Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: lwV0xv0l2o90nbuVCWsb4BEsh9OHXfISnECyxEO+l/0=
Subject key identifier: 07:68:77:AC:89:37:7E:11:FF:5E:90:CF:38:88:1B:73:BA:34:2D:2F
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 019D38668FF342B9E6A44001C84B436C2CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0CCB
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: Jx0Hv9BUSAv3TICeSp2KHrG6pijxCnBbROyCkpCs5hA=)
2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8f:f3:42:b9:e6:a4:40:01:c8:4b:43:6c:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=076877ac89377e11ff5e90cf38881b73ba342d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:28:92:b3:58:3d:a9:ce:17:f4:fa:1a:6e:
98:d0:23:1f:16:53:e8:72:bb:57:4c:6b:2e:a0:b2:
e2:5c:12:2b:ee:fa:eb:5f:01:46:30:1d:53:96:fe:
83:a1:62:7e:7d:fe:86:f2:07:51:e4:70:51:5c:10:
c7:e8:7f:69:d5:9e:7c:9c:2f:64:55:c2:b2:df:86:
40:a7:ba:24:b7:8e:23:31:43:60:e0:cb:c3:2a:80:
8e:9d:ea:49:0b:f1:6b:3e:e8:a7:19:a9:a9:e7:1b:
90:b7:f1:58:25:9c:fd:3c:dc:b7:8e:3f:62:d3:fe:
83:4f:21:c1:f5:d9:fa:1d:4c:d7:80:fe:eb:69:ed:
04:58:b6:68:96:ed:e8:73:d3:74:c5:e6:e0:2b:b0:
0d:87:b3:0c:52:86:f2:7c:80:88:24:f5:47:ec:59:
37:46:53:28:35:a0:33:e9:a0:bf:c1:3e:62:bd:42:
a4:dd:8c:16:d2:de:9d:da:29:97:04:98:46:60:da:
eb:ee:97:c9:5f:8b:c6:75:d5:2c:5d:0f:6b:7d:cd:
66:d6:e6:0e:b3:e1:ef:1b:fa:12:eb:d5:e4:92:a1:
cf:2c:d0:6d:ef:b1:82:04:97:95:9d:99:bf:9e:75:
2f:9a:1d:65:23:74:4c:d4:f8:e5:a2:fb:e4:ca:ea:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:77:AC:89:37:7E:11:FF:5E:90:CF:38:88:1B:73:BA:34:2D:2F
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:f5:f6:55:90:99:f9:6f:39:f5:a1:be:bd:3d:9c:ee:59:
63:6b:f6:75:fd:c6:73:47:24:7f:14:78:32:5a:4e:67:e5:80:
3c:78:bd:53:58:f0:c9:0e:3f:8d:54:fd:a2:49:0a:54:f8:0f:
8f:85:26:ff:e1:c0:9a:54:f7:60:a0:91:1f:d0:4b:1d:ed:59:
a9:25:e9:d5:6b:64:9c:3d:d9:9f:f2:82:60:1a:34:7d:d3:d4:
46:6e:b2:35:91:ef:f9:e9:eb:4f:32:39:72:4b:82:8f:85:6c:
44:3b:02:85:a6:ad:b2:1e:49:a2:c3:dc:b3:5c:ca:e5:65:e0:
14:e9:61:32:4e:1f:87:8a:09:99:4e:72:08:9b:9e:ee:5b:70:
30:39:56:79:11:d0:99:f4:66:16:09:99:ef:9c:20:c7:d1:3b:
ce:0b:2b:9f:d2:bb:96:95:89:63:c8:0c:4c:24:2d:c2:66:c3:
7f:97:63:20:fa:3a:20:04:68:73:f4:26:68:6a:f1:09:ab:07:
4a:aa:71:80:09:d9:1d:ee:51:29:b6:7f:e4:e2:c6:64:dd:58:
dc:6a:63:36:d0:14:56:49:6c:6d:c9:36:71:d1:d9:cc:d5:8a:
6a:33:5e:df:6f:d5:f6:6c:c0:e5:39:b7:6b:19:af:51:fa:81:
33:8c:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:15 2026 by rpki-client