Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File: 02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier: VU2sB6r7YTH3GPmWJhB55IBHMVf5hfFqqrKbrKPKZYc=
Subject key identifier: 53:5C:3E:0C:8C:E2:48:47:E5:09:AC:CD:D4:58:8E:17:52:ED:E3:43
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 01A120C0AE56FCC5D0A6A7C8C4E0BC07DB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number: 0ED1
Signing time: Fri 09 Oct 2026 13:01:00 +0000
Manifest this update: Fri 09 Oct 2026 13:01:00 +0000
Manifest next update: Sat 10 Oct 2026 13:01:00 +0000
Files and hashes: 1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: kyeeZ6DstJ5vjHF/52iv+sGYidcqLs4vgmlNlk1jGaE=)
2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:ae:56:fc:c5:d0:a6:a7:c8:c4:e0:bc:07:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Oct 9 13:01:00 2026 GMT
Not After : Oct 10 13:01:00 2026 GMT
Subject: CN=535c3e0c8ce24847e509accdd4588e1752ede343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:6f:72:31:35:4c:89:e4:52:d8:87:77:ab:
1f:e0:78:74:32:70:b1:8e:ef:c7:b9:75:30:06:4f:
b3:22:18:e4:86:9b:cf:a5:3b:c9:b1:04:51:00:f3:
c4:35:9a:b0:e2:8b:97:40:15:6b:eb:4c:ff:6a:f1:
fb:d9:f1:24:0f:8c:ba:2a:4b:8e:da:b8:79:59:8d:
d2:56:b5:aa:0a:76:68:49:99:40:0f:4d:be:bf:2a:
38:72:79:0d:e9:d8:9b:8e:b6:0c:1c:71:25:15:6a:
68:73:29:91:f0:e0:c3:0c:d6:67:81:2c:6d:14:71:
76:36:50:25:b0:ed:9f:9d:3a:38:ab:37:91:b5:a2:
12:f1:62:09:bf:09:3c:cd:57:83:78:16:71:8f:d2:
99:ed:f3:2f:f6:0c:28:7d:5b:97:d7:39:97:f1:b6:
4e:96:74:3a:11:50:80:92:cb:78:ea:d4:0a:45:c5:
ae:b9:4a:ff:14:2b:bf:f3:f6:73:b7:04:19:ea:a4:
e9:25:c0:34:10:9b:95:06:1f:77:06:d5:1f:18:a6:
29:e7:fe:69:4f:e8:69:5b:8b:a0:11:f8:e9:ce:f0:
4a:9a:a3:78:78:d4:27:8b:33:b7:c4:fe:2b:b1:5e:
5b:d0:8b:bd:c9:68:26:10:1b:b5:9d:0b:68:27:a6:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:3E:0C:8C:E2:48:47:E5:09:AC:CD:D4:58:8E:17:52:ED:E3:43
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ce:af:2d:a5:83:c8:e4:3a:4e:d6:ed:94:42:ad:10:7d:d6:
e7:f1:4b:69:e8:b3:85:c0:03:b0:7e:38:cf:37:54:48:c2:57:
a7:fe:af:02:b6:57:52:cd:fd:26:7a:5f:1f:03:d6:e5:49:da:
f9:0d:a1:45:0f:4c:aa:08:07:7c:cd:07:c6:b3:8a:c3:7c:df:
da:67:5c:5d:3d:d4:b9:e5:74:ee:df:c2:c0:a0:0b:18:5e:83:
44:c7:3a:d4:06:db:31:d1:63:11:13:a5:6c:f8:59:ca:8e:ce:
db:00:e5:5e:98:0e:7e:61:9e:c4:b3:2c:31:12:42:17:45:92:
21:00:71:8d:df:03:5c:b4:79:73:4e:4a:66:4e:c9:25:0c:10:
88:e4:f5:bb:ca:50:0f:51:da:d7:62:e6:58:48:2e:e1:1f:8a:
78:e6:88:89:45:bc:45:ff:6a:ce:61:be:16:e7:d9:02:cf:31:
cf:4b:1a:5d:fe:59:f6:04:e9:ad:2a:0f:48:05:01:7d:d2:7c:
3e:ff:ff:44:7b:5b:2d:db:97:a5:01:05:a8:91:3e:2e:bb:fb:
71:1f:43:83:ff:73:9e:c5:f9:97:b2:4e:b8:9c:60:f8:0d:77:
3a:61:ff:59:d7:40:27:9f:73:90:ac:72:d0:62:58:7d:da:0a:
7c:f3:7c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgwK5W/MXQpqfIxOC8B9tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjI0ZTkwOGM3NDk4ZmRiNjEzNTQyNzUzZWY1NmM3NWNk
NzA0YmQwHhcNMjYxMDA5MTMwMTAwWhcNMjYxMDEwMTMwMTAwWjAzMTEwLwYDVQQD
Eyg1MzVjM2UwYzhjZTI0ODQ3ZTUwOWFjY2RkNDU4OGUxNzUyZWRlMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs11vcjE1TInkUtiHd6sf4Hh0MnCx
ju/HuXUwBk+zIhjkhpvPpTvJsQRRAPPENZqw4ouXQBVr60z/avH72fEkD4y6KkuO
2rh5WY3SVrWqCnZoSZlAD02+vyo4cnkN6dibjrYMHHElFWpocymR8ODDDNZngSxt
FHF2NlAlsO2fnTo4qzeRtaIS8WIJvwk8zVeDeBZxj9KZ7fMv9gwofVuX1zmX8bZO
lnQ6EVCAkst46tQKRcWuuUr/FCu/8/ZztwQZ6qTpJcA0EJuVBh93BtUfGKYp5/5p
T+hpW4ugEfjpzvBKmqN4eNQnizO3xP4rsV5b0Iu9yWgmEBu1nQtoJ6adewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNcPgyM4khH5QmszdRYjhdS7eNDMB8GA1UdIwQY
MBaAFNNiTpCMdJj9thNUJ1PvVsdc1wS9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80MmVmMWItMTBjNy00ZGFjLTljMTMt
NjQ1MGYxODQxMTIyLzEvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80MmVmMWItMTBjNy00ZGFjLTljMTMtNjQ1MGYxODQxMTIy
LzEvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH86vLaWD
yOQ6TtbtlEKtEH3W5/FLaeizhcADsH44zzdUSMJXp/6vArZXUs39JnpfHwPW5Una
+Q2hRQ9MqggHfM0HxrOKw3zf2mdcXT3UueV07t/CwKALGF6DRMc61AbbMdFjEROl
bPhZyo7O2wDlXpgOfmGexLMsMRJCF0WSIQBxjd8DXLR5c05KZk7JJQwQiOT1u8pQ
D1Ha12LmWEgu4R+KeOaIiUW8Rf9qzmG+FufZAs8xz0saXf5Z9gTprSoPSAUBfdJ8
Pv//RHtbLduXpQEFqJE+Lrv7cR9Dg/9znsX5l7JOuJxg+A13OmH/WddAJ59zkKxy
0GJYfdoKfPN8KA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 22:45:21 2026 by rpki-client