Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: OOAR9zyPyR2rM+XAgSS/Nt6ziVfjB9zOhUv5HUDpOPU=
Subject key identifier: 8B:C8:B3:AE:E9:D6:86:75:76:4F:9D:09:AA:4F:C9:B6:A5:53:0D:0D
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019D26285B182216AAED4BA950F7429B0B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0EB2
Signing time: Wed 25 Mar 2026 18:01:12 +0000
Manifest this update: Wed 25 Mar 2026 18:01:12 +0000
Manifest next update: Thu 26 Mar 2026 18:01:12 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: TjGBGKivPHRFqPA0wxOb2QmT3PhU7h6e+YrfXC3ShvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5b:18:22:16:aa:ed:4b:a9:50:f7:42:9b:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Mar 25 18:01:12 2026 GMT
Not After : Mar 26 18:01:12 2026 GMT
Subject: CN=8bc8b3aee9d68675764f9d09aa4fc9b6a5530d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:93:21:0f:d3:53:df:de:2c:2e:3b:52:fa:
a9:b3:67:e0:5e:cf:12:2a:c6:d3:3d:28:dd:de:7b:
ac:14:3c:bc:d3:0c:5a:7a:fe:31:a7:72:11:e5:64:
db:72:8a:6e:c1:9a:50:35:5a:1d:f3:18:b8:e8:cc:
17:fb:26:c6:11:1b:56:fc:89:ac:1f:4d:bd:c7:48:
36:44:11:15:03:4b:91:6f:2b:2b:f3:89:48:e3:8c:
f9:f6:69:b9:3a:12:59:0e:28:3c:b0:cc:88:27:fe:
1c:84:bb:c3:9e:f7:b0:04:91:df:52:46:aa:35:98:
0d:c5:4f:af:06:a7:b5:09:68:fe:79:d3:8e:d8:26:
a9:47:10:b6:ff:26:fd:cb:34:ac:6d:c5:78:b6:69:
6b:c0:67:35:7b:e0:66:aa:3f:dd:2f:02:89:cd:e8:
b8:46:6d:04:21:e1:30:90:20:cc:f3:e0:3d:e1:fb:
93:f8:de:9e:fc:2f:90:bd:1b:1d:93:0c:8f:79:58:
70:ac:7e:42:48:00:67:30:b9:c6:30:d0:13:d3:fd:
62:22:25:88:1e:63:79:6e:4c:0e:25:58:d5:22:bd:
42:68:9c:c9:2c:46:ea:18:20:37:8c:7f:fb:2d:3c:
24:19:93:a4:58:4d:0f:d3:75:ab:7a:fb:51:24:bf:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C8:B3:AE:E9:D6:86:75:76:4F:9D:09:AA:4F:C9:B6:A5:53:0D:0D
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:67:6a:56:8f:3a:5f:9e:9d:fa:bf:57:4d:7c:35:51:ee:4c:
dc:22:dd:3a:24:7e:e3:13:72:c2:38:90:9d:c1:3c:f1:d6:10:
39:1d:fa:48:dc:f9:74:97:78:58:7f:c6:d9:b8:d7:9c:31:4d:
8a:e8:f5:2d:fc:31:07:38:00:05:7b:23:da:2d:0d:c1:13:a9:
37:fa:a0:80:c6:49:be:c7:c0:1b:20:72:07:0e:21:0b:e1:96:
71:58:e7:62:31:a7:e6:ca:db:b6:d8:85:41:4a:3a:6a:63:2c:
96:05:66:ff:12:7f:ad:cf:88:be:78:fd:98:ff:5d:e6:63:f3:
f7:6e:1e:05:ef:87:ce:60:82:81:92:97:03:3a:9b:a2:9f:ab:
dc:a9:b1:40:e4:de:2c:bd:ae:61:ca:ab:c1:1e:4a:5e:a3:07:
e6:8d:7c:6a:cb:dc:98:39:7a:42:95:cb:8a:ea:a3:c2:0c:c9:
9e:bf:59:a4:1e:b9:05:3f:7e:e8:19:1a:76:12:0d:d9:97:8a:
08:4b:f7:38:da:40:65:a6:8b:6b:26:3d:47:f6:32:1e:b6:a3:
90:b7:71:c3:05:f3:15:5c:f9:38:88:a9:84:9e:a2:06:53:cc:
e0:3d:63:f1:3c:34:5f:32:9b:5d:97:df:d8:8e:ab:84:1c:f1:
83:75:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:30 2026 by rpki-client