Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: U4xMJW8W2hQaCAewYyrzm84cPHjTQYiJhGHowrC6Xh0=
Subject key identifier: 6E:72:9D:71:37:9B:5F:31:DB:B6:ED:FC:D8:15:5D:B9:7D:FA:85:17
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019CAB6B2258B95724C36B15AE16086C3E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:50 +0000
Manifest this update: Sun 01 Mar 2026 22:00:50 +0000
Manifest next update: Mon 02 Mar 2026 22:00:50 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: oeCK9E6tM3H1Vtrdk+LyA5oQjEeiHfBmUFmzQGTxKVQ=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:22:58:b9:57:24:c3:6b:15:ae:16:08:6c:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Mar 1 22:00:50 2026 GMT
Not After : Mar 2 22:00:50 2026 GMT
Subject: CN=6e729d71379b5f31dbb6edfcd8155db97dfa8517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:2e:8f:a1:3f:78:a8:91:b3:99:65:9a:58:
b1:e1:f9:dc:13:8c:dc:9d:37:61:2e:3d:4b:9f:70:
1a:ea:16:e5:43:34:f5:d7:c1:43:bc:02:4e:43:48:
67:74:65:bb:92:bf:aa:a1:99:39:6c:71:99:47:6b:
ca:e5:ec:03:24:bb:77:90:c1:d0:da:1e:02:38:dd:
7d:23:f6:72:da:c6:ec:01:9e:0c:85:6d:de:e8:f9:
5c:d9:8d:ba:07:6e:09:15:05:75:f4:a2:60:d1:91:
6b:a0:77:b0:08:86:bb:e8:2f:e0:08:33:2b:6e:42:
8a:ff:fe:0c:2a:e6:e1:49:a0:f5:66:2c:f5:2f:66:
2c:49:5b:60:93:26:a9:0e:ab:52:c6:51:63:52:90:
3d:3b:f5:fa:4b:f0:df:f1:d7:35:e9:fc:f1:ce:dd:
31:af:c1:2c:30:74:bf:de:2d:32:9e:15:36:52:b8:
66:63:7d:0e:c4:14:e5:d3:2b:d4:25:38:48:4e:53:
c6:b6:dc:72:cb:a5:38:2c:37:fe:e4:12:18:f7:a4:
25:55:84:87:90:41:91:b6:5d:84:d4:6c:cc:03:24:
19:34:41:e5:19:d8:c5:f5:8d:31:75:28:1d:c3:41:
35:31:d2:d8:94:3d:d4:59:59:8a:72:b1:69:1c:de:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:9D:71:37:9B:5F:31:DB:B6:ED:FC:D8:15:5D:B9:7D:FA:85:17
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d5:57:e5:84:e9:ef:18:54:52:53:61:d4:87:f7:4a:7c:bc:
10:42:3a:50:a4:b0:aa:d4:a8:db:a6:50:88:be:a9:f9:a0:28:
57:d3:c8:f5:20:4d:f3:05:93:45:f7:41:46:52:69:ea:a4:89:
cd:a2:89:5d:c3:36:39:2e:c2:7a:bd:50:f4:fe:59:d3:bb:5a:
e4:bb:0f:db:0b:53:f7:1f:6d:9b:c1:17:b9:5a:76:09:89:c4:
0b:e5:7d:7c:71:10:a7:b9:dd:f6:58:83:c2:0d:47:e3:60:ef:
dd:c1:ed:3b:17:99:6b:ce:e7:6f:2f:73:ed:5c:c6:f0:b7:9c:
b4:87:fd:fa:a2:25:33:41:a1:ab:29:38:59:4b:7b:07:b2:d8:
17:6b:11:ff:a0:c4:4f:c4:42:0d:fc:cd:16:58:01:a8:20:4b:
d6:00:d3:60:2d:39:36:0a:5f:e5:64:f4:e9:d0:ec:1e:7c:cb:
62:13:dc:35:eb:b5:37:a6:4d:ed:49:04:0a:1b:c7:79:bf:01:
2f:cd:ab:42:4f:e9:f2:9e:ee:81:67:8b:07:74:2c:c2:05:3b:
f1:40:d2:aa:61:5e:f9:ce:d3:59:6f:da:ae:0f:6a:f9:cd:bb:
1f:da:4c:e5:20:e3:04:cd:63:57:f7:57:08:71:7c:e4:0a:5f:
79:99:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:13 2026 by rpki-client