Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: LP/RZb2OCKdR6wlBjl4U7uXiGj0Uxqs1/mQVZnnweUs=
Subject key identifier: 8F:D4:20:BA:F3:F4:14:F7:56:7E:86:DF:90:4A:35:59:E8:C1:EC:3D
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019F8ED903BB6418BE714ACDBCDE8E8CA981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 15FC
Signing time: Thu 23 Jul 2026 12:00:14 +0000
Manifest this update: Thu 23 Jul 2026 12:00:14 +0000
Manifest next update: Fri 24 Jul 2026 12:00:14 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: MuAPj1h2czweREED/AC6CJWsjVgY4hPnECpvphjajFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:03:bb:64:18:be:71:4a:cd:bc:de:8e:8c:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Jul 23 12:00:14 2026 GMT
Not After : Jul 24 12:00:14 2026 GMT
Subject: CN=8fd420baf3f414f7567e86df904a3559e8c1ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:27:1f:8e:1b:0a:31:78:ab:4e:c3:91:59:
08:d7:2a:83:6c:e4:44:82:54:82:46:39:97:1f:70:
87:df:83:bf:2f:91:87:24:5c:fd:59:8e:49:7c:6d:
58:65:f7:bb:9c:ef:1b:91:d5:c4:da:de:e1:0c:71:
32:31:f6:7b:31:2c:d0:37:31:c9:e4:a5:c2:b2:2f:
47:20:bf:6f:ab:d4:58:63:df:30:dc:04:0e:83:77:
21:f6:4a:15:8e:4a:1e:57:6a:ca:95:b6:78:8b:29:
92:3c:2e:4d:fa:5e:3a:c7:ff:7f:3d:fe:1e:51:79:
e3:b7:9e:41:86:68:5b:8f:85:04:42:33:31:54:05:
21:70:29:9a:31:77:4c:b3:75:98:05:ac:84:c3:f0:
b7:f3:38:99:7f:13:25:06:87:dc:a4:d7:96:fe:57:
32:3f:76:b8:28:21:ee:df:13:77:d6:7f:27:b2:59:
29:ac:9e:01:b9:b2:ff:65:11:1a:f1:34:c6:91:8e:
43:51:55:d3:54:b3:87:4f:c7:f5:3d:50:f0:a5:c4:
82:28:14:79:72:b3:54:a0:d1:c1:b4:f3:c4:1d:4d:
0f:ea:5d:f5:64:53:2b:8b:b8:a3:0f:d7:bd:0a:c2:
31:d5:5b:4d:43:27:3f:b7:de:57:bd:a7:e3:91:37:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:20:BA:F3:F4:14:F7:56:7E:86:DF:90:4A:35:59:E8:C1:EC:3D
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c0:da:83:42:5d:b2:2f:74:f8:70:3e:e9:a8:06:69:83:72:
fe:b3:7b:93:de:6f:fa:f1:98:ab:9a:d6:a9:17:63:50:c2:b8:
62:d8:f5:5a:42:63:06:bd:eb:9a:f9:1b:6d:c1:ac:fb:db:78:
07:1c:3b:f3:a7:33:c3:84:48:c6:0f:aa:38:de:5d:a0:e2:08:
92:e5:29:cc:5a:d2:f3:b5:06:69:e8:22:dc:61:93:b2:92:c0:
5f:52:39:ff:6e:98:c4:f0:84:39:e4:0d:4e:33:87:7f:31:00:
9f:4c:33:6c:13:ef:df:bd:82:44:23:0b:dc:fa:e5:83:e2:37:
84:3f:87:df:68:0c:c5:bf:a4:7a:3b:37:05:e6:b6:25:18:ea:
11:36:e4:ba:cb:26:93:e8:54:9b:de:9c:79:b9:87:92:5e:64:
dd:39:34:1d:9d:63:53:8a:dd:c8:45:0f:54:eb:e0:7b:71:c0:
61:e9:ea:4b:85:6a:24:f3:d6:0e:b3:7d:eb:fa:9e:b0:14:9e:
5e:d9:f1:2c:86:f3:dc:06:d8:bc:92:b3:f2:9d:17:ce:6a:ca:
3f:d8:b9:79:d4:53:26:1e:e9:1b:24:2c:ca:0a:75:53:09:55:
08:91:ec:f4:46:7a:4f:ff:cd:68:cd:cb:84:16:c7:4f:fd:b9:
7e:45:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:50:59 2026 by rpki-client