Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: HQbhVteLf84jOJImlSDb0ny+MXEVGJXWXdw+V20qLuw=
Subject key identifier: 27:B7:46:96:CD:AE:98:76:5D:C1:AB:C1:B8:D8:EA:A4:B7:87:8E:42
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 01A14195B6069B99349C92A4125422AE19F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0EE2
Signing time: Thu 15 Oct 2026 22:01:32 +0000
Manifest this update: Thu 15 Oct 2026 22:01:32 +0000
Manifest next update: Fri 16 Oct 2026 22:01:32 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: jULT2ERwV7f8tU9rvof64ZvRjzy2+cmiLYi3uXqTDYs=)
2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:b6:06:9b:99:34:9c:92:a4:12:54:22:ae:19:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Oct 15 22:01:32 2026 GMT
Not After : Oct 16 22:01:32 2026 GMT
Subject: CN=27b74696cdae98765dc1abc1b8d8eaa4b7878e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:cf:99:cd:6f:de:d5:15:d4:09:01:74:ef:
a4:a8:f5:a0:37:bd:b6:ff:6d:8e:04:39:7d:47:15:
ad:70:22:39:d3:4f:9f:56:4f:f0:5b:6e:f1:77:87:
57:12:cb:6e:0f:6d:67:df:59:0f:1f:b0:10:53:d7:
78:6f:6e:99:f2:41:42:04:6c:d1:42:4d:79:fd:3d:
41:ec:f0:e9:32:31:65:8e:df:fd:e1:45:32:fa:f6:
c7:c1:81:26:d5:ae:cc:0e:98:7c:79:7f:31:27:90:
a4:f4:10:42:6e:69:60:d6:26:f9:9f:bf:05:6b:04:
9c:b9:f0:ed:3d:81:d3:7c:f8:bf:d9:a1:16:12:2a:
6a:30:96:f4:41:5c:85:18:87:2d:7d:79:77:bf:70:
f6:7c:20:62:29:88:c6:14:2e:14:38:af:33:4e:d7:
87:bf:4b:e0:03:49:91:2b:9a:69:cc:03:c4:0f:43:
09:c4:18:3e:f6:39:9e:14:80:5b:46:81:bd:f5:db:
ea:34:d1:b8:44:ab:3d:78:a1:6e:30:de:68:42:97:
81:3f:3c:25:8c:2c:a4:f3:89:08:be:0e:40:0b:a1:
be:79:51:d8:f3:07:5c:50:b1:0e:5a:40:94:18:ad:
1b:85:09:e3:87:61:f3:09:50:3e:46:2e:27:70:70:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B7:46:96:CD:AE:98:76:5D:C1:AB:C1:B8:D8:EA:A4:B7:87:8E:42
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:cb:ac:c9:5d:9f:ce:db:03:18:45:b4:52:c7:21:62:3c:
64:85:17:3b:17:71:e8:97:65:d0:8f:f5:8d:49:40:26:19:78:
69:11:3f:d9:a6:88:a3:97:68:31:cb:fc:82:8f:9a:e9:b8:1a:
94:f5:62:c3:56:81:d7:78:03:7b:87:dc:f7:04:08:a2:fa:98:
4c:ce:c2:20:57:3e:44:79:24:4b:48:a5:51:27:5a:77:41:a4:
b3:69:b2:01:7b:96:d5:2d:ec:8b:cc:07:46:b3:de:39:4e:6d:
35:6e:4b:c8:f3:5b:2a:c2:c9:2a:cf:a4:a0:e5:0f:a2:0c:90:
b8:ff:01:0a:22:e0:38:ec:57:b2:d2:95:52:15:04:6b:c1:de:
3b:5f:4f:b7:73:a1:73:7b:14:45:64:3a:f9:69:f4:1f:d1:17:
55:83:eb:47:d1:36:fd:1e:a2:fe:d9:c0:d3:ee:d4:e7:30:f1:
8f:07:1b:9e:5b:82:67:b5:74:a1:39:01:5f:8b:3b:e6:b1:ec:
8f:93:ab:b6:6e:84:a0:4b:f4:c9:97:fa:df:0f:e8:63:2e:6d:
ad:ac:a9:df:76:62:31:b6:92:1d:c0:ae:20:d2:17:59:7f:b2:
c6:40:76:5a:ad:71:a8:15:ac:87:00:7f:96:e5:9a:cb:ec:26:
d1:55:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:03:10 2026 by rpki-client