Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: NLOC2noC4kIEz7lxk1P7rBc37jHtcCAAIye/Yqn3w4A=
Subject key identifier: 09:F2:A2:06:AE:70:89:F1:9C:B9:81:0F:E0:BB:FA:6F:78:A2:BD:C2
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 019DA309FA1680A8BB35322DDB6D1AE32C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 1818
Signing time: Sun 19 Apr 2026 00:00:33 +0000
Manifest this update: Sun 19 Apr 2026 00:00:33 +0000
Manifest next update: Mon 20 Apr 2026 00:00:33 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: Kdsn5WCaP44nw8pDfDftrs/r2l26UFYMrmrK49in/Gw=)
2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fa:16:80:a8:bb:35:32:2d:db:6d:1a:e3:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Apr 19 00:00:33 2026 GMT
Not After : Apr 20 00:00:33 2026 GMT
Subject: CN=09f2a206ae7089f19cb9810fe0bbfa6f78a2bdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:b4:a0:4a:c0:3b:91:41:88:f9:d9:64:05:
40:f9:7f:f8:1a:c6:6a:37:57:49:c0:cb:1a:39:f7:
60:fd:a0:05:bf:5d:97:78:88:f3:d8:99:7b:7b:07:
97:53:a6:e0:ca:52:8f:39:2c:41:f8:31:4c:80:86:
83:ba:36:0c:09:12:88:ca:ae:1f:85:98:d5:83:a4:
a8:37:c0:fd:37:cf:19:40:8d:4e:63:ab:34:2e:c0:
36:5e:21:f8:f9:c2:55:42:6d:1a:e2:f0:a2:80:4f:
1c:79:38:6c:5b:18:e1:82:d2:fc:a7:8d:5e:bc:59:
29:ad:ad:d3:d2:2d:6c:3e:ad:b3:d4:d5:df:91:82:
aa:d0:5b:7d:d7:aa:16:24:0d:61:c6:83:64:25:94:
07:cd:95:c5:13:23:9f:c5:ba:b6:86:47:28:4f:83:
51:22:23:2d:ac:ea:b7:e0:6b:05:05:90:40:2e:b0:
25:88:aa:b9:ee:7d:1d:61:f8:df:24:0e:82:6e:3d:
e4:3d:5e:03:1d:32:08:54:e2:46:f6:06:d7:6b:4b:
6d:36:c2:f6:49:e4:18:05:5d:91:fa:23:69:04:a7:
7e:13:a9:3c:57:b2:71:81:ff:3a:bb:c5:ff:c1:1f:
12:59:83:eb:2b:01:a0:c3:9c:17:c8:5a:b6:d3:81:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:A2:06:AE:70:89:F1:9C:B9:81:0F:E0:BB:FA:6F:78:A2:BD:C2
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:25:0f:93:f6:61:0c:13:33:40:17:ed:5d:21:65:8e:51:cb:
82:68:63:ae:33:a6:ec:20:fb:cf:4b:cc:a7:4e:15:67:db:67:
d2:8a:bd:b7:00:bf:33:9d:b7:06:29:e0:96:f1:ec:f1:db:2a:
27:33:10:5b:0d:fe:6d:da:a7:9a:3c:0c:41:c7:53:b6:7d:75:
21:54:a4:d9:b4:4f:3b:b9:6a:53:7e:ee:e0:f7:00:2e:57:0e:
a1:01:c1:a9:0c:83:e9:ea:29:45:fa:b0:17:9a:b6:20:41:c3:
ee:e8:e7:64:33:bd:08:2a:60:0a:9c:a8:68:4f:e7:3f:eb:40:
d7:96:09:81:77:da:67:7d:0e:05:e1:0c:2b:4e:8d:17:57:d9:
63:2e:bf:7d:63:10:e8:7c:4f:d9:64:6d:fa:fd:db:56:ca:71:
48:dd:93:76:3b:f4:db:67:bd:d7:a9:30:55:d5:b5:61:1a:ea:
f1:db:99:07:49:02:b9:7e:74:b0:ab:00:23:4a:25:0a:5d:a1:
d7:e6:df:39:bf:23:ef:f8:d1:3a:4c:1f:98:7c:bf:50:8c:e2:
ab:6e:4d:33:d9:3c:52:8c:31:0d:e8:13:31:4d:79:86:49:e5:
5a:a5:f5:8f:1b:59:62:78:e3:f6:84:52:3a:b0:ca:56:7c:15:
2c:09:98:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCfoWgKi7NTIt220a4yxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJlNmYwNzU0MDBkMzA1YTE2ZGRlNjkwZTI1Y2JkOTQ2
NDVjYmUwHhcNMjYwNDE5MDAwMDMzWhcNMjYwNDIwMDAwMDMzWjAzMTEwLwYDVQQD
EygwOWYyYTIwNmFlNzA4OWYxOWNiOTgxMGZlMGJiZmE2Zjc4YTJiZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SS0oErAO5FBiPnZZAVA+X/4GsZq
N1dJwMsaOfdg/aAFv12XeIjz2Jl7eweXU6bgylKPOSxB+DFMgIaDujYMCRKIyq4f
hZjVg6SoN8D9N88ZQI1OY6s0LsA2XiH4+cJVQm0a4vCigE8ceThsWxjhgtL8p41e
vFkpra3T0i1sPq2z1NXfkYKq0Ft916oWJA1hxoNkJZQHzZXFEyOfxbq2hkcoT4NR
IiMtrOq34GsFBZBALrAliKq57n0dYfjfJA6Cbj3kPV4DHTIIVOJG9gbXa0ttNsL2
SeQYBV2R+iNpBKd+E6k8V7Jxgf86u8X/wR8SWYPrKwGgw5wXyFq204GTawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnyogaucInxnLmBD+C7+m94or3CMB8GA1UdIwQY
MBaAFNNr5vB1QA0wWhbd5pDiXL2UZFy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQt
MzBjMWM1YTA4MGQ5LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQtMzBjMWM1YTA4MGQ5
LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiUPk/Zh
DBMzQBftXSFljlHLgmhjrjOm7CD7z0vMp04VZ9tn0oq9twC/M523BinglvHs8dsq
JzMQWw3+bdqnmjwMQcdTtn11IVSk2bRPO7lqU37u4PcALlcOoQHBqQyD6eopRfqw
F5q2IEHD7ujnZDO9CCpgCpyoaE/nP+tA15YJgXfaZ30OBeEMK06NF1fZYy6/fWMQ
6HxP2WRt+v3bVspxSN2Tdjv022e916kwVdW1YRrq8duZB0kCuX50sKsAI0olCl2h
1+bfOb8j7/jROkwfmHy/UIziq25NM9k8UowxDegTMU15hknlWqX1jxtZYnjj9oRS
OrDKVnwVLAmYHA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:24 2026 by rpki-client