Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier: TMIOE/699Yb00185RyH0Y/UAaTajL9YrBYK+bZbyi5M=
Subject key identifier: 57:FB:D5:60:BA:39:14:17:F9:46:B4:85:88:61:FF:64:D2:32:9F:CA
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 01A0C7EAA62C0B46E4DD9B30FDCA9D81E0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 07:00:39 +0000
Manifest this update: Tue 22 Sep 2026 07:00:39 +0000
Manifest next update: Wed 23 Sep 2026 07:00:39 +0000
Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: OS/0UGYCd0Fx/CmHg1WkCIkjAhzJyewH1zH7kMBWf+8=)
2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:a6:2c:0b:46:e4:dd:9b:30:fd:ca:9d:81:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Sep 22 07:00:39 2026 GMT
Not After : Sep 23 07:00:39 2026 GMT
Subject: CN=57fbd560ba391417f946b4858861ff64d2329fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:27:f1:4f:82:a7:2a:f7:4f:2a:f5:7b:bd:
76:02:cf:8c:d5:16:ee:c9:b6:f7:39:eb:b6:b8:a8:
7b:33:f7:0d:b7:a5:8c:04:4a:29:ab:da:d3:be:28:
8e:44:db:8b:0a:9e:a1:a9:07:db:3d:6e:34:90:5a:
64:f4:26:23:81:12:76:b0:db:13:d8:87:51:f7:85:
1b:8e:55:ca:54:96:f8:b9:06:a7:8a:f0:dc:ee:72:
1f:e7:3f:25:a3:c7:1b:4b:d1:b3:96:3c:29:34:8c:
60:29:f1:8b:dc:e8:cd:cc:7e:65:66:c0:ac:8e:11:
27:52:ee:e7:a9:08:d4:09:a8:07:be:62:44:e8:2e:
97:8e:a8:10:eb:c4:f4:b2:de:d6:83:fa:8c:04:48:
51:11:fe:07:3b:e0:09:35:77:8c:3b:0e:b9:c9:c7:
62:0c:93:1c:74:e5:e6:04:47:d2:34:d2:c3:a1:c5:
c7:9d:3b:82:51:83:d6:fc:51:99:fe:5c:39:70:94:
d6:5c:5e:0c:c1:bf:71:dc:fa:33:02:67:73:09:86:
dd:cb:7b:c6:b5:2a:04:0d:88:05:d8:ea:08:17:16:
73:b3:12:95:b1:06:f3:4e:97:6a:43:ad:26:da:0d:
61:cf:33:92:56:e6:85:c8:7f:2f:f7:0b:15:bb:40:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:D5:60:BA:39:14:17:F9:46:B4:85:88:61:FF:64:D2:32:9F:CA
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:da:42:17:90:e8:e4:cb:bd:b1:85:d2:1b:c8:06:7f:79:f9:
3a:c1:3c:48:56:2d:d6:6a:5c:38:d6:9c:ff:d4:36:ff:83:bf:
c1:fe:8f:ce:9b:23:ac:cf:85:b8:86:1b:4a:99:86:3c:e0:51:
dd:e5:da:04:67:40:c7:32:41:c7:c0:fb:da:8a:5e:25:b8:59:
46:b8:9e:44:e7:c7:35:6a:53:fb:f7:84:3f:07:1e:25:49:fc:
20:32:dd:58:b5:1d:bb:6a:bc:46:ec:9c:a4:a4:f1:3b:75:d0:
c3:2c:cc:9e:fe:02:e2:5b:6a:c3:0c:05:4e:fe:d0:87:30:32:
f1:8f:d4:e2:23:b0:84:7b:1b:2c:e1:06:6a:c0:36:19:8e:b0:
2e:98:c5:a0:ef:a6:a1:7d:09:99:1f:21:54:63:d1:f1:6c:53:
07:fc:01:6f:e5:0f:b6:dd:9c:98:22:84:47:76:f4:f1:f2:39:
1e:8f:c2:4e:93:7e:a6:fd:ec:2e:47:b4:8c:07:90:57:2f:71:
ec:2f:3e:a7:aa:dc:d0:1e:7f:da:78:ba:bc:26:1b:80:83:ec:
ae:e2:24:19:ea:ef:78:0f:88:55:bf:db:a2:64:a4:18:d2:e0:
1b:e9:8c:98:b2:a9:8c:cd:7a:9a:56:61:ad:b4:11:22:29:4f:
4a:d0:e9:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6qYsC0bk3Zsw/cqdgeDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjk4YmU5MDJjMDZmZWFiNWY1YWFmNzI5ZTBiYmMzN2Ji
YzM0MWMwHhcNMjYwOTIyMDcwMDM5WhcNMjYwOTIzMDcwMDM5WjAzMTEwLwYDVQQD
Eyg1N2ZiZDU2MGJhMzkxNDE3Zjk0NmI0ODU4ODYxZmY2NGQyMzI5ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAMn8U+Cpyr3Tyr1e712As+M1Rbu
ybb3Oeu2uKh7M/cNt6WMBEopq9rTviiORNuLCp6hqQfbPW40kFpk9CYjgRJ2sNsT
2IdR94UbjlXKVJb4uQanivDc7nIf5z8lo8cbS9GzljwpNIxgKfGL3OjNzH5lZsCs
jhEnUu7nqQjUCagHvmJE6C6XjqgQ68T0st7Wg/qMBEhREf4HO+AJNXeMOw65ycdi
DJMcdOXmBEfSNNLDocXHnTuCUYPW/FGZ/lw5cJTWXF4Mwb9x3PozAmdzCYbdy3vG
tSoEDYgF2OoIFxZzsxKVsQbzTpdqQ60m2g1hzzOSVuaFyH8v9wsVu0DAGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf71WC6ORQX+Ua0hYhh/2TSMp/KMB8GA1UdIwQY
MBaAFNNpi+kCwG/qtfWq9yngu8N7vDQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUt
ZGRjMzI1MjFkNzkwLzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUtZGRjMzI1MjFkNzkw
LzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdpCF5Do
5Mu9sYXSG8gGf3n5OsE8SFYt1mpcONac/9Q2/4O/wf6PzpsjrM+FuIYbSpmGPOBR
3eXaBGdAxzJBx8D72opeJbhZRrieROfHNWpT+/eEPwceJUn8IDLdWLUdu2q8Ruyc
pKTxO3XQwyzMnv4C4ltqwwwFTv7QhzAy8Y/U4iOwhHsbLOEGasA2GY6wLpjFoO+m
oX0JmR8hVGPR8WxTB/wBb+UPtt2cmCKER3b08fI5Ho/CTpN+pv3sLke0jAeQVy9x
7C8+p6rc0B5/2ni6vCYbgIPsruIkGerveA+IVb/bomSkGNLgG+mMmLKpjM16mlZh
rbQRIilPStDpdw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:06:13 2026 by rpki-client