Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: 2TkblX0nVxJ8foXmWZpRxSt7ANisP20A8XmiSJto37I=
Subject key identifier: FF:47:F9:FA:FD:D4:D7:57:06:4B:B9:42:65:A7:ED:6C:53:47:4E:39
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 019FAA197CA19B629BCCC714D630EA46D0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0E0F
Signing time: Tue 28 Jul 2026 19:00:24 +0000
Manifest this update: Tue 28 Jul 2026 19:00:24 +0000
Manifest next update: Wed 29 Jul 2026 19:00:24 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: TFKuqf/pWgDFHem1nQJ7ZtuoYJRucREW6eMeRnU8N0o=)
2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:7c:a1:9b:62:9b:cc:c7:14:d6:30:ea:46:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Jul 28 19:00:24 2026 GMT
Not After : Jul 29 19:00:24 2026 GMT
Subject: CN=ff47f9fafdd4d757064bb94265a7ed6c53474e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c8:f3:bb:74:2b:3a:3b:e5:39:63:6a:93:
92:ea:60:e3:08:47:7b:e0:f4:67:ef:55:b5:d6:ec:
85:42:66:14:46:47:27:f9:9c:6d:0b:01:31:09:83:
a9:b9:05:5d:66:d6:cd:9a:38:a9:ab:1b:5b:05:2c:
f2:40:8b:b5:2e:bb:06:82:98:25:9c:f4:8f:79:f7:
26:d1:66:60:5e:63:c8:77:a8:3c:4b:c9:06:40:26:
56:99:d0:50:84:39:a6:4e:9f:68:c1:5e:89:ab:3f:
64:e5:ee:0a:3f:a7:ed:2d:49:16:82:b5:4f:51:a3:
69:65:3b:9b:6d:b8:c4:9e:8b:ba:62:e4:fd:bf:ec:
1b:15:85:ab:dd:b8:dd:14:d5:f6:b8:0a:5a:3c:e3:
ed:ad:55:b4:59:d5:ec:04:fc:09:e5:8f:5a:79:c9:
44:fc:dc:57:54:bd:6d:65:65:dc:11:c3:2a:1d:61:
e8:b2:9e:cc:3a:67:b7:d9:aa:1f:6a:78:dc:52:1f:
1b:43:88:dd:21:f1:2e:95:16:ea:18:92:fa:48:56:
01:6d:b7:32:1f:64:a2:7d:43:e6:74:57:8e:91:da:
cb:e1:6c:0d:83:fd:90:9c:25:e0:70:22:53:b8:10:
a5:1b:9c:b3:4f:92:f4:c6:93:0a:87:0b:b0:5a:9c:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:F9:FA:FD:D4:D7:57:06:4B:B9:42:65:A7:ED:6C:53:47:4E:39
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d9:32:2d:0d:71:88:50:04:ed:fb:66:f2:2d:d0:1b:94:f6:
9a:de:3a:4c:38:ef:1b:6c:42:1e:ed:f9:63:b4:4f:d9:38:be:
68:97:6f:12:10:b0:5b:01:26:cf:4e:a8:de:3f:9a:38:3a:90:
93:b5:8f:ba:d8:10:56:ee:4c:50:a1:7b:fc:3a:7e:01:9a:7e:
a2:a9:0f:ac:60:59:21:f7:4a:1a:be:a6:96:cc:94:b8:e2:38:
24:cd:9d:68:da:ec:4f:cb:27:de:b2:55:12:3f:42:c0:dc:65:
33:e0:b3:24:ae:4c:58:84:92:76:a7:c1:54:cc:14:6a:e1:ee:
0d:47:ca:17:12:91:22:18:d5:3e:b2:ce:d1:0a:02:b2:32:2f:
4d:2d:8a:4e:89:1e:3e:2a:87:e2:7c:0e:a8:d1:63:22:cb:c2:
bf:69:e7:41:c0:26:84:12:38:50:34:40:f9:f0:77:8b:03:93:
57:a3:39:c0:15:b4:6f:27:a4:90:a6:e9:36:86:8a:42:0a:9c:
c9:17:d4:fa:05:a8:49:e9:f1:64:c1:fc:e6:26:33:d6:65:ae:
5f:88:eb:d4:73:af:a4:75:80:10:bb:ad:7f:11:83:13:05:72:
84:fc:72:d3:dd:0b:8a:74:3d:38:9a:c1:60:24:2b:20:93:f3:
de:df:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:15 2026 by rpki-client