Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: FRNFG35se+FrrUom+Zdv3/5Fwl4LIdPYRfZSv0Rjjzg=
Subject key identifier: 36:4A:CE:4B:EA:1A:DA:E2:00:23:8A:A5:31:89:20:DB:AA:F9:E2:EE
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019D28F2BED11F9B3597EA6992D5D88FB12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:30 +0000
Manifest this update: Thu 26 Mar 2026 07:01:30 +0000
Manifest next update: Fri 27 Mar 2026 07:01:30 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: V1SpZ3nyTGk25QEyCfgB+lp0PhSHGqjjn6rl3wPHqj4=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:be:d1:1f:9b:35:97:ea:69:92:d5:d8:8f:b1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Mar 26 07:01:30 2026 GMT
Not After : Mar 27 07:01:30 2026 GMT
Subject: CN=364ace4bea1adae200238aa5318920dbaaf9e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:d5:b4:53:a9:82:73:c8:29:80:fc:5b:80:
05:54:ce:44:25:90:bb:0c:e0:91:32:2b:0a:55:04:
16:6f:0b:a5:9b:f1:49:de:b5:12:87:df:78:8f:1f:
51:c0:89:63:4f:ca:c3:a1:92:47:fb:f5:93:c2:e8:
fe:a4:0d:d6:5c:ec:2a:fa:5e:09:60:7e:43:58:2b:
97:25:71:af:dc:9d:b4:ec:2f:e0:61:0c:0e:3b:53:
ed:69:8c:0e:7c:03:c2:68:3f:40:ab:ab:d2:64:f4:
2c:b6:38:a6:65:3a:49:3b:1c:f5:57:36:f4:7f:c3:
62:bf:b5:29:38:6f:84:cc:28:65:dd:c9:98:36:54:
f8:66:b4:ee:58:49:b1:b0:cb:31:a9:94:01:79:2b:
5b:b8:30:2c:42:60:50:58:aa:84:05:ab:d5:84:6c:
06:dc:d2:71:32:1f:2c:6f:75:f3:a1:a7:96:cd:21:
62:3b:48:44:35:19:78:fe:55:dc:3e:e8:aa:06:d6:
ac:4a:35:3f:a0:16:19:e3:df:ec:6b:72:b7:7f:70:
72:24:a5:d8:0a:30:36:ce:72:0d:23:be:56:5e:f7:
81:c9:47:d2:ad:b3:e1:82:3f:c6:51:a8:e2:0d:8c:
1d:49:0a:6d:76:b8:4c:90:24:34:35:56:16:8f:d8:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4A:CE:4B:EA:1A:DA:E2:00:23:8A:A5:31:89:20:DB:AA:F9:E2:EE
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fb:0f:51:ef:35:02:d3:83:8c:35:4b:8c:08:10:3c:bc:3c:
d7:a8:39:12:a7:94:c0:9e:99:68:38:7b:b0:0e:a0:5b:1b:89:
3b:5f:d4:5b:b5:84:4b:c7:72:5c:0a:71:2d:a6:9b:5c:fd:53:
fc:74:80:14:58:60:a0:9a:c5:2e:8b:3e:09:8a:a7:7a:18:74:
44:6a:9c:eb:b1:b7:bc:81:4b:bd:62:2c:fb:02:b6:c8:52:2a:
58:06:b1:52:da:e1:40:3d:2c:f6:24:bb:0f:ea:5d:ba:16:2a:
33:53:79:60:ca:53:79:a5:93:b9:18:ae:4d:67:1b:25:7a:96:
d9:f7:7e:5a:90:c6:3c:a2:56:c6:dd:63:d5:60:ac:94:af:6e:
90:5c:17:5c:36:62:17:b5:8d:b9:af:83:b6:48:3e:65:98:b7:
51:97:3a:d3:74:69:c3:cd:fc:b7:cf:3d:83:61:87:a5:be:4c:
e7:24:94:99:5e:f1:ca:1e:ec:46:73:7a:53:22:c8:3d:9e:7e:
be:32:d1:77:8c:c7:c7:49:fa:77:42:81:d7:c0:eb:3a:79:27:
e8:66:ae:86:fe:04:aa:12:7f:2c:f4:5a:8e:da:71:b2:81:20:
9a:68:7b:4f:b2:40:e0:c4:07:14:a9:d6:52:f1:a6:48:22:08:
c4:6e:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:39 2026 by rpki-client