Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: HkND1acSSpKn7BfMcKh/Z+x/sFMbzo1Dn0hxE8AO/ZM=
Subject key identifier: 39:AF:87:D5:79:26:A4:B7:D1:D2:FD:75:E8:32:D7:56:CF:7C:1E:A1
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 01A15B8BFE32D6B01107825F44FC118A288C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0E74
Signing time: Tue 20 Oct 2026 23:01:03 +0000
Manifest this update: Tue 20 Oct 2026 23:01:03 +0000
Manifest next update: Wed 21 Oct 2026 23:01:03 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: dRpBt04aPu2bAH3oO3qPo8E2YB7VV7ZBxIUX4eHHMCo=)
2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8b:fe:32:d6:b0:11:07:82:5f:44:fc:11:8a:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Oct 20 23:01:03 2026 GMT
Not After : Oct 21 23:01:03 2026 GMT
Subject: CN=39af87d57926a4b7d1d2fd75e832d756cf7c1ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:d0:46:80:54:f8:d0:b8:d0:27:75:09:4d:
42:4d:e8:39:1b:c8:50:c5:a6:da:84:d3:0e:c7:3d:
b5:f4:87:c9:a7:dc:3f:86:13:55:17:a0:37:b7:37:
c6:9a:9d:df:4c:37:1e:ec:8a:d5:4d:c7:3d:95:0b:
39:e7:2d:76:14:91:c4:df:23:f3:d3:e6:56:bd:27:
c6:cd:d0:99:00:21:4d:88:03:b9:32:ae:3f:b1:5b:
71:9e:9a:3e:52:98:6b:4e:7d:03:64:fb:a5:05:02:
dd:80:40:a8:95:5d:29:e3:ca:43:13:d2:1c:a0:d7:
f4:9b:6a:82:c9:96:ef:7b:0e:83:b8:22:86:33:c9:
f7:c0:4f:30:0b:3e:71:7f:b1:e0:e7:a8:e8:8a:d2:
d1:31:77:05:eb:94:0c:56:52:e0:f9:7b:5a:a0:eb:
b7:27:4a:0d:a6:3b:4a:03:a7:4c:01:3c:5b:b5:1f:
57:64:1f:b2:ee:4d:f1:e2:87:00:46:dd:57:cd:ef:
03:01:39:d8:45:b9:97:d1:07:ea:4f:d4:1c:01:44:
6d:22:25:da:c0:ab:4a:9e:08:2a:01:3c:19:05:2a:
bf:ec:f4:00:f9:ff:f7:86:3a:fe:cc:15:9a:61:07:
cd:14:d1:ee:e5:6f:3c:6e:e9:e6:26:10:ca:1a:76:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AF:87:D5:79:26:A4:B7:D1:D2:FD:75:E8:32:D7:56:CF:7C:1E:A1
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5b:23:28:a1:37:d1:14:e1:57:ab:a0:6c:8f:3c:e3:12:c2:
40:0d:2a:98:12:2a:90:9a:8d:28:af:70:13:54:a0:0d:70:08:
13:1e:c7:65:0e:a6:41:e2:b1:50:31:8a:d5:33:d1:8d:c5:84:
bf:09:9e:ec:b6:23:b4:77:63:91:50:8a:35:cf:cf:df:73:ab:
a2:0d:02:9a:db:22:5d:40:e1:f3:4f:40:38:ed:b1:6e:66:fa:
36:35:e2:4b:07:77:f1:af:0f:c9:ac:52:52:d0:1b:e1:81:15:
10:81:61:0a:ee:a4:19:82:89:a5:4d:36:14:f2:7e:55:b9:0b:
5c:16:16:ca:d9:3d:4c:2e:85:ef:ba:a6:f6:20:39:5c:94:a0:
64:fd:00:bf:65:ca:05:7a:13:45:eb:ef:2c:87:65:f4:2d:16:
fa:09:dc:98:6f:ec:55:04:df:49:ca:63:61:6d:f7:e7:f8:27:
4b:36:03:1b:7c:ff:b7:ed:d9:00:4a:20:bb:8e:28:43:39:a4:
8c:57:8c:3b:73:cb:ed:61:28:9f:ce:1d:ea:0b:27:70:de:92:
fe:9f:c4:a2:de:72:b1:27:c8:23:e0:91:50:17:67:8d:06:00:
13:65:33:4c:60:fd:c8:f6:db:50:e1:5f:8e:45:8b:51:ef:39:
e1:ae:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:53:24 2026 by rpki-client