Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: 8N+Bb9HjX13kpww0prppeY6FkzOUT6he26jF1x9Hi0g=
Subject key identifier: 85:01:EA:11:46:E6:A4:EA:69:B2:40:C6:F4:43:F7:33:40:2C:53:68
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 01A0CFA4757841EBEEE0EEE8B68ABF91087F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:00:56 +0000
Manifest this update: Wed 23 Sep 2026 19:00:56 +0000
Manifest next update: Thu 24 Sep 2026 19:00:56 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: 5QTJRuPLDnq8CIjpiBeldPBs1DJJ8R6ZwyPhcGAABPo=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:75:78:41:eb:ee:e0:ee:e8:b6:8a:bf:91:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Sep 23 19:00:56 2026 GMT
Not After : Sep 24 19:00:56 2026 GMT
Subject: CN=8501ea1146e6a4ea69b240c6f443f733402c5368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:09:59:a0:62:88:19:1e:a5:65:1d:04:a9:
ac:17:0f:8d:57:3e:f8:90:3a:2c:d4:20:09:73:c5:
0e:4d:91:04:f0:30:1d:c8:93:90:a2:49:46:eb:ac:
ef:65:7c:cb:b6:b0:3e:04:42:48:bc:18:23:b9:6f:
ab:d5:d3:c0:75:df:4c:ef:7a:c2:34:24:20:c9:e6:
6c:4b:77:5b:e3:6f:cd:b0:b8:0a:fb:e6:63:82:97:
18:70:9d:9e:44:50:ca:e1:a3:37:37:9f:53:e6:68:
42:c1:c8:ef:1f:e8:cd:a5:37:1f:dd:7b:a0:cf:e7:
7a:d9:f3:2c:c3:80:36:9a:3b:6d:14:5f:01:da:29:
29:24:b8:ed:ee:55:e5:24:01:3e:c6:51:a2:96:4b:
4d:2c:93:4e:73:c5:1a:78:bb:a9:3a:9f:a5:3e:4e:
95:11:20:b0:9f:98:89:6d:04:b3:00:91:cf:18:82:
de:0a:ea:12:32:f4:37:26:0e:48:e9:a9:e5:8d:a9:
dd:89:4c:06:0a:74:9d:af:5a:76:b7:fe:55:a9:f7:
bb:fd:8d:19:b0:ab:6d:28:32:4c:93:4a:3d:7f:a8:
ae:53:91:2a:cd:e9:4a:cb:98:6c:6d:bc:82:7d:76:
3a:98:07:5b:f5:19:39:21:fd:a6:e6:a5:86:bd:51:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:01:EA:11:46:E6:A4:EA:69:B2:40:C6:F4:43:F7:33:40:2C:53:68
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bf:39:4f:24:f5:3e:05:df:e9:0c:5e:29:42:5f:9c:ee:69:
32:28:4b:68:c1:93:7b:e5:bb:b5:fc:9d:db:e1:b2:a9:81:dc:
f8:5d:f8:12:ab:40:6d:65:e2:09:ae:ea:5a:dd:40:c7:aa:7f:
ef:c4:b8:ce:61:84:a9:6e:f7:c8:ab:28:8f:cd:d4:dc:65:84:
5f:8f:be:0b:2e:62:5f:9f:21:d3:4e:45:88:35:69:55:a9:5c:
d1:26:86:68:f3:14:3c:54:79:2f:c8:95:71:2a:e0:ef:8b:3c:
b5:3b:ca:1f:c2:ba:2a:f2:b4:69:7f:6b:a6:75:69:94:e4:53:
95:32:87:e6:a1:b9:95:8d:d3:e7:a3:ac:d5:f6:f8:30:97:0f:
df:dd:38:e0:fc:b5:bc:3f:c0:a6:cd:d7:4d:d1:04:83:04:cd:
16:00:c2:70:2d:15:b2:b9:bb:80:77:39:ff:ea:c2:ef:a5:e9:
fb:fe:02:4e:cb:3e:49:6f:a4:bc:7c:80:b7:19:1c:bc:aa:ad:
ce:83:ca:f7:b3:4e:fe:f8:a5:7a:dd:da:45:8e:fd:3c:46:2e:
73:25:d2:9b:0c:f5:ec:32:3e:10:26:97:71:dc:d8:70:62:a5:
df:ce:67:f8:4f:67:25:82:3c:4c:8c:a2:f1:58:b0:7c:bb:d3:
95:f7:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:29 2026 by rpki-client