Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: WVBWuLfZ4vjSOPF6v/7aKUq4n+M+TKwmqV41bFIo73E=
Subject key identifier: 23:AA:7A:79:74:11:8B:58:9C:EF:51:05:B8:4D:AB:D2:52:76:F1:68
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 019E1D90D6F09F6E0A7C4DD135938DC7E4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 19:01:31 +0000
Manifest this update: Tue 12 May 2026 19:01:31 +0000
Manifest next update: Wed 13 May 2026 19:01:31 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: LbcCxk2ua9yc6q7ajA/qgWckmIdwCH2JSfS44obrEnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d6:f0:9f:6e:0a:7c:4d:d1:35:93:8d:c7:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: May 12 19:01:31 2026 GMT
Not After : May 13 19:01:31 2026 GMT
Subject: CN=23aa7a7974118b589cef5105b84dabd25276f168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:02:4f:f8:a7:f9:dc:4b:69:44:5f:45:43:
d3:03:4a:04:46:92:ef:88:5f:3d:37:5c:4d:5c:bf:
8a:85:ce:28:b8:b3:cf:3e:72:d0:ff:07:d3:e8:bb:
4a:62:12:9b:54:00:0b:23:1f:b4:ae:63:e9:22:3c:
42:3a:b5:12:85:39:c2:0e:61:71:7e:09:44:45:48:
fb:73:6f:86:10:53:9f:99:39:ed:0c:7e:a4:1a:50:
a0:c5:aa:9e:e3:8d:dd:b3:b3:93:c7:50:62:f5:b3:
93:43:0d:81:84:64:4e:b4:13:99:c0:83:20:7e:eb:
2d:46:d5:dc:29:42:df:43:c7:f9:27:75:5f:cb:5e:
67:6f:5d:32:4c:2d:42:6a:aa:28:ab:22:82:27:76:
30:5e:03:75:81:ce:a2:a1:13:ce:01:2a:61:77:92:
31:66:f3:62:0b:49:d4:c7:0a:a6:f2:aa:d5:8b:a8:
0f:9f:63:c9:9b:73:38:1d:b8:60:2c:f2:3a:fb:e4:
44:fd:ee:8a:41:80:fd:70:41:22:59:4b:8c:96:61:
bf:91:8a:eb:93:5e:3d:2b:a0:3d:0d:6c:c9:8c:1a:
eb:bc:af:db:73:1c:c9:c9:b1:cc:23:40:3c:95:8e:
ca:b0:e4:08:08:f1:93:54:64:2a:5b:12:a7:2e:2c:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:7A:79:74:11:8B:58:9C:EF:51:05:B8:4D:AB:D2:52:76:F1:68
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6d:ac:03:bb:ce:28:8a:3e:45:80:d8:06:97:55:e1:13:5c:
60:0f:9e:35:76:d6:08:90:e8:c7:98:f6:88:6f:52:0f:0b:07:
c9:ef:10:cd:ba:54:01:7b:18:de:b4:c0:99:35:bd:09:94:70:
2f:15:ee:f6:45:73:56:ae:26:14:44:f0:c8:96:43:7f:74:ad:
a8:e6:d2:91:4f:69:c8:ea:c3:f9:55:04:d1:40:c6:12:0b:ef:
a0:52:5d:23:34:91:3c:82:3a:78:97:68:8e:1d:22:e8:6f:57:
3e:ac:4a:d3:9f:21:78:07:b1:14:70:1e:d3:f6:0a:5f:e2:85:
5a:f7:02:54:e1:90:49:25:aa:a7:08:d7:8e:ac:d7:11:73:71:
41:81:ec:d3:f5:06:2f:15:ed:e6:45:4b:10:55:e9:ae:a7:b3:
77:07:3e:fc:a1:fa:77:f8:27:3a:ad:cb:c4:87:63:20:fe:e9:
22:a5:4f:17:ea:83:e8:90:82:fe:76:16:c9:c5:e2:be:df:1b:
74:91:f6:ad:6a:08:9a:25:ae:7c:a5:2b:72:b3:dd:75:c5:64:
c7:88:62:35:ba:a0:af:3c:bd:7f:37:7f:59:b9:da:25:7d:d8:
29:b4:e2:23:81:bf:5f:43:1f:e6:39:7b:6a:7d:f7:68:74:72:
c0:67:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:06 2026 by rpki-client