Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: i0mQoFbHYM44IHsIUIN5n2qBzky6cBJ6qZw9vuUb/T8=
Subject key identifier: 5C:53:90:DF:83:D4:A5:13:3B:32:50:5F:78:AE:94:EF:8D:4B:B1:B6
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 019D98F515507D8E2385A93BB0D48189538A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: VQGQtGLQ5LEWcnFguwK0+WnqvOCiP0st3mB34Lv/Z5w=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:15:50:7d:8e:23:85:a9:3b:b0:d4:81:89:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=5c5390df83d4a5133b32505f78ae94ef8d4bb1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:90:61:d3:1e:a2:46:73:07:ea:c7:ee:32:
6c:48:a9:00:fe:f3:55:5c:2a:c6:91:0c:53:c2:a2:
ae:97:e6:1f:d6:5f:1d:7e:8b:68:f5:a7:90:bd:f7:
61:f5:4a:09:ab:fe:9b:d9:62:b0:08:12:78:2e:cf:
e5:5c:26:ad:20:63:c9:3a:25:18:fb:fd:c9:1b:7e:
d5:9b:d8:77:2a:10:3d:f8:45:8b:39:4c:49:38:29:
5c:a8:ea:d7:66:d7:a9:e0:81:1a:44:22:91:f7:48:
bb:4a:82:a5:fc:45:84:e5:e2:a9:72:1d:09:a0:72:
37:51:e8:95:8f:05:1e:79:c7:02:c3:85:de:cd:0c:
e7:f2:18:c3:73:cb:d6:33:dd:8a:af:f9:87:cf:ea:
b8:4d:01:a5:7e:11:74:07:ec:48:08:4e:3f:db:d6:
ad:55:de:11:53:f4:74:06:55:0a:fa:ec:ec:c1:0a:
2c:ff:ee:23:5b:5f:46:b3:8a:01:7d:2e:c4:89:10:
06:09:43:82:4d:e5:58:83:1a:7f:46:a5:0f:0a:db:
33:4c:c3:c9:a4:17:23:a6:5a:0d:24:45:aa:1f:11:
0f:05:89:0a:6e:9e:48:17:82:6f:f7:c4:54:ac:25:
11:21:24:f7:c3:45:8d:fa:19:bb:94:17:57:60:50:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:90:DF:83:D4:A5:13:3B:32:50:5F:78:AE:94:EF:8D:4B:B1:B6
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:29:d1:9a:a2:60:d9:21:07:13:60:a5:fb:fc:2e:39:ca:67:
4e:fc:c6:35:83:b2:c0:8d:cd:bf:e0:b6:6d:7c:32:7c:3e:bf:
5a:67:f0:2b:47:64:38:6f:da:6e:95:7a:f4:ce:c0:68:df:7a:
1f:d3:56:66:ee:4d:28:b2:00:ed:c8:34:af:6d:40:8e:f1:b0:
a5:d7:9b:93:66:5b:c1:3f:39:fb:da:bc:c5:85:fe:03:32:0a:
b9:b1:bc:69:af:fd:b6:bc:ca:c4:30:b4:93:66:f4:5d:88:a0:
1c:77:93:43:c7:18:32:af:e5:64:40:be:6b:41:43:89:8c:70:
d3:72:9c:d0:91:e2:28:f3:96:f6:b7:03:7d:d7:aa:7a:12:d2:
e9:38:7e:8e:25:4a:64:e0:d1:e8:21:35:99:8b:15:7c:fb:c5:
b0:26:22:42:2c:a5:23:a9:c0:fe:14:b0:60:ea:2b:d5:be:4e:
4e:da:b0:6f:18:ed:c7:43:1e:d8:10:93:24:cd:fd:e4:00:9e:
93:a3:29:c9:0e:66:89:ec:26:e3:6e:04:53:85:6f:4e:d7:b4:
02:73:93:f2:e0:f8:aa:a3:7e:29:25:3c:de:cc:57:a9:74:94:
52:f6:91:c3:ec:f4:7d:af:ae:74:84:91:70:bd:db:3e:98:5a:
26:c6:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:16 2026 by rpki-client