Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: wYDCwdyrUlbZQVa9ulIm3xjG7M0F7USfzwHagvjlZBE=
Subject key identifier: B5:F5:B9:C4:04:C9:83:17:9C:6D:4A:94:66:79:4E:B6:B6:4F:E7:99
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 01A00025434155142F25C4960E0A715A6DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 10CF
Signing time: Fri 14 Aug 2026 12:00:37 +0000
Manifest this update: Fri 14 Aug 2026 12:00:37 +0000
Manifest next update: Sat 15 Aug 2026 12:00:37 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: c3XXcoi+MkoIx01eMYmx/qqBdi8OqnSszPnL9AgsISw=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:43:41:55:14:2f:25:c4:96:0e:0a:71:5a:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Aug 14 12:00:37 2026 GMT
Not After : Aug 15 12:00:37 2026 GMT
Subject: CN=b5f5b9c404c983179c6d4a9466794eb6b64fe799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:8b:4f:6b:fa:2f:e7:84:33:54:dd:c8:a9:
d1:f9:e5:06:c3:85:ed:fb:48:ce:5c:b9:6c:e8:37:
d8:b9:50:d8:70:82:38:c0:4f:d2:b1:80:a0:ce:e8:
06:5c:57:16:eb:54:34:b6:48:cd:49:06:40:b7:2b:
79:5d:2f:25:e4:40:42:26:c5:1e:2a:e5:0c:54:6a:
36:e0:33:71:05:37:69:33:82:f6:70:36:4b:20:a7:
57:1c:c2:cf:9b:b6:10:9c:a8:45:e0:d3:8a:b1:98:
a6:b5:64:2b:d1:60:46:01:3d:e1:62:94:69:a4:d9:
92:78:e6:fd:16:08:f7:b6:35:74:b8:a7:ac:1d:48:
4c:a7:24:fb:71:93:6e:79:8a:56:93:28:c3:92:e8:
f6:86:cd:8f:58:50:a7:cc:9d:8a:a9:48:9d:1b:e5:
1e:82:bf:47:69:91:f1:af:70:a0:57:d8:a1:10:e2:
29:a9:56:74:dc:1d:0d:7c:96:04:5d:25:c7:11:78:
e2:37:ec:6d:93:7e:cd:c5:6a:3f:a4:2e:9a:d3:87:
b5:38:a6:9b:28:ce:73:ec:15:69:0d:f3:6f:86:30:
f6:7f:99:fe:39:f3:2a:e5:c9:c4:58:dd:1d:31:36:
2c:30:23:41:eb:a8:8f:30:d4:0d:71:ca:4e:b7:72:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:B9:C4:04:C9:83:17:9C:6D:4A:94:66:79:4E:B6:B6:4F:E7:99
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bd:92:a1:57:f7:7a:9d:35:7c:75:c6:86:4d:c4:33:38:2e:
eb:97:bc:c2:b5:02:76:4a:56:cf:49:15:2a:8e:a5:2a:4d:a0:
18:82:92:df:2a:c5:98:71:a9:6a:02:ca:07:66:97:e9:47:d9:
93:0f:8b:d5:da:38:d6:86:22:cf:22:1d:0a:49:e7:23:e0:c3:
e9:91:46:e1:c2:da:fb:2c:3b:40:89:23:e4:d3:08:5d:06:bc:
25:d3:10:0a:bb:3a:2a:b5:5b:98:d4:d2:ac:3f:23:07:30:aa:
1f:6b:2c:78:77:ed:50:0d:67:42:b9:ad:e3:cd:67:7b:47:92:
98:ba:b7:66:35:3a:5e:1e:b6:32:bf:a9:5c:71:6f:e1:2e:cb:
64:2b:ca:b4:01:30:ad:c0:72:3a:8e:27:79:b2:49:a2:7e:dc:
16:9f:f6:15:b5:54:81:14:80:5e:d9:b9:15:63:41:a1:1d:77:
fc:ca:77:06:69:25:cb:9e:d9:5d:dc:fe:c9:60:c1:f0:52:07:
50:8a:b1:04:48:42:8c:bc:99:81:d2:3f:22:73:9e:7a:ed:bc:
1d:95:30:17:ac:12:8f:a4:92:35:db:a3:59:fd:a7:12:42:cd:
8b:d7:ba:04:dc:7f:20:63:21:87:f5:c4:f3:4c:dd:69:88:e5:
9e:96:f9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAJUNBVRQvJcSWDgpxWm25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjQxZmE4ZWQxY2ZjM2RhYTIzYWFhZjhjM2E3NmZlODdl
ZDViYWIwHhcNMjYwODE0MTIwMDM3WhcNMjYwODE1MTIwMDM3WjAzMTEwLwYDVQQD
EyhiNWY1YjljNDA0Yzk4MzE3OWM2ZDRhOTQ2Njc5NGViNmI2NGZlNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdiLT2v6L+eEM1TdyKnR+eUGw4Xt
+0jOXLls6DfYuVDYcII4wE/SsYCgzugGXFcW61Q0tkjNSQZAtyt5XS8l5EBCJsUe
KuUMVGo24DNxBTdpM4L2cDZLIKdXHMLPm7YQnKhF4NOKsZimtWQr0WBGAT3hYpRp
pNmSeOb9Fgj3tjV0uKesHUhMpyT7cZNueYpWkyjDkuj2hs2PWFCnzJ2KqUidG+Ue
gr9HaZHxr3CgV9ihEOIpqVZ03B0NfJYEXSXHEXjiN+xtk37NxWo/pC6a04e1OKab
KM5z7BVpDfNvhjD2f5n+OfMq5cnEWN0dMTYsMCNB66iPMNQNccpOt3LdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX1ucQEyYMXnG1KlGZ5Tra2T+eZMB8GA1UdIwQY
MBaAFNNkH6jtHPw9qiOqr4w6dv6H7VurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAt
OTk0MTk5MmM5YzI0LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAtOTk0MTk5MmM5YzI0
LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr2SoVf3
ep01fHXGhk3EMzgu65e8wrUCdkpWz0kVKo6lKk2gGIKS3yrFmHGpagLKB2aX6UfZ
kw+L1do41oYizyIdCknnI+DD6ZFG4cLa+yw7QIkj5NMIXQa8JdMQCrs6KrVbmNTS
rD8jBzCqH2sseHftUA1nQrmt481ne0eSmLq3ZjU6Xh62Mr+pXHFv4S7LZCvKtAEw
rcByOo4nebJJon7cFp/2FbVUgRSAXtm5FWNBoR13/Mp3Bmkly57ZXdz+yWDB8FIH
UIqxBEhCjLyZgdI/InOeeu28HZUwF6wSj6SSNdujWf2nEkLNi9e6BNx/IGMhh/XE
80zdaYjlnpb5ug==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:01 2026 by rpki-client