Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: IjWhv08c0XczqLy8A7CV69IxYjr+u9NFpW9E9AZ2KSs=
Subject key identifier: D5:5A:84:CC:34:F3:AE:78:7D:73:5C:C4:A2:C2:7C:5D:37:BC:8B:FD
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 01A13FA71E224FDF50A8621596BDE8126B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 13:01:19 +0000
Manifest this update: Thu 15 Oct 2026 13:01:19 +0000
Manifest next update: Fri 16 Oct 2026 13:01:19 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: OZrKbRvasLkatg6+k9xf1QQ7X5AtnuGi/MPEFLQufu0=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:1e:22:4f:df:50:a8:62:15:96:bd:e8:12:6b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Oct 15 13:01:19 2026 GMT
Not After : Oct 16 13:01:19 2026 GMT
Subject: CN=d55a84cc34f3ae787d735cc4a2c27c5d37bc8bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:26:77:f2:35:d0:fc:f3:08:e1:48:38:c3:
d2:a6:9a:c8:cd:55:89:a6:f0:5c:04:f8:b1:54:16:
b8:f5:ed:99:ab:2f:90:96:2f:50:ea:62:7c:10:90:
e4:04:f4:3c:03:47:dc:96:d4:72:67:99:b5:f0:26:
cd:82:6a:48:07:43:20:b5:1a:2b:50:1c:ed:b7:ac:
94:73:99:1e:5b:d3:34:24:bb:c3:1c:fa:86:cd:77:
31:3a:1f:01:3e:6b:48:c3:2c:0a:ca:d4:70:e8:ae:
82:12:fb:6e:f5:51:2a:7b:df:58:46:fe:eb:ff:ac:
0d:ae:9c:83:8f:59:34:47:ce:30:71:f5:cc:e4:12:
8d:49:6f:e9:a9:a0:d5:39:75:ed:e9:07:3e:7d:0b:
25:58:64:52:05:0f:f5:be:0c:02:92:56:a8:ba:7c:
60:a5:c1:4f:7d:c5:94:27:82:63:dd:2e:cc:9c:8a:
86:11:3b:fc:a9:51:18:43:2e:d8:a5:8f:f9:b4:7d:
71:78:27:00:4f:2e:32:89:ce:c2:e5:a0:6f:ed:a3:
4b:9a:67:b3:7a:03:f3:f5:b5:46:01:1d:10:5d:3b:
4e:70:d9:fa:c4:fc:03:d7:35:a2:50:76:65:39:f4:
ea:67:df:03:d3:f4:94:99:93:69:32:06:d9:53:c5:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5A:84:CC:34:F3:AE:78:7D:73:5C:C4:A2:C2:7C:5D:37:BC:8B:FD
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:49:de:67:8c:10:4b:cb:38:be:cf:9a:79:c9:d1:0a:d4:3a:
94:cc:ba:f4:89:0d:57:9f:af:c8:6f:c0:c7:01:cf:19:69:5d:
aa:10:25:11:16:55:d6:14:f8:d4:f5:87:ce:4f:8e:c5:ef:7f:
5e:0d:c5:5e:24:ae:dd:06:72:0b:dd:b9:c0:db:c8:83:67:06:
41:e8:9d:ba:7c:13:ed:84:93:c5:a2:b6:b5:1f:bc:29:cb:10:
af:18:bb:a5:98:0d:8d:b7:86:ce:27:fc:26:20:48:12:d1:6f:
b3:90:ad:9a:a3:dd:1b:d3:ee:f9:cb:1b:cc:dd:17:e4:95:14:
7f:fa:dd:d4:9d:cb:75:85:48:98:95:12:81:f1:ee:27:47:b2:
91:fa:ba:85:4c:15:03:f4:0a:5d:39:08:a9:c4:99:b7:69:83:
39:cd:da:10:0f:56:ab:03:e6:3a:dd:48:0f:3f:3a:bf:8d:7b:
0b:a5:b7:b1:c9:06:35:44:ae:6b:cd:11:b4:72:49:9b:38:f2:
9d:fe:0f:66:d2:a0:43:9e:c4:35:86:03:ea:11:4e:d7:97:90:
0d:4b:9a:36:cd:71:9b:28:6e:5a:e1:bd:33:3d:8e:5f:4e:2f:
d1:0e:5f:82:dd:03:fe:9a:93:0c:ad:e7:4a:5c:6a:3a:bf:c7:
b1:ee:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:27 2026 by rpki-client