Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: dymuEF/qUJbbnBvEGFfgBt292HT5wEtIarMgwvilE6A=
Subject key identifier: CB:C8:7C:33:98:9B:75:93:EF:DB:AB:0C:C7:4E:1D:29:37:DA:CF:AB
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 01A0F720A67ABB69EA2AF9EEE34A537C3BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0E40
Signing time: Thu 01 Oct 2026 11:01:47 +0000
Manifest this update: Thu 01 Oct 2026 11:01:47 +0000
Manifest next update: Fri 02 Oct 2026 11:01:47 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: kVvjcOkR+4iAZklZHMzIvcajz+mYJ80o+JPLMoZZyxQ=)
2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:20:a6:7a:bb:69:ea:2a:f9:ee:e3:4a:53:7c:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Oct 1 11:01:47 2026 GMT
Not After : Oct 2 11:01:47 2026 GMT
Subject: CN=cbc87c33989b7593efdbab0cc74e1d2937dacfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:9d:35:1a:a2:0e:b8:dc:53:0b:a9:0a:84:
30:e9:9b:85:cb:f2:b7:a8:a6:42:8d:ce:03:61:6f:
e8:7a:09:3d:68:b7:b1:ef:80:37:18:55:77:39:f6:
9a:4e:5b:14:11:aa:cf:7a:41:cb:66:9e:98:1b:07:
8f:85:93:45:fb:46:c8:50:67:d0:c8:e1:79:7c:b6:
66:4f:c5:2e:55:6d:d1:8f:1d:84:9a:7c:aa:45:93:
b6:3f:2d:63:fb:a4:a3:31:b1:40:36:cd:b7:22:c6:
42:b7:0a:72:11:66:41:6e:ad:67:15:f6:56:b5:7c:
e8:89:15:b4:81:1e:6b:76:70:35:3c:af:e2:bc:bb:
be:02:41:95:85:59:ae:c7:b3:c8:d1:a1:22:8f:bc:
62:ac:ac:11:cc:d9:0b:93:33:a2:7b:31:9c:5e:b9:
21:1c:89:26:7b:f8:50:aa:34:9f:74:50:75:73:ea:
00:e0:13:ef:6e:5c:d9:5a:2f:fc:51:39:b8:01:b0:
4a:6f:e9:76:9a:06:bb:87:92:66:49:48:cc:40:e6:
a0:3d:5a:56:b2:6b:48:55:2a:09:5e:00:6d:ed:46:
b5:54:f6:99:cb:4e:c3:27:d8:72:13:01:fb:28:20:
9d:a4:59:62:ba:1d:6a:c7:b9:8c:78:dd:74:73:39:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:7C:33:98:9B:75:93:EF:DB:AB:0C:C7:4E:1D:29:37:DA:CF:AB
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:96:68:d5:28:bb:c5:a3:0c:83:b7:5c:17:04:94:9e:38:d5:
93:b9:b6:bd:34:dc:a0:06:00:7e:da:fd:0d:4e:ef:6f:7f:eb:
45:a8:93:6f:92:e0:7d:99:40:55:0d:2a:f6:c2:6a:e6:cb:68:
88:f4:6d:c3:b0:09:b7:db:9d:f3:00:a3:c2:d4:1f:73:51:85:
4c:99:9a:22:79:95:16:30:b2:1f:be:8a:c6:9b:fb:57:a3:b3:
eb:a7:73:23:23:04:25:75:a1:91:32:b2:91:95:1e:4f:1e:c8:
d0:8c:ec:87:51:b5:db:59:c5:75:19:4b:b5:8b:e7:75:79:f0:
bb:ed:13:98:56:86:d4:a3:db:7e:f1:84:88:aa:b2:03:2f:52:
1a:1a:9e:db:dc:0a:cd:bb:f0:30:df:32:e6:51:01:ce:16:fd:
58:9f:98:54:d5:d7:39:ed:e1:41:fd:29:43:14:16:ba:e4:b0:
eb:74:97:b7:c0:8b:d3:97:f5:51:07:4f:66:f5:ac:0d:4c:06:
76:94:09:de:ac:1b:05:ee:0a:cc:c1:bf:65:6f:c1:95:8d:d6:
64:84:42:b0:56:5a:8f:ce:3a:6e:c8:24:dc:6f:8e:95:49:1e:
60:e1:b9:f5:4d:dc:a6:b5:e0:fd:ae:3c:b7:96:b2:c6:c1:a3:
ee:0a:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:15:14 2026 by rpki-client