT5Gqo30xUl1A=
Subject key identifier: 97:A5:CB:26:09:9E:B7:DB:6A:60:A3:40:53:7C:F9:FE:63:3F:45:F4
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 019CADC78350733E71B2C03B985CC5E9B473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1705
Signing time: Mon 02 Mar 2026 09:00:59 +0000
Manifest this update: Mon 02 Mar 2026 09:00:59 +0000
Manifest next update: Tue 03 Mar 2026 09:00:59 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: 3IlIxwmJB6s565hun943hdZV8M/63WNT+AmVzL3gOoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:83:50:73:3e:71:b2:c0:3b:98:5c:c5:e9:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Mar 2 09:00:59 2026 GMT
Not After : Mar 3 09:00:59 2026 GMT
Subject: CN=97a5cb26099eb7db6a60a340537cf9fe633f45f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:8a:d5:fa:51:64:5e:d7:32:7b:f6:fe:69:
6c:5e:ad:4a:02:89:0d:ba:22:5f:e9:a4:7a:e7:7a:
4e:e1:a6:c0:e8:3a:b3:9c:ca:09:9f:f3:ab:15:d5:
2e:14:b1:d9:6f:20:15:38:ad:69:e4:ed:66:8a:72:
e2:e3:0f:04:2d:01:46:19:87:2f:48:13:4e:9b:d3:
82:5a:37:3b:a0:9b:93:11:63:28:61:14:e1:1d:89:
4d:b0:84:6c:82:63:4f:4b:c1:d9:f7:a2:4f:f3:3a:
b6:53:0d:f9:60:e8:04:bf:12:d3:ee:46:e2:67:19:
e6:42:67:4a:7e:42:7f:57:eb:53:03:82:dc:7c:34:
10:52:28:19:f4:7e:2b:67:d1:a8:7c:76:98:78:14:
b9:aa:7d:83:63:47:a6:45:f3:66:e3:ec:50:80:72:
44:6e:bf:dc:de:80:72:79:9f:aa:5b:90:96:2c:9a:
2d:9d:92:ab:33:e1:5d:63:46:68:2d:38:56:b6:33:
ac:86:85:f9:92:29:3b:fa:de:ad:f9:80:7d:56:14:
ec:18:c1:6d:ce:d1:e9:b4:57:bd:cc:4f:87:ea:84:
a9:85:be:76:89:b4:bd:6c:84:7f:26:6d:df:c3:b3:
dc:f9:5f:e7:d4:b4:c2:1e:2d:05:40:2b:10:4e:5a:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A5:CB:26:09:9E:B7:DB:6A:60:A3:40:53:7C:F9:FE:63:3F:45:F4
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:dd:57:fa:9f:1d:30:d7:09:0a:62:79:ff:ab:55:f7:65:
0e:53:ad:20:cf:4c:b0:8c:52:05:de:25:f2:0e:1c:24:6f:27:
6b:a2:85:b4:97:55:60:5c:54:96:45:f9:a2:d1:52:c3:33:d5:
ae:5e:7e:79:19:d7:30:8e:83:8d:53:1b:5d:d0:5b:9f:e2:56:
b4:66:1f:4f:25:ac:c6:7a:b0:8f:0d:50:8e:a8:3b:3d:bf:e9:
89:45:0e:90:54:b6:b2:50:a6:85:d9:2c:81:c9:94:78:41:f0:
1f:e4:4d:23:b6:a9:64:65:d6:72:b0:60:9f:98:d9:db:e8:0c:
19:68:6d:74:f0:f9:35:05:ca:08:4e:78:23:61:d8:01:e9:cd:
ca:96:8d:e9:77:c2:63:ba:71:41:b5:1f:65:38:5c:41:6e:54:
63:8f:67:6f:58:71:c8:bd:71:0f:bb:33:dd:a1:8c:01:5d:62:
ec:ac:a8:55:82:b5:49:56:5d:71:96:50:b0:0d:11:6a:a7:89:
5f:b9:fa:20:c4:97:49:4e:c3:19:85:53:9e:f8:12:83:3c:dd:
3d:c9:a3:b4:1b:eb:e1:6d:e5:c3:c5:3e:df:48:ee:6c:e0:59:
e7:52:51:b5:47:c5:bb:6f:78:53:b8:1e:55:0c:41:71:b3:e2:
a5:e6:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:03 2026 by rpki-client