Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: dv+tucTNOy2ltMPNaof2fQH5G099xAND6x2iHgv+1eY=
Subject key identifier: 6F:68:DD:2B:BE:78:C5:67:F4:93:9F:4F:43:0B:F7:D9:62:AB:98:C5
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 01A10D7040382CCCE2D9576299477BFB8E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0EC7
Signing time: Mon 05 Oct 2026 19:00:22 +0000
Manifest this update: Mon 05 Oct 2026 19:00:22 +0000
Manifest next update: Tue 06 Oct 2026 19:00:22 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: 2xKPNZMyAmWNcTpwMTbi/+xpBS8BRsKbJZJwDK95BaE=)
2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:70:40:38:2c:cc:e2:d9:57:62:99:47:7b:fb:8e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Oct 5 19:00:22 2026 GMT
Not After : Oct 6 19:00:22 2026 GMT
Subject: CN=6f68dd2bbe78c567f4939f4f430bf7d962ab98c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:f4:ab:0c:e7:10:77:bc:92:5d:9a:bd:7c:
c1:e8:76:d8:da:f3:be:0b:e8:35:04:9c:f2:5f:6c:
e4:c9:c6:cf:39:bf:8f:2a:62:c6:cc:4b:ac:23:1d:
81:5e:43:44:da:22:69:17:f1:31:b6:f0:1c:a0:5b:
07:9b:7f:45:3c:39:66:82:64:a7:18:bb:f5:bc:d3:
2a:f2:30:73:e6:11:b7:3c:2a:87:60:6a:bc:18:5e:
33:61:86:ed:d5:df:5c:52:58:76:a0:89:0d:c4:34:
14:9e:db:d4:64:29:3f:bc:a1:a3:f0:93:c0:d7:cb:
fd:3a:82:ab:ed:1f:c2:38:8e:24:ba:5f:55:32:5b:
c9:64:81:52:f1:58:df:4e:83:af:82:a9:c8:f7:06:
e3:b1:78:2f:e0:7a:9c:cc:0f:dd:f9:e8:2d:9d:dc:
af:e2:15:39:14:ca:94:38:90:65:28:d6:19:86:73:
16:e6:a8:c7:6d:3a:e8:43:67:08:68:9f:21:7c:bf:
27:c4:d9:6b:0b:fc:ea:58:15:d9:60:34:d9:b2:83:
51:9c:c7:34:b3:cd:09:10:6e:51:c8:b0:ad:4b:0c:
fe:17:84:b0:3d:3a:5e:f4:36:27:04:c9:19:3c:d0:
05:c4:1f:70:74:57:48:e2:d5:95:ad:4b:e3:b5:d8:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:DD:2B:BE:78:C5:67:F4:93:9F:4F:43:0B:F7:D9:62:AB:98:C5
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:24:45:05:16:97:12:3d:fd:20:4c:29:c0:f1:3c:e5:b4:
0e:f3:b9:3b:6d:4c:e8:6a:04:89:88:a0:dc:69:4b:ad:77:49:
94:7a:f5:60:e1:3a:5c:dd:2e:c0:0e:81:af:a7:ba:06:02:20:
7a:13:be:a3:92:06:e6:4c:3c:c6:67:0f:78:36:d3:ed:10:11:
d4:bd:69:df:40:ac:39:85:28:28:b3:96:84:68:24:1f:fd:bf:
8e:fe:f8:ae:aa:ec:ab:0a:6c:2d:bb:63:0c:a7:94:a8:86:1c:
70:6e:f2:92:07:39:72:a3:c0:4f:42:8e:1f:38:c4:d9:fa:7e:
5f:0c:d8:8b:0f:23:94:9f:7b:7d:a8:60:bb:ea:d8:eb:00:85:
ca:a9:27:a7:c9:32:99:df:50:68:24:c7:e4:a9:5c:6f:da:ab:
d1:a0:de:be:af:43:a5:5c:71:a9:59:99:b7:ae:31:77:ba:dd:
e6:b1:dd:70:02:52:99:be:e1:fe:0b:f8:a4:3c:b7:39:51:47:
48:31:2f:db:91:b8:7d:0a:a4:27:5e:a3:93:9b:f4:94:78:84:
cf:51:ad:d6:b3:96:73:37:28:f2:0b:68:32:5b:17:6d:47:08:
94:18:52:c4:b4:60:ae:f6:43:c8:a1:49:98:f1:67:d7:92:29:
a0:cb:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:43:07 2026 by rpki-client