Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
File: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft (raw, json)
Hash identifier: f28g0PUpUjPFj5DeCaErA0A0XBPQgJvuWaejvM4HXOQ=
Subject key identifier: 6E:2A:76:A0:82:8B:78:CE:E1:87:4B:F1:E0:18:66:49:A1:0C:74:21
Authority key identifier: E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
Certificate issuer: /CN=e360387485e8cf7958cec936357502ff46657319
Certificate serial: 019FAC760BD2FB195D094B428955F0BBE46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:44 +0000
Manifest this update: Wed 29 Jul 2026 06:00:44 +0000
Manifest next update: Thu 30 Jul 2026 06:00:44 +0000
Files and hashes: 1: 42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl (hash: Wx2EugbYD3G7ZCSgr3O0Rp4ik6u0qodbG1B5TVesf+Y=)
2: E49_PkP793V5I4YZCHvag_165PI.roa (hash: UXhuh1q1LOISHVBMZXe7sQENj99zD9a6dTROADJKZCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:0b:d2:fb:19:5d:09:4b:42:89:55:f0:bb:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e360387485e8cf7958cec936357502ff46657319
Validity
Not Before: Jul 29 06:00:44 2026 GMT
Not After : Jul 30 06:00:44 2026 GMT
Subject: CN=6e2a76a0828b78cee1874bf1e0186649a10c7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:4a:70:00:ba:6d:fc:b0:86:b0:f4:ed:f3:
f6:b0:80:c0:5f:38:cb:fc:ac:9c:fd:46:5d:a7:29:
92:37:c0:9c:98:98:41:d5:4f:16:e6:50:01:4b:bb:
97:44:33:20:ad:bb:5f:5f:cd:50:66:61:12:3c:aa:
0c:31:60:c7:f3:f2:d4:17:7f:e5:8c:c3:cc:d7:a4:
01:59:62:ec:cb:35:68:9b:b8:af:55:e2:43:2c:7c:
7d:0b:b0:c4:a2:0d:3f:15:a9:df:35:19:36:53:ff:
b2:cd:15:9e:5b:67:7c:fd:1e:68:69:f6:fd:53:82:
19:67:b7:3e:85:52:01:0f:ae:44:6e:d2:1b:1c:36:
f9:8a:7e:54:5c:9c:06:52:7a:fd:75:32:9e:4e:aa:
75:84:55:aa:61:65:55:57:b8:fb:cb:3b:54:4a:5a:
b4:99:ae:6f:aa:ae:60:14:f1:50:90:a5:10:c1:bd:
5d:62:52:fe:d0:15:6a:85:76:7e:7b:59:b9:13:30:
c7:de:c3:36:46:33:b5:8a:41:4c:4a:21:53:b4:6a:
6f:a6:3b:75:86:4d:ee:ce:3a:8d:9f:e9:d4:5d:cc:
da:29:ab:35:87:08:dd:b2:5a:a5:5c:10:44:93:0b:
74:82:3d:11:be:c8:55:c4:43:3d:20:57:08:66:b6:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:76:A0:82:8B:78:CE:E1:87:4B:F1:E0:18:66:49:A1:0C:74:21
X509v3 Authority Key Identifier:
keyid:E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8b:66:8c:cb:33:dd:ed:c1:15:ac:75:71:84:1c:66:f6:42:
dd:e2:59:73:9e:15:b5:7b:05:a9:c8:bf:ee:d8:7d:fb:65:45:
75:84:72:a4:da:66:44:41:83:ff:cd:a0:1a:2b:2e:ee:ac:6c:
5a:aa:d7:bd:85:19:da:70:6c:93:cd:f0:c4:2d:d2:62:72:b9:
97:4a:57:32:92:f3:0b:10:ff:19:d9:7d:8c:05:5b:4e:5d:f1:
c8:d6:bd:ec:aa:10:6f:4d:6e:59:ea:14:3c:bd:0f:fb:00:47:
63:11:7a:81:bd:f4:ae:59:09:03:5a:b0:b0:82:1b:8c:a8:66:
1b:8d:d4:e4:bd:e7:97:ca:13:c0:4d:14:0a:be:b7:a0:46:65:
36:8a:b9:d4:eb:0d:22:a1:30:d4:9c:6e:80:2f:92:f0:81:b8:
ee:cc:a5:b8:20:eb:af:c8:6e:70:a8:4f:8d:25:9d:9d:d1:81:
52:07:0a:13:e8:c4:bb:be:9c:99:a5:57:13:3b:27:04:5a:8a:
07:1c:62:c9:0c:ac:a5:2e:4b:53:c7:92:86:27:93:28:ca:f1:
89:6b:19:b0:94:e3:6d:46:62:7f:c2:25:70:f3:de:6a:c9:3a:
71:e3:a0:f2:fd:db:e6:e4:61:c4:aa:4b:83:a6:5a:78:cd:51:
7b:f6:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:03:01 2026 by rpki-client