
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: QzSzWYqudXxsYjcBQYpW8E9Jj1+/hQGxM++GPtPRXCI=
Subject key identifier: BA:95:23:F3:21:9B:9E:A4:59:F9:65:B8:DA:67:10:A8:48:D8:60:F7
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 01A0016F2F203C659D0981FDBCC4DAB6B8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 1952
Signing time: Fri 14 Aug 2026 18:00:58 +0000
Manifest this update: Fri 14 Aug 2026 18:00:58 +0000
Manifest next update: Sat 15 Aug 2026 18:00:58 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: 1V6NQxOpvGmogVZRkfbZCjHrut4bCYazkb57s2YMHLc=)
2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:2f:20:3c:65:9d:09:81:fd:bc:c4:da:b6:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Aug 14 18:00:58 2026 GMT
Not After : Aug 15 18:00:58 2026 GMT
Subject: CN=ba9523f3219b9ea459f965b8da6710a848d860f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:98:48:a9:ab:33:ef:a4:37:cd:bc:c0:16:
d7:23:c5:ce:72:62:4b:73:bb:45:30:6c:08:9e:12:
b1:8c:f4:63:6b:c6:16:e2:80:5b:58:f6:94:01:a3:
0d:56:8c:ed:80:94:99:03:ef:d8:76:03:2d:9e:36:
88:88:dc:e8:f5:10:07:c6:aa:40:de:be:da:55:4b:
dd:e7:2c:e6:15:d6:fd:e8:ee:ed:4c:21:91:b5:ff:
90:3d:36:cc:13:74:45:12:50:38:bb:12:ed:27:ca:
29:8d:79:c5:88:27:92:aa:05:bc:89:43:cb:50:37:
d6:c7:1f:19:08:38:63:03:05:a4:92:81:79:b3:0e:
b8:b1:e5:df:66:7b:da:72:20:01:45:17:35:9f:d8:
26:de:a4:53:93:e6:8f:38:c1:c2:2e:a6:dd:bd:41:
8e:32:50:97:a7:f6:74:b6:5a:05:ef:7e:95:68:38:
5a:0d:a9:49:44:af:cd:70:16:4b:b2:4d:51:bc:3d:
7e:20:96:32:eb:04:25:fb:a7:eb:ef:70:cf:a4:50:
5e:84:d4:75:1d:56:d1:f0:23:c3:15:ef:91:cc:4b:
ac:4f:e1:15:a9:8f:e0:9c:04:96:ce:32:21:ee:4c:
81:65:8a:9e:a5:7c:e3:fe:35:fa:29:d0:d6:da:75:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:23:F3:21:9B:9E:A4:59:F9:65:B8:DA:67:10:A8:48:D8:60:F7
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:31:75:a1:cf:a0:91:15:cf:14:9a:08:cd:4b:d1:5d:36:
ea:23:71:51:dc:87:cf:0f:d6:a8:d3:22:0d:f1:29:5c:82:ce:
51:f1:24:de:a5:ed:5c:bd:a8:b3:1e:b6:79:3b:ed:4a:08:04:
70:e7:46:a1:9b:34:8a:b4:b9:2e:8f:49:04:fb:63:69:80:14:
89:df:d2:75:8d:72:4e:95:83:72:74:94:81:4e:a4:c7:00:60:
f4:39:a8:2c:67:f0:87:ae:1a:9e:b8:90:b3:2a:72:16:24:dd:
59:37:48:24:c1:7a:57:41:e0:58:6e:19:2b:ee:0a:07:6b:b7:
4c:e3:47:29:99:36:2e:15:3d:30:3e:4b:9c:ed:ee:d4:2d:ab:
6d:d8:72:a5:24:c9:ae:65:c2:ca:36:61:1d:5d:80:f8:78:46:
77:32:67:9e:2f:1d:f7:48:e8:ce:ef:99:ef:23:81:7f:28:6d:
52:57:e0:4b:f6:1b:2b:e5:b0:05:25:af:d6:30:1a:6b:bb:e8:
6a:c8:95:d7:58:8e:3b:a6:15:6c:6d:24:ba:d5:c1:23:48:5f:
df:01:0e:a6:05:3a:66:55:e9:56:3c:d4:2e:8e:e4:19:16:3a:
53:7f:06:cd:f5:86:9a:57:f3:c1:cb:70:bb:ed:4e:57:a8:82:
f2:2a:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:26 2026 by rpki-client