Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: cS4V7UjL09yiZWKj0yjIkrXpf6urJdNm9n1XxxoNz5A=
Subject key identifier: 85:28:CF:B9:4B:5E:BB:A4:80:F2:49:86:4E:28:FE:C3:6D:8F:57:B9
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 01A0D15BF88E81DDFE6612352A50E892BF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 16A3
Signing time: Thu 24 Sep 2026 03:01:00 +0000
Manifest this update: Thu 24 Sep 2026 03:01:00 +0000
Manifest next update: Fri 25 Sep 2026 03:01:00 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: ePjrNUD+DhpEE+h6RbjC3/9GFQhL0LLgPaxBqtkdGlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:f8:8e:81:dd:fe:66:12:35:2a:50:e8:92:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Sep 24 03:01:00 2026 GMT
Not After : Sep 25 03:01:00 2026 GMT
Subject: CN=8528cfb94b5ebba480f249864e28fec36d8f57b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:66:00:3c:bf:8d:61:ed:0f:11:8e:1b:de:
19:c5:8c:c8:e2:9e:6d:dd:bc:db:34:72:17:8b:ad:
2b:ed:a7:f0:af:97:c8:56:3c:dc:6e:28:89:51:5d:
c3:ec:3b:50:9d:27:a4:4b:56:b4:5e:c5:17:c2:46:
33:ee:3f:d4:8f:a5:a5:2b:68:ca:43:22:0d:94:5a:
21:d4:9c:53:aa:fa:a4:38:c6:26:97:28:2a:f5:78:
63:01:5e:1a:2a:c1:60:b3:a0:97:b4:62:cc:d9:90:
d4:e0:38:ef:e5:00:8e:cf:5d:28:48:8e:81:c7:e5:
cc:14:ff:ef:d7:9a:f5:cc:4b:74:dd:2e:98:ba:f3:
db:33:29:46:d6:cd:97:f6:68:07:db:65:65:f0:57:
05:92:7b:09:3e:ac:35:2b:a5:d1:13:4d:66:52:9c:
00:0c:68:69:75:90:94:60:91:0d:19:5a:28:e2:84:
15:fe:7a:fc:3d:4e:e7:c7:ad:7e:63:d9:3a:05:49:
22:c0:83:10:7f:69:24:bd:5a:ce:30:3e:93:ac:cd:
ae:49:3b:64:14:f8:1e:d5:5e:85:76:c1:fa:38:c0:
f8:9a:7a:c2:49:c8:7d:63:fd:dd:94:75:c6:8e:e9:
be:1c:0a:95:6c:b5:2a:63:4e:90:09:56:76:ee:cd:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:CF:B9:4B:5E:BB:A4:80:F2:49:86:4E:28:FE:C3:6D:8F:57:B9
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:af:bb:25:3f:99:f4:e3:32:fa:a3:3c:b4:16:aa:0f:5f:
f6:63:62:eb:9f:bb:a9:eb:99:08:3f:c7:c2:c5:fa:b7:93:b5:
8d:7c:de:d0:28:2d:65:37:8a:40:4c:1c:fa:56:40:b9:bf:0b:
a5:d2:64:aa:68:d7:bf:fd:43:f3:5c:f7:3e:10:d6:b7:76:03:
c8:98:5c:6e:78:ea:b7:4d:81:6a:ef:15:2b:03:75:20:e2:21:
a0:74:98:81:6d:82:f6:8f:14:b7:56:19:9e:79:e4:5c:f7:5e:
55:e8:23:54:42:ae:4d:9a:56:49:e8:4d:2b:32:d3:94:10:c5:
7d:56:27:0d:0f:67:5b:d4:6b:84:95:74:ea:3c:1c:1f:6a:d1:
e6:4a:35:ee:07:f2:41:9e:db:45:7b:e0:d5:2c:1c:fd:2d:33:
c8:e0:68:ec:59:95:a1:12:f1:a1:7d:cf:69:f7:d6:13:b8:51:
24:a4:0d:cf:59:f6:36:8c:8d:df:e7:08:30:39:3e:f4:09:bf:
10:c4:a9:d8:da:31:4e:ff:9c:ea:03:91:8b:8a:ab:32:dc:5e:
dc:ce:22:d9:72:7d:99:c9:33:fa:08:90:cf:e0:83:51:d8:12:
2f:d8:0c:ca:af:af:ce:16:6e:c1:4a:ea:d8:e9:1a:f3:a8:22:
1e:59:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:25:32 2026 by rpki-client