Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: GsQ1vWv26FfEV90OsqPAPy7dqi6KFk2OXghGHwOEgrQ=
Subject key identifier: 84:9A:1F:B3:BB:FC:24:7F:47:1E:E6:E6:83:DA:03:84:0F:25:C4:5F
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 019D2816BCFB35B94A100B861332D76861C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: sBxmogaH4UjMj2ikqMiwdjFAd11PgQz56cDy1281How=)
2: Zs-v1rw9g1MYTe4z_xC60lFfzak.roa (hash: gDQsejW5I6NwbA9XiA+PvZS2jChO/DirRuBkqy+plZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bc:fb:35:b9:4a:10:0b:86:13:32:d7:68:61:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=849a1fb3bbfc247f471ee6e683da03840f25c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:53:a4:53:c3:52:09:ba:d7:ee:01:20:83:94:
38:a3:e2:32:a9:de:50:3f:e5:0c:cd:81:6a:a2:3a:
ba:91:97:f5:94:b4:40:41:22:3a:bf:75:6b:42:b6:
87:3f:a9:cc:ea:5b:e4:2a:4b:81:22:cb:b3:36:3a:
95:ec:62:b0:d4:d3:bb:73:7b:4b:52:32:c0:3e:2e:
dd:9f:7d:db:94:9d:b0:29:f3:79:d0:7d:ef:43:4a:
10:6f:e0:ed:9a:7a:06:72:45:2e:e5:ac:2a:62:50:
1f:55:02:82:93:f9:7c:7a:f7:e3:46:24:ea:b6:72:
f4:dc:2e:47:e7:33:d4:9d:00:4d:d9:28:48:c1:c7:
2f:c7:28:e3:70:1b:ab:83:ff:8d:eb:78:bd:4c:b8:
6a:01:6f:ba:22:1d:fb:c6:e3:4a:ba:20:3f:be:09:
06:9d:1e:87:9b:25:7c:38:c2:34:2b:0f:c0:37:fb:
bf:14:64:df:6c:a1:80:8b:dc:a6:82:fa:65:49:19:
c1:ad:8d:3c:12:50:b8:5d:ab:b5:74:ff:59:b0:93:
2f:6f:a4:dd:12:5f:47:8a:b8:bc:c9:da:e3:02:57:
6f:b2:c1:cc:d1:31:1b:a5:cc:ca:0d:97:1f:a7:e9:
6f:b7:f8:5c:7b:6b:b9:a7:1f:80:9f:cf:15:c0:df:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:1F:B3:BB:FC:24:7F:47:1E:E6:E6:83:DA:03:84:0F:25:C4:5F
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:d8:22:65:15:e1:8a:27:e6:65:7b:f0:26:e7:31:b9:8a:
90:93:ce:bb:22:04:f0:8b:90:e3:34:6c:6c:28:03:d5:8c:f3:
c6:a1:81:69:ca:f1:07:9b:4a:34:f4:a1:41:9d:67:ff:95:61:
c4:37:d1:ed:e3:3f:37:0b:f9:06:a8:f8:c5:22:69:f2:d4:61:
a5:91:59:ce:16:bc:37:6d:26:37:2a:a4:9e:10:33:a1:ce:22:
6d:9e:6e:ab:bc:3a:7d:92:0e:64:72:b8:04:69:f5:cd:37:57:
1d:7b:4b:77:7e:9f:c5:92:5d:a8:6b:ea:a1:6a:41:bb:39:39:
55:40:4c:30:2e:d8:40:ce:db:8e:bb:8a:9b:2a:c9:9e:07:35:
57:36:95:07:1d:30:c2:9d:de:e4:7d:e8:42:06:3f:6c:50:e8:
cf:4b:d4:76:a5:dc:4a:3f:17:e2:5b:3f:fb:4e:2d:e9:35:1f:
61:da:36:14:d6:f9:03:39:26:8c:d9:83:8b:4c:dc:a4:8e:95:
2b:de:a1:c2:9e:93:40:5a:1b:dc:78:85:4c:66:8d:d4:c7:25:
0c:ed:8f:e4:d9:0c:75:7a:af:72:76:0d:3c:5e:ca:3c:13:b5:
fb:50:a7:ed:30:71:e0:df:50:49:a3:eb:61:2a:c5:c3:1a:ea:
76:ff:c8:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrz7NblKEAuGEzLXaGHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1
ZGNhZjUwHhcNMjYwMzI2MDMwMTExWhcNMjYwMzI3MDMwMTExWjAzMTEwLwYDVQQD
Eyg4NDlhMWZiM2JiZmMyNDdmNDcxZWU2ZTY4M2RhMDM4NDBmMjVjNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lOkU8NSCbrX7gEgg5Q4o+Iyqd5Q
P+UMzYFqojq6kZf1lLRAQSI6v3VrQraHP6nM6lvkKkuBIsuzNjqV7GKw1NO7c3tL
UjLAPi7dn33blJ2wKfN50H3vQ0oQb+DtmnoGckUu5awqYlAfVQKCk/l8evfjRiTq
tnL03C5H5zPUnQBN2ShIwccvxyjjcBurg/+N63i9TLhqAW+6Ih37xuNKuiA/vgkG
nR6HmyV8OMI0Kw/AN/u/FGTfbKGAi9ymgvplSRnBrY08ElC4Xau1dP9ZsJMvb6Td
El9Hiri8ydrjAldvssHM0TEbpczKDZcfp+lvt/hce2u5px+An88VwN9pjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISaH7O7/CR/Rx7m5oPaA4QPJcRfMB8GA1UdIwQY
MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt
NjliOGQ2YjUzZThjLzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj
LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3TYImUV
4Yon5mV78CbnMbmKkJPOuyIE8IuQ4zRsbCgD1YzzxqGBacrxB5tKNPShQZ1n/5Vh
xDfR7eM/Nwv5Bqj4xSJp8tRhpZFZzha8N20mNyqknhAzoc4ibZ5uq7w6fZIOZHK4
BGn1zTdXHXtLd36fxZJdqGvqoWpBuzk5VUBMMC7YQM7bjruKmyrJngc1VzaVBx0w
wp3e5H3oQgY/bFDoz0vUdqXcSj8X4ls/+04t6TUfYdo2FNb5AzkmjNmDi0zcpI6V
K96hwp6TQFob3HiFTGaN1MclDO2P5NkMdXqvcnYNPF7KPBO1+1Cn7TBx4N9QSaPr
YSrFwxrqdv/I8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:52 2026 by rpki-client