Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier: g2GeDOFPi5o3O2207cNoeAkndZBv483hYUAfjSTHQ8E=
Subject key identifier: 3B:43:A4:71:30:43:90:82:50:C3:86:4E:6F:3C:3B:99:EC:9E:F3:39
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer: /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial: 019E1D5979E7EBB332EEBF0EEDF59A7C53F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number: 09BA
Signing time: Tue 12 May 2026 18:01:03 +0000
Manifest this update: Tue 12 May 2026 18:01:03 +0000
Manifest next update: Wed 13 May 2026 18:01:03 +0000
Files and hashes: 1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: PoxmH0VFObrtjMvCIQxZlFGMpdpp07Qbp5NdTkoKIkY=)
2: ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa (hash: gV8rVYlB+7jAAEqNCaLk0r1iqei/ZFmeHTI/zHMf8g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:79:e7:eb:b3:32:ee:bf:0e:ed:f5:9a:7c:53:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Validity
Not Before: May 12 18:01:03 2026 GMT
Not After : May 13 18:01:03 2026 GMT
Subject: CN=3b43a4713043908250c3864e6f3c3b99ec9ef339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:81:8d:69:f7:63:6d:4a:5c:2e:d2:50:ec:
1d:cd:e6:f1:99:0d:d0:3c:10:f7:3f:bd:b7:ba:0b:
43:82:95:66:15:aa:d8:8c:bd:47:43:30:e2:d8:5e:
b2:3a:f5:24:03:b5:da:21:ca:bf:e0:07:5e:90:11:
69:97:b5:af:b4:f3:4d:c6:54:2f:88:1e:7d:3e:eb:
8f:01:22:52:ad:31:55:1f:28:12:98:2c:09:68:42:
3f:83:0e:80:65:92:0a:46:df:09:85:d2:60:80:c9:
95:36:e0:b1:b1:6c:c6:0c:ac:59:4c:10:1b:19:da:
1b:c5:68:99:ed:cc:34:db:12:15:f9:f9:da:4b:bf:
e8:2f:35:6f:ff:a3:40:1e:d3:13:41:04:65:e6:50:
c9:a8:7e:19:b3:5a:f0:cd:02:93:ae:b4:6e:07:e8:
2b:4f:f7:e7:75:6c:3b:2c:aa:cd:f3:c7:ea:d9:0d:
2f:f3:c2:c5:2b:df:da:bb:c1:9c:1e:c8:aa:13:89:
10:13:87:77:a5:4c:0f:9e:5b:d0:7d:26:64:a5:99:
a9:37:45:df:1d:f8:01:f4:c6:d9:e2:e9:37:a0:04:
0b:93:44:f6:d1:04:40:07:8d:93:0b:c9:f5:ee:ff:
28:e1:e4:72:8b:8d:ae:80:4e:a9:83:28:4f:f8:00:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:A4:71:30:43:90:82:50:C3:86:4E:6F:3C:3B:99:EC:9E:F3:39
X509v3 Authority Key Identifier:
keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:0c:cb:de:82:1b:8d:06:b9:33:7e:5c:b8:4c:82:b6:a4:
75:0c:dc:f2:e1:52:0f:87:b5:e2:75:0f:09:7f:5e:7f:68:e4:
9a:eb:23:cd:32:ef:12:34:d2:ab:69:8c:d7:5c:c5:b8:2b:67:
d7:39:db:f3:61:e9:a1:1e:0f:90:67:29:35:c0:4f:34:83:32:
3d:dc:cd:37:f4:5a:7a:40:f2:ab:b9:0c:cc:68:02:7f:d9:5f:
7f:d8:a4:44:14:2e:b5:a6:17:d0:62:27:9e:60:01:0b:0b:90:
a0:20:cf:15:2b:a0:fd:f7:46:7e:8b:ce:28:29:e7:2e:39:06:
7e:f3:7e:9a:3a:1b:f5:3a:35:05:2b:63:be:0f:45:a0:d8:d1:
af:bd:1c:47:3e:16:21:61:f1:46:97:3b:cf:3b:f4:2b:4f:08:
b3:94:5e:38:2c:93:bc:3b:e7:a2:e4:e0:25:12:fb:ba:b8:80:
bc:ca:a3:02:d4:de:15:ae:1f:0d:b1:a7:fb:1f:1d:9b:8b:64:
f0:da:b0:34:57:c0:dd:45:9a:e5:04:96:03:16:b7:85:ef:65:
a6:58:da:97:84:5e:89:66:95:5d:74:09:7c:0c:c0:a4:20:bb:
95:7f:6f:93:97:71:7d:0c:70:a9:e9:52:e4:d0:72:fe:23:23:
42:49:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:49 2026 by rpki-client