Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
File: 42629F1567D74FB19EFF142C6A6F5F93F3086333.mft (raw, json)
Hash identifier: fQwVDBsrp8J/SF9Tm+sRxagPkQB29PTd1rtBikTsmaM=
Subject key identifier: FB:3C:25:5D:79:09:07:86:43:E1:76:97:D6:AA:41:95:C8:7C:40:19
Authority key identifier: 42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
Certificate issuer: /CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Certificate serial: 3CAC3AA9960BAFA6C91CF87D94147F1DDCFFBE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
Manifest number: 92
Signing time: Tue 28 Jul 2026 08:55:15 +0000
Manifest this update: Tue 28 Jul 2026 08:50:15 +0000
Manifest next update: Wed 29 Jul 2026 09:22:15 +0000
Files and hashes: 1: AS205941.asa (hash: qSLqHe4eN5Cr+lwQDQM11ohujUCSqk6zPr63p/zqAiw=)
2: 42629F1567D74FB19EFF142C6A6F5F93F3086333.crl (hash: SdXHPQOlovng2PKhqA+gPQ6EFT/NewfiX1xj3aUefnU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ac:3a:a9:96:0b:af:a6:c9:1c:f8:7d:94:14:7f:1d:dc:ff:be:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42629f1567d74fb19eff142c6a6f5f93f3086333
Validity
Not Before: Jul 28 08:50:15 2026 GMT
Not After : Jul 29 09:22:15 2026 GMT
Subject: CN=FB3C255D7909078643E17697D6AA4195C87C4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:be:f8:1c:0b:44:cb:5a:7e:08:d9:9b:b2:
20:55:ed:89:2e:f6:f7:1d:37:fe:a3:08:26:41:c3:
bb:b6:cb:67:ed:a4:b0:c2:7c:a8:37:76:47:de:49:
f2:30:49:9a:7d:2f:e3:3e:72:ec:53:f6:cf:45:31:
ff:cf:01:89:43:54:36:75:65:4d:e7:7d:f5:5f:ac:
5b:52:0f:29:bf:7d:75:89:fb:04:fa:ce:a8:2b:f4:
fe:66:31:ed:b5:25:ee:63:78:bd:5e:15:aa:fe:b3:
5e:da:fb:79:2e:41:95:0b:78:97:37:80:d7:84:ea:
5b:7d:07:97:a6:23:65:42:b9:ce:60:ea:8c:00:49:
92:d4:10:a1:df:d1:d4:2c:63:cd:33:7f:ad:fa:89:
e4:e6:75:38:ab:ba:1b:44:84:49:3a:b9:1d:98:94:
e8:05:e5:0d:8f:4c:7d:d0:a6:f9:67:66:46:cd:ab:
92:5e:41:b8:dc:a7:c7:6f:c1:e1:a4:54:80:ba:c4:
e4:9b:09:fe:36:55:8d:56:1b:b7:04:4e:5c:fc:54:
ce:73:fa:e6:ce:73:9a:bb:d3:d1:51:60:5c:45:98:
d3:86:34:2d:8e:ee:70:ec:56:8b:66:b4:4b:38:83:
bd:ef:54:74:06:50:1c:f1:dc:a4:96:f7:43:ce:01:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:25:5D:79:09:07:86:43:E1:76:97:D6:AA:41:95:C8:7C:40:19
X509v3 Authority Key Identifier:
keyid:42:62:9F:15:67:D7:4F:B1:9E:FF:14:2C:6A:6F:5F:93:F3:08:63:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmKfFWfXT7Ge_xQsam9fk_MIYzM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/0/42629F1567D74FB19EFF142C6A6F5F93F3086333.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:49:73:a8:da:03:57:cb:10:19:4d:bc:44:9b:95:40:2e:9b:
73:03:33:88:2a:ad:38:dc:97:43:4c:9f:8f:0d:89:96:50:6e:
79:7a:fb:71:90:00:2d:ed:90:59:ac:d5:49:1c:70:cc:ad:90:
38:ca:b3:c1:2b:26:9e:16:24:e3:a3:e9:9f:5e:d1:6c:31:26:
2b:54:fe:66:7b:97:97:1a:22:fe:10:7e:be:2c:90:5e:b4:1d:
2c:92:af:59:ec:4f:1e:40:ee:7b:ac:aa:37:2d:e5:64:b1:ce:
78:f8:60:c3:c5:ee:7b:ee:c9:aa:f8:be:b6:a5:b0:88:d7:ff:
31:fb:8a:aa:63:e6:bd:8f:7d:ce:4e:37:c8:b4:96:31:88:71:
a5:e4:cf:f8:1a:ea:fb:6b:57:0e:ff:30:66:9f:8e:63:4b:56:
f9:2a:37:59:b9:90:d0:18:56:7f:75:c6:d9:c8:42:cf:2c:b5:
77:72:6a:9e:92:5e:4c:5e:74:6b:9a:a3:7c:63:44:b8:fd:11:
2f:b0:7c:0b:d6:ff:c4:9c:cd:35:c2:6e:54:60:d4:b1:a9:44:
8f:8c:b5:b8:d2:be:8b:21:03:de:76:b5:a9:55:bb:ed:29:a8:
da:5f:51:5e:a4:60:0c:c3:4d:59:29:a9:6f:f8:d6:99:41:fa:
be:07:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:28 2026 by rpki-client