Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: JRd8K+JYlgDaoMULfK9zs5LYFSn54Coi0BpPRt8SLgg=
Subject key identifier: AB:7A:C9:65:D1:01:DD:71:37:4D:3D:08:C3:70:E4:04:44:F1:EE:7D
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 01A1C254621CCC5F28BC033859D78C4364F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 1AE5
Signing time: Mon 09 Nov 2026 22:01:12 +0000
Manifest this update: Mon 09 Nov 2026 22:01:12 +0000
Manifest next update: Tue 10 Nov 2026 22:01:12 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: 32YJtdiq0VufxCfHuqw8loxR+KslPkC7dCTx9SArE0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:54:62:1c:cc:5f:28:bc:03:38:59:d7:8c:43:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Nov 9 22:01:12 2026 GMT
Not After : Nov 10 22:01:12 2026 GMT
Subject: CN=ab7ac965d101dd71374d3d08c370e40444f1ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:19:31:b9:4c:a5:df:19:9d:be:2f:89:dc:
ad:1a:e5:d2:a2:fb:e0:f3:d7:1c:ed:83:45:7d:aa:
71:3c:a6:03:be:ec:8d:50:ec:1b:c6:39:9b:3f:96:
e1:1b:0b:af:50:32:77:1d:d2:13:99:71:af:4a:72:
da:b9:dd:86:18:c5:67:b8:60:d8:19:49:9d:9c:33:
78:f4:db:4e:c0:1e:dd:05:90:26:e7:22:80:bc:d8:
a0:dc:2e:91:fd:c5:58:89:52:29:7a:fd:54:45:7d:
df:f7:0f:7f:d1:fe:eb:89:10:08:5f:26:a5:38:b8:
76:a3:6a:ce:2d:e5:dc:20:7a:15:9d:28:87:0c:6d:
76:0d:9c:d9:87:2c:6e:fe:8b:c5:77:3a:2a:22:85:
0e:94:42:44:e1:79:24:b7:87:bf:c9:43:d0:82:a7:
2a:a9:a9:57:b7:15:12:fc:f0:da:11:52:e1:16:5e:
55:a0:61:7d:fb:33:c1:0e:b9:bd:1c:23:4a:dd:3c:
8e:5f:8d:ec:62:03:d7:be:61:d3:6b:f8:93:20:10:
6f:84:3b:0e:d3:52:05:2a:bd:7a:40:ef:2b:69:b3:
29:23:a3:f4:9a:bb:a9:b1:fb:e1:87:2a:d3:00:79:
0c:85:52:44:e5:22:c9:fc:ba:3c:76:b2:51:3a:db:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:C9:65:D1:01:DD:71:37:4D:3D:08:C3:70:E4:04:44:F1:EE:7D
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:23:c9:b7:91:9a:13:56:ed:74:7e:9c:a4:77:30:90:be:
c8:ff:b6:d9:f6:de:84:0d:65:40:98:b4:21:5c:6b:04:e0:51:
e1:62:36:cc:2f:0f:6a:f0:29:d1:2c:02:c3:b0:5f:81:cb:2e:
bf:19:99:7f:2d:25:55:ee:47:25:b6:91:4c:de:d0:fb:8a:12:
64:45:ff:09:19:97:ae:b6:1e:36:1e:8b:84:7d:9b:b9:98:20:
f9:50:b9:cd:04:2c:f0:38:22:20:90:fe:fe:a9:f2:2f:ef:e2:
27:0a:9b:a2:65:05:26:e7:d3:6f:d8:80:3d:3f:71:b9:89:53:
da:1e:26:05:02:a9:fe:5b:25:3e:1d:76:03:2a:90:65:42:d5:
42:4a:4d:47:67:c8:00:f7:ef:0c:67:c9:92:9a:a4:ff:fa:1d:
4a:f7:65:6f:19:0b:e2:ce:e6:3b:b1:34:92:28:a6:4a:b1:bf:
75:ef:82:2f:70:67:4e:95:2f:a3:23:d6:84:a0:00:af:27:37:
64:73:20:c6:e0:69:8f:07:b2:81:6b:85:ee:13:12:7f:df:48:
14:81:38:87:02:49:63:f9:f3:d4:dd:6b:5a:19:04:75:d2:b2:
33:0f:4c:7c:51:b5:e8:f5:e8:ef:a6:ea:d7:dd:df:b3:e1:0e:
7d:3d:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:15:05 2026 by rpki-client