Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: D0W+hGT94oQhL+3jyuXj4GrGhGkIQFYbkTurhfY3cnA=
Subject key identifier: A4:9C:36:7D:BC:AD:56:75:58:FF:96:A3:A1:BD:05:AB:17:4A:F9:5D
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 01A13F02F25C79FFC94E43E9D5A4AD27AC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 10:01:59 +0000
Manifest this update: Thu 15 Oct 2026 10:01:59 +0000
Manifest next update: Fri 16 Oct 2026 10:01:59 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: 2Dk4oRbv+4PMR3oYJIPnPEDw4NYYrXnlhOr5H0MFAgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:f2:5c:79:ff:c9:4e:43:e9:d5:a4:ad:27:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Oct 15 10:01:59 2026 GMT
Not After : Oct 16 10:01:59 2026 GMT
Subject: CN=a49c367dbcad567558ff96a3a1bd05ab174af95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:03:17:67:94:8b:95:79:44:a3:fb:9b:68:
07:16:16:f9:b7:52:e2:86:20:10:88:13:b0:d2:6e:
6c:bf:12:c8:4e:d8:03:e5:7d:8e:58:cd:54:9f:b6:
1e:01:79:c8:33:df:21:bc:2e:42:66:b4:16:f0:5e:
86:e4:29:dc:08:ab:5f:89:8f:e7:a8:3e:eb:7d:0d:
8e:19:8f:c0:b4:a8:49:50:78:b9:aa:3a:d0:82:b5:
a4:83:e3:6c:a2:db:96:ab:83:cd:e2:d7:dd:be:f2:
2a:c5:71:ac:39:14:04:2d:fd:43:e1:56:11:c5:a8:
89:2a:bb:b2:24:55:99:dd:0d:53:9b:69:54:44:ab:
aa:42:69:25:46:56:51:bb:c8:fd:b8:12:a7:22:36:
ff:c4:77:43:98:cf:96:f2:19:93:ea:42:28:a9:9d:
82:f7:2c:71:cb:ce:bf:0a:6d:69:1f:8d:23:27:28:
8c:42:97:18:ab:c5:0f:22:ae:42:52:b3:07:7e:9c:
71:9e:8a:38:43:ec:0e:ff:37:7b:40:a6:b1:29:dd:
b5:ed:c1:28:10:7c:05:d6:d0:1d:62:e7:63:89:35:
1a:e4:38:b3:6b:d6:1c:d1:c7:c3:99:17:ac:f9:92:
99:9a:88:f5:e8:1c:d4:a2:ca:a7:d5:58:f8:3a:04:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:36:7D:BC:AD:56:75:58:FF:96:A3:A1:BD:05:AB:17:4A:F9:5D
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:1e:6b:db:64:bc:ad:d4:69:ff:04:c4:3c:17:21:b5:56:
2c:c9:e4:e4:5b:6b:3d:07:5d:d4:a5:30:0d:bd:3d:40:94:37:
d5:1d:6f:ca:c2:0d:8a:13:7f:82:ec:32:7a:9e:e6:b8:98:fe:
f7:b7:d4:7e:7d:91:88:9d:eb:a1:92:65:41:bb:05:54:7d:f0:
d1:ab:52:6c:de:df:8e:8e:37:40:93:f4:8b:e6:3c:44:96:f5:
e0:53:c6:b6:ed:6e:5c:35:21:b6:50:3e:bb:db:cc:63:72:58:
cb:80:66:5e:75:c4:ad:f9:16:4a:43:fe:18:1b:f0:02:86:d4:
61:6d:79:8c:f0:bb:9f:7d:7c:ea:8b:e1:85:45:51:ba:ea:fb:
7a:42:8f:da:f7:5a:11:95:c2:e4:87:24:da:e1:43:07:3d:39:
1c:e0:fb:f5:79:ba:ba:bf:0e:0b:a8:46:3b:74:31:44:69:48:
4e:06:2d:85:da:df:7f:9c:ae:70:00:5f:c1:5c:19:b0:6f:15:
2d:83:a0:ff:0b:64:13:c3:51:79:e4:8f:d7:5b:4a:83:6c:f5:
70:2f:db:b2:b7:98:3d:9c:dc:37:dc:37:00:31:14:9b:f7:b6:
03:e4:ef:a9:e3:db:2d:3b:67:cf:79:80:27:30:78:46:a3:12:
43:29:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:19:59 2026 by rpki-client