Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: z9dbZq0ApLVDsbLATAmsVGTKjWoG6WAwvQAytt6kusY=
Subject key identifier: 87:B5:A5:2F:2D:64:AF:2D:7C:FC:CA:28:4F:89:E1:D3:4F:F4:05:2D
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 019CABD9D4DC3FD8A2B3EAEA96F80D594DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 1798
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: htb5GAUyyrUSGySZ8Ty+osjRNK9Y09hRTD2kgzurOdM=)
2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d4:dc:3f:d8:a2:b3:ea:ea:96:f8:0d:59:4d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=87b5a52f2d64af2d7cfcca284f89e1d34ff4052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:51:e2:9a:96:d7:50:aa:9a:99:9a:70:c4:
62:e7:6a:c2:49:54:d0:4e:48:ba:d1:32:cd:69:9f:
10:27:f9:f7:0b:26:c2:08:ab:a4:86:7d:3f:68:b5:
d3:03:7b:8e:3c:f4:e4:4d:7c:f7:58:35:2d:5a:e9:
dd:f5:d1:76:3a:31:05:8a:f0:0e:55:44:fc:7e:e8:
1c:1d:0e:23:42:93:e0:f0:6c:93:1b:51:a8:03:94:
76:cf:96:68:36:44:68:61:d8:51:5d:49:d5:d8:55:
8c:c8:b3:e2:83:77:a5:4f:69:de:3b:c7:1a:e1:b3:
fe:4c:b4:8b:0e:a9:b9:a5:3d:a2:07:e6:3c:fc:bb:
c1:41:b5:db:6f:17:75:b9:9f:b1:30:d6:70:7b:b1:
e6:87:43:3a:0d:24:76:08:d2:d5:3f:57:31:9a:5b:
93:05:8c:6f:f5:2b:1f:d5:59:2a:57:a3:3f:94:16:
a8:2d:c6:3b:09:6f:c9:f8:46:d4:7d:6d:77:79:5a:
d9:da:94:97:dc:89:01:cd:ba:04:39:6b:11:c7:ba:
8b:f7:cb:05:c7:79:67:e8:35:15:45:7a:9c:be:09:
2a:d8:71:b7:88:f7:81:e0:ae:74:3c:3c:2c:bc:d0:
82:40:47:19:87:c0:13:58:31:53:b5:66:0b:70:e7:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:A5:2F:2D:64:AF:2D:7C:FC:CA:28:4F:89:E1:D3:4F:F4:05:2D
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:93:78:07:e9:58:da:df:f6:1b:c3:dd:26:12:05:c1:d5:
b5:95:7c:96:8c:d6:50:b2:84:11:d7:07:c3:a8:97:9a:54:11:
bd:c9:a9:8f:f5:82:00:32:d5:bb:41:29:f2:3b:fc:1f:95:25:
44:01:4c:a8:3b:a4:7f:a2:fb:dc:7e:3f:72:c3:f4:42:53:31:
d7:1a:0c:8a:65:9b:b2:0c:75:59:1d:ef:01:b6:d8:78:ef:25:
46:22:c3:d3:fa:e1:57:b8:2b:40:19:ab:e7:f7:b4:a1:54:8f:
77:18:1a:6b:25:e3:b9:36:5e:00:76:89:da:5c:a7:7d:12:ee:
5b:09:4e:eb:87:15:45:d3:40:ca:08:46:ff:bd:57:13:fe:b0:
0f:f5:1f:54:8d:b2:39:c1:79:3b:09:a6:f3:de:10:e2:bb:ef:
9b:ee:64:87:c9:ae:42:54:3c:b8:47:65:24:33:6e:39:aa:73:
6c:ae:ac:a9:29:eb:d8:aa:ea:eb:1a:e4:17:7d:be:91:67:b3:
a9:5c:25:bf:8d:62:9f:be:8c:a2:d0:00:a0:e4:39:8b:7e:6d:
1f:07:2b:d0:32:b4:33:a3:74:b2:ba:25:23:c9:af:0f:6d:f1:
56:22:2a:57:c0:1e:a2:8d:be:4e:e9:cb:d7:d0:bc:35:74:07:
6b:1f:d3:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dTcP9iis+rqlvgNWU3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJlNmYwNzU0MDBkMzA1YTE2ZGRlNjkwZTI1Y2JkOTQ2
NDVjYmUwHhcNMjYwMzAyMDAwMTQ1WhcNMjYwMzAzMDAwMTQ1WjAzMTEwLwYDVQQD
Eyg4N2I1YTUyZjJkNjRhZjJkN2NmY2NhMjg0Zjg5ZTFkMzRmZjQwNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU9R4pqW11CqmpmacMRi52rCSVTQ
Tki60TLNaZ8QJ/n3CybCCKukhn0/aLXTA3uOPPTkTXz3WDUtWund9dF2OjEFivAO
VUT8fugcHQ4jQpPg8GyTG1GoA5R2z5ZoNkRoYdhRXUnV2FWMyLPig3elT2neO8ca
4bP+TLSLDqm5pT2iB+Y8/LvBQbXbbxd1uZ+xMNZwe7Hmh0M6DSR2CNLVP1cxmluT
BYxv9Ssf1VkqV6M/lBaoLcY7CW/J+EbUfW13eVrZ2pSX3IkBzboEOWsRx7qL98sF
x3ln6DUVRXqcvgkq2HG3iPeB4K50PDwsvNCCQEcZh8ATWDFTtWYLcOf0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe1pS8tZK8tfPzKKE+J4dNP9AUtMB8GA1UdIwQY
MBaAFNNr5vB1QA0wWhbd5pDiXL2UZFy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQt
MzBjMWM1YTA4MGQ5LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQtMzBjMWM1YTA4MGQ5
LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3+TeAfp
WNrf9hvD3SYSBcHVtZV8lozWULKEEdcHw6iXmlQRvcmpj/WCADLVu0Ep8jv8H5Ul
RAFMqDukf6L73H4/csP0QlMx1xoMimWbsgx1WR3vAbbYeO8lRiLD0/rhV7grQBmr
5/e0oVSPdxgaayXjuTZeAHaJ2lynfRLuWwlO64cVRdNAyghG/71XE/6wD/UfVI2y
OcF5Owmm894Q4rvvm+5kh8muQlQ8uEdlJDNuOapzbK6sqSnr2Krq6xrkF32+kWez
qVwlv41in76MotAAoOQ5i35tHwcr0DK0M6N0srolI8mvD23xViIqV8Aeoo2+TunL
19C8NXQHax/TaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:14 2026 by rpki-client