Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: 4hxEDK1lrcftw+tOYkuO/gQu8tMzTOOjOu64QQ8XC2I=
Subject key identifier: C3:E8:1B:30:5D:68:BE:EE:A4:1F:BE:06:F8:0D:68:75:84:87:15:2B
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 019D3752B7F9E00D0B9AA0D4FC2C738F117D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0C4F
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: I9N+C2Qat99YGFWylyP+aK30tvDyyVPO0X1wlUsL+pQ=)
2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b7:f9:e0:0d:0b:9a:a0:d4:fc:2c:73:8f:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=c3e81b305d68beeea41fbe06f80d68758487152b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:8d:e1:cc:b6:d4:64:60:04:c1:91:e3:a0:
c9:53:05:d4:46:7b:63:fb:d6:ea:bd:4e:fd:85:55:
53:5e:6b:91:1e:5b:1a:78:9f:54:9e:2b:80:2a:13:
96:4b:f3:3c:de:ef:c6:82:87:42:83:46:ca:00:f3:
df:31:23:b0:73:98:dc:2a:a6:96:a5:cf:bd:d0:b0:
c7:76:4e:8e:c6:17:35:24:fc:bd:47:e5:17:e6:75:
ea:a5:f1:be:e1:bd:12:d6:23:be:7c:b8:16:74:cb:
27:5f:05:0e:8f:f2:ba:9c:5f:3f:78:50:8c:5d:b5:
70:ab:12:0e:14:bf:82:9a:14:b9:a1:f8:74:6d:8c:
92:1a:e1:5b:66:fe:ca:48:f4:5e:ef:c5:e7:4e:0d:
10:dd:64:5c:e3:20:ee:a4:ec:8a:27:0c:23:39:63:
1f:a4:ef:7c:a6:b7:ac:da:6b:e9:52:06:e6:23:d3:
29:c0:db:a5:05:c4:85:13:28:19:cf:6d:a8:45:c0:
52:3b:e9:56:24:eb:c7:31:74:c1:ec:ef:b1:44:83:
5a:c7:e7:d5:61:01:2e:41:e6:ac:81:23:cb:9f:0a:
de:ca:22:f8:74:b3:89:65:0a:e2:a5:b5:f4:c4:41:
82:ad:6f:79:57:11:52:d1:23:15:f3:f6:7b:7d:89:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:1B:30:5D:68:BE:EE:A4:1F:BE:06:F8:0D:68:75:84:87:15:2B
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:d4:1b:64:d1:9d:c4:e8:ff:48:2d:46:c0:37:7d:75:d5:
ba:b3:6a:87:62:00:aa:73:78:b2:47:bf:b2:78:ae:8c:9e:96:
cc:76:69:5d:c4:8e:ee:47:52:cf:89:8a:25:43:a6:7c:8d:b3:
5a:59:38:2e:38:76:72:61:bd:ec:59:19:c7:a6:7d:72:8c:7f:
46:19:05:93:9e:58:01:45:3c:fd:d5:17:46:81:c7:19:9b:a3:
45:c9:bc:59:fd:bf:a5:94:31:4b:67:e3:dd:d4:29:58:57:10:
b4:c6:42:84:3d:af:40:42:06:e2:dd:29:61:21:fa:0d:73:e1:
a0:e9:24:7b:da:d1:37:a5:26:ea:17:f9:6d:c1:63:ef:07:0a:
4b:82:b6:16:27:59:df:19:14:7a:fc:c9:21:0a:c8:cd:51:e0:
31:a9:ac:aa:4d:95:71:63:1e:02:03:57:72:ac:42:9a:de:5a:
e6:c2:11:9e:c4:b5:7b:16:58:6d:cc:72:c4:19:85:3f:67:0f:
d2:10:52:97:74:80:36:6c:68:36:fe:e6:73:05:ed:05:da:c7:
f8:20:43:dd:b8:a7:29:92:a8:c2:7f:7f:21:54:5b:48:32:31:
06:cc:14:a9:a6:ab:d9:5e:b1:2b:25:cc:7e:10:13:a6:67:51:
12:a9:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:28 2026 by rpki-client