Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: +YYd2at2hwhKj3uogQ4bqkyJJJxtARdV263asZ/kGt0=
Subject key identifier: F8:DA:68:85:38:AA:76:5E:17:AF:02:3F:70:0B:0B:E0:26:FB:93:96
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 01A0C36978994763781EFADAA01A468920C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 10:01:04 +0000
Manifest this update: Mon 21 Sep 2026 10:01:04 +0000
Manifest next update: Tue 22 Sep 2026 10:01:04 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: BBq7voR5YcAhp/D8jHErq27hSXv2ndHJ1zWynAKed/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:78:99:47:63:78:1e:fa:da:a0:1a:46:89:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Sep 21 10:01:04 2026 GMT
Not After : Sep 22 10:01:04 2026 GMT
Subject: CN=f8da688538aa765e17af023f700b0be026fb9396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:2d:6f:d1:42:84:87:49:e1:4b:90:a4:e6:
2f:9e:d8:08:60:51:bf:cc:e6:30:79:15:ca:89:98:
c2:3a:2c:ec:8e:26:bd:0a:b6:03:0c:e6:4d:bc:07:
86:4e:a1:93:80:22:18:91:8a:01:57:42:18:47:9d:
e3:00:b7:d1:03:40:23:3c:19:87:3b:bb:e7:87:61:
78:a6:ed:b7:ef:53:9a:ab:8e:25:c5:df:22:d0:36:
ec:e5:6b:b0:71:15:72:2a:22:0f:00:0c:cb:47:5d:
2b:e6:c1:bd:0a:76:e5:70:25:46:bf:6f:cf:2e:8b:
b0:a8:8a:4d:1c:18:bf:89:b2:ac:33:fe:98:6b:4c:
45:b4:73:32:9e:9f:df:4d:54:7d:5d:7f:41:32:a0:
8e:54:c6:d7:90:6c:c6:03:1d:2f:d6:1c:b8:1f:fe:
f6:14:2c:0f:50:6f:26:fa:24:ac:fb:2e:0e:33:dd:
0f:d5:6a:59:22:28:8a:75:b2:7b:c0:2d:02:46:49:
ee:2a:4d:19:24:4b:4e:4f:43:02:6e:48:8a:b0:e7:
eb:b6:3b:98:81:ef:73:53:93:53:81:87:60:a2:2a:
34:8c:9d:09:b3:13:5c:4d:98:69:d2:b5:e8:67:36:
3c:ac:83:96:82:36:b3:64:76:58:67:63:eb:80:e7:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DA:68:85:38:AA:76:5E:17:AF:02:3F:70:0B:0B:E0:26:FB:93:96
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:a5:1b:9f:08:30:2b:59:fe:f9:79:9d:40:71:bc:03:74:
5d:3b:3f:1b:9c:69:62:7b:3c:28:a3:c0:26:b0:81:de:f9:9c:
2d:b3:64:87:6b:96:2e:af:ca:e8:5f:5d:2c:53:02:04:e3:31:
8c:5a:54:88:c6:88:19:a0:ea:ae:ba:4d:3b:cd:eb:29:e7:c6:
97:13:f5:54:54:06:09:bb:32:c3:cd:12:da:8d:36:63:96:4a:
8e:ae:c9:f1:c4:aa:c4:69:64:fd:15:33:80:7e:7a:95:a3:0d:
a0:66:76:39:de:5b:20:4e:79:a9:30:d1:98:7b:0c:17:41:27:
37:65:ad:a9:a7:51:2d:bd:e1:b0:ca:2a:c5:0d:45:ce:c0:10:
15:4e:61:30:aa:e1:46:39:9c:66:16:02:7c:7a:f0:06:e7:c6:
56:2f:8f:0e:92:0c:5a:1c:0d:9e:75:8f:62:b7:f6:c2:3f:d6:
06:03:3e:dd:5a:3b:c9:61:87:80:c4:39:ff:0a:26:6f:d7:63:
23:19:d7:5b:8d:2e:1f:69:bb:59:82:08:2e:fe:4c:de:45:99:
ba:c4:d2:e6:38:dc:b9:25:45:7e:bc:72:64:5b:75:d0:c9:6c:
7a:b8:c2:c8:93:a2:39:6d:85:31:04:ef:23:cd:c7:2d:4f:2d:
6b:92:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:27:57 2026 by rpki-client