Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: cPIg58lunMYRbArIGqjZdjyQRrIMoHXyKwiryVayudk=
Subject key identifier: F0:09:3F:D3:1F:7F:50:4C:5C:E0:FD:1F:47:43:DF:53:5D:A3:0F:F8
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 019D29619239AB2372C72FA50D1A3580811C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 17D9
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: Ircvcd6kZi56PS7npiKCbmdMnmH9xIrnlgZTUK44VFE=)
2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:92:39:ab:23:72:c7:2f:a5:0d:1a:35:80:81:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=f0093fd31f7f504c5ce0fd1f4743df535da30ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:12:50:27:5b:e4:a6:53:43:f3:98:ed:aa:
7f:99:de:0b:7c:b7:ac:d0:a8:54:68:2c:07:13:f7:
1f:ac:a4:25:0a:29:ea:32:c7:62:b0:45:85:02:46:
a3:a5:bc:20:eb:02:52:14:d1:09:24:a2:9e:d0:1d:
5b:e2:81:02:98:91:2f:4e:da:7b:b5:68:59:2d:e2:
3e:91:49:2a:ab:4e:ae:63:af:36:5c:3e:af:89:89:
c4:e8:97:cd:07:e1:87:4d:74:82:c0:1d:48:81:7b:
8c:08:a6:30:97:14:e2:b8:ce:b7:55:be:54:46:1a:
33:75:59:2d:40:2e:e4:8b:fc:48:23:e1:b0:27:db:
0d:a0:31:1c:b1:53:1c:e0:7e:de:57:5e:4d:50:39:
26:99:91:fb:22:11:ba:9c:85:6d:27:48:2d:2a:23:
75:f8:87:4c:81:28:8d:c9:62:a3:56:bc:e1:ab:82:
64:d9:a1:3d:c4:30:c8:5c:c5:1a:17:a7:6e:e0:5d:
71:a2:5b:c6:e9:e3:2f:d9:98:90:64:c1:00:12:3f:
94:81:39:50:f1:e0:c1:8a:1d:a4:42:ec:b5:0b:98:
59:9c:70:2f:2b:92:5e:32:f8:01:f8:12:ff:8a:ba:
76:61:98:e5:c2:b5:c5:31:46:f0:a7:6d:0b:38:ef:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:09:3F:D3:1F:7F:50:4C:5C:E0:FD:1F:47:43:DF:53:5D:A3:0F:F8
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:61:83:da:99:30:f3:01:5a:74:79:a5:a9:be:0a:55:68:0d:
e8:54:31:be:3d:f6:0c:c6:8e:9a:10:26:c8:f7:ad:a4:1f:e9:
98:a0:e7:c6:f2:6c:88:59:01:92:5a:39:a5:65:61:96:17:1a:
b7:d8:4e:45:11:9c:7a:a2:cc:f8:75:3a:2f:7b:03:65:12:ed:
66:79:45:13:8b:eb:a9:3e:02:9a:68:11:68:62:2a:4c:fd:e7:
a6:8f:ec:48:84:7c:80:33:a5:65:35:b6:89:9f:29:61:eb:60:
75:28:e4:48:ae:a1:41:5f:bf:43:d2:b0:63:ae:4e:fc:16:46:
cf:8c:2a:69:6a:c9:17:06:ae:5f:43:b8:b1:d6:83:e9:5b:85:
f7:4b:7b:56:dc:53:c1:df:22:2d:99:6f:82:d1:61:ff:ae:10:
92:73:37:4f:a1:6b:28:fb:e6:09:ba:bd:73:6a:37:43:53:74:
3d:60:a7:71:e1:af:62:f5:74:bf:ce:c4:c6:98:b7:85:20:30:
98:47:1e:07:87:ee:88:93:06:b1:77:72:f4:59:6d:9c:e3:fc:
12:b1:4a:37:af:5d:66:e0:33:1c:38:c5:24:e5:a0:ba:98:9c:
66:47:fd:09:97:81:2f:fd:a1:43:36:23:61:6a:fd:67:6e:8a:
3d:f0:ac:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYZI5qyNyxy+lDRo1gIEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJlNmYwNzU0MDBkMzA1YTE2ZGRlNjkwZTI1Y2JkOTQ2
NDVjYmUwHhcNMjYwMzI2MDkwMjMzWhcNMjYwMzI3MDkwMjMzWjAzMTEwLwYDVQQD
EyhmMDA5M2ZkMzFmN2Y1MDRjNWNlMGZkMWY0NzQzZGY1MzVkYTMwZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVoSUCdb5KZTQ/OY7ap/md4LfLes
0KhUaCwHE/cfrKQlCinqMsdisEWFAkajpbwg6wJSFNEJJKKe0B1b4oECmJEvTtp7
tWhZLeI+kUkqq06uY682XD6viYnE6JfNB+GHTXSCwB1IgXuMCKYwlxTiuM63Vb5U
RhozdVktQC7ki/xII+GwJ9sNoDEcsVMc4H7eV15NUDkmmZH7IhG6nIVtJ0gtKiN1
+IdMgSiNyWKjVrzhq4Jk2aE9xDDIXMUaF6du4F1xolvG6eMv2ZiQZMEAEj+UgTlQ
8eDBih2kQuy1C5hZnHAvK5JeMvgB+BL/irp2YZjlwrXFMUbwp20LOO+f/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAJP9Mff1BMXOD9H0dD31Ndow/4MB8GA1UdIwQY
MBaAFNNr5vB1QA0wWhbd5pDiXL2UZFy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQt
MzBjMWM1YTA4MGQ5LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQtMzBjMWM1YTA4MGQ5
LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmGD2pkw
8wFadHmlqb4KVWgN6FQxvj32DMaOmhAmyPetpB/pmKDnxvJsiFkBklo5pWVhlhca
t9hORRGceqLM+HU6L3sDZRLtZnlFE4vrqT4CmmgRaGIqTP3npo/sSIR8gDOlZTW2
iZ8pYetgdSjkSK6hQV+/Q9KwY65O/BZGz4wqaWrJFwauX0O4sdaD6VuF90t7VtxT
wd8iLZlvgtFh/64QknM3T6FrKPvmCbq9c2o3Q1N0PWCnceGvYvV0v87Expi3hSAw
mEceB4fuiJMGsXdy9FltnOP8ErFKN69dZuAzHDjFJOWgupicZkf9CZeBL/2hQzYj
YWr9Z26KPfCs4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:43 2026 by rpki-client