Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: jdymBkK7+Pffe2r1tSrwDyU3HRaANfK15RMbX9WoidU=
Subject key identifier: 2E:AA:BD:9C:11:D5:6A:8A:FC:8D:DB:B8:2C:D8:9D:20:22:10:D7:CF
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019FAA195B0E55C0AE1BACCCE3A9FF9F5A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: fQcCbRc/0KCfoxWMpsly37vkQ1tGec9lJh2YOurDmMg=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5b:0e:55:c0:ae:1b:ac:cc:e3:a9:ff:9f:5a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=2eaabd9c11d56a8afc8ddbb82cd89d202210d7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:a4:dc:e3:35:ee:ff:1d:4a:64:94:6b:6c:
73:c2:76:9c:8f:c5:95:bc:23:68:e5:ee:5c:f9:fe:
26:6c:e3:11:44:ed:1c:4c:c3:34:66:50:75:f9:79:
51:a0:af:d5:fb:2d:82:a5:a4:2c:af:28:9c:f8:58:
19:68:b4:3b:e6:e0:10:20:47:ec:c3:f2:18:fd:26:
17:b1:34:13:db:54:2c:d3:5a:25:56:64:e6:05:09:
0d:fe:1c:5b:22:aa:9f:d1:4e:bd:75:ef:72:fb:08:
54:dc:4b:a5:79:2f:cf:30:87:ca:f5:7d:dc:dd:2d:
9e:3a:e3:d4:14:74:71:1d:a2:bb:b9:04:bc:fe:b8:
1b:63:c9:89:82:5a:5a:34:1d:4a:f1:40:cf:b1:d5:
ba:e5:31:b3:f9:ef:8d:1f:18:04:d0:8e:e6:bb:f6:
52:b1:8c:00:2e:73:cc:5e:81:7f:52:15:2b:98:10:
e4:d5:0e:1a:85:76:87:a6:33:94:69:6d:8a:71:5e:
ca:29:80:7d:23:86:e8:e7:27:4b:b4:64:e4:71:da:
91:ae:cd:3c:6f:7e:7f:d1:cb:9f:ae:cd:24:b3:1c:
4b:12:2d:28:95:af:e0:4b:ff:d5:67:82:b3:eb:f2:
5b:bb:f5:65:46:6a:62:dc:c1:c3:6a:a9:fe:f2:63:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:BD:9C:11:D5:6A:8A:FC:8D:DB:B8:2C:D8:9D:20:22:10:D7:CF
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:31:59:24:8c:9f:e4:df:87:1b:2b:b6:3a:31:76:32:7f:
2d:12:b2:c2:9e:5f:3b:85:d3:15:3b:17:51:8a:cb:51:02:97:
b9:e3:1a:47:5f:6b:23:55:6a:19:d2:19:49:94:59:83:10:33:
a1:3d:ba:78:f4:ea:81:91:64:31:72:ef:ca:16:2c:30:14:58:
74:8e:c4:ae:95:81:57:72:f2:cb:de:d0:5b:33:82:48:44:3b:
db:ba:47:87:4c:75:2a:36:4b:8b:77:b4:78:d9:d8:34:62:e8:
64:6f:7b:68:80:c0:46:93:c0:56:e8:e4:e7:5a:26:d3:a1:69:
26:06:f7:ac:37:50:81:70:e4:8c:8e:68:25:1f:8f:b4:11:71:
62:e4:30:d7:d8:98:b9:9d:1d:c5:1c:01:25:0c:58:72:7f:1e:
7f:b9:d7:fa:00:75:1b:00:06:6b:c3:08:df:8b:b6:e7:bb:5c:
43:9b:83:ea:a5:4a:9e:c0:80:12:ea:9c:9e:c8:02:26:21:31:
b5:e2:45:6d:c6:51:d8:b1:d5:10:c5:5d:73:e7:00:ac:39:b2:
60:52:25:93:44:09:89:2e:0d:e9:ce:60:b4:ca:2d:3c:88:de:
ab:d7:3f:b6:1a:2e:47:7a:37:d7:6b:ef:70:d3:19:f2:ea:80:
93:64:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:57 2026 by rpki-client