Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
File: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft (raw, json)
Hash identifier: C+rY3wVy23YSawli8RIDgHY43L0Nx4pC2fTz2ua2oi4=
Subject key identifier: C9:62:94:85:4B:69:A2:41:EC:FB:FD:19:7A:8E:4A:6F:2A:12:0B:BF
Authority key identifier: 42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17
Certificate issuer: /CN=42ea91e83aea0a647da82c5c13866cdfb6893917
Certificate serial: 75CA392822C6617D0F0C7936F7D66E8A07AEFD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
Manifest number: BF
Signing time: Thu 16 Apr 2026 20:35:57 +0000
Manifest this update: Thu 16 Apr 2026 20:30:57 +0000
Manifest next update: Fri 17 Apr 2026 23:53:57 +0000
Files and hashes: 1: AS214344.asa (hash: LmO2BRG/NJd3XlGr3hE91NYHLfEPkWgymm3qCo6mSQY=)
2: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl (hash: 9Sq65woGWRWaCKAAKgIdd/u1lPNFzoQg7ShRrim+GtU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl
rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ca:39:28:22:c6:61:7d:0f:0c:79:36:f7:d6:6e:8a:07:ae:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ea91e83aea0a647da82c5c13866cdfb6893917
Validity
Not Before: Apr 16 20:30:57 2026 GMT
Not After : Apr 17 23:53:57 2026 GMT
Subject: CN=C96294854B69A241ECFBFD197A8E4A6F2A120BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:e9:37:a3:af:0e:78:78:31:61:bd:24:36:
c3:07:f2:df:0e:50:b7:08:de:e3:bb:b6:51:05:fa:
39:e7:93:a2:fd:7c:e4:8a:87:a5:aa:33:17:62:e6:
f4:7e:11:fd:93:8a:60:1b:c3:0d:21:2e:52:41:f5:
f0:f4:69:44:35:86:57:4e:7c:78:00:fb:81:69:b3:
e6:70:d6:6a:85:da:84:5d:8b:90:b6:ba:bf:f1:bd:
1f:09:d1:c7:d7:f1:aa:69:8b:c9:40:46:7e:f3:ff:
d5:f3:1c:09:e2:e2:d5:1f:9b:66:2b:5c:97:5c:e8:
51:a0:d3:63:e4:f2:8e:88:47:c0:72:16:0b:d2:f3:
51:66:85:c4:e2:50:71:e9:84:ba:a2:fc:5b:a8:7b:
87:1f:a5:e1:63:fa:57:72:b3:58:ef:1b:0d:7c:a9:
e5:f6:a6:97:7c:d2:41:43:3d:58:86:1a:3e:c3:b1:
a2:48:d5:62:59:07:da:9f:ee:70:48:3b:31:8d:ee:
be:91:4f:63:72:9f:f2:c5:68:e9:e9:77:e4:87:bd:
18:58:c5:f6:ea:12:3c:00:ff:dc:68:db:5d:2d:16:
0c:fa:2b:22:5c:62:df:86:e5:38:a0:e0:ec:29:af:
0d:01:9f:9e:25:c0:bc:0b:00:33:d6:3c:75:50:1e:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:94:85:4B:69:A2:41:EC:FB:FD:19:7A:8E:4A:6F:2A:12:0B:BF
X509v3 Authority Key Identifier:
keyid:42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8a:23:50:5f:09:75:e9:c1:0d:f1:95:e9:7f:63:20:d8:8c:
10:fc:3f:26:02:54:f0:d2:d9:53:42:b0:f8:e3:d4:e4:e4:28:
ec:56:d9:7b:78:9c:2a:9e:77:12:8b:b0:bb:91:76:48:30:bf:
96:63:99:e8:6a:85:7a:74:71:b3:8e:86:80:3c:b2:d6:bb:77:
22:e6:a9:c1:7a:93:71:17:8a:da:60:3a:74:81:63:07:f9:71:
13:1a:7e:90:d7:ec:b7:81:50:c5:56:13:0e:04:62:c4:6f:82:
65:fd:d2:67:07:46:90:0f:0d:5b:ea:5b:a5:67:6d:c2:31:f0:
60:22:03:35:dc:c8:7d:52:6d:36:4a:8e:c5:28:ff:ff:ca:89:
43:30:71:08:db:f7:e6:dd:6a:bd:e6:cd:15:cc:c9:7e:a7:88:
df:ce:f4:ee:1d:5b:8a:d6:a4:61:ad:48:e7:41:e9:e2:19:f8:
aa:dc:42:a3:9d:27:4e:13:e4:1d:0d:28:a3:db:a3:af:06:f4:
22:89:97:0d:88:71:0f:db:f9:e1:5c:5b:b4:a5:14:7f:cb:6a:
39:67:3a:6b:d0:83:ae:db:21:94:fd:5d:4a:b1:91:69:f2:a0:
b7:64:36:4a:af:a7:7f:71:a6:f8:5a:a2:54:39:1f:58:4b:a9:
57:8d:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:57 2026 by rpki-client