Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: l0lQxGQesCgJkHKxJexL9osQP0vECkyh9oulm1bCo/A=
Subject key identifier: 66:7D:16:A5:D2:D7:86:E9:05:BC:8E:2D:AE:D7:DB:1C:08:9C:E9:D0
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01A0E106A7CD93629209D0FE7FDEF7B9E0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 04:01:44 +0000
Manifest this update: Sun 27 Sep 2026 04:01:44 +0000
Manifest next update: Mon 28 Sep 2026 04:01:44 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: n6qLXM92/oXzfvwsUmNO7f1+7XYJkkmpL0FFn60wpbs=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:a7:cd:93:62:92:09:d0:fe:7f:de:f7:b9:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Sep 27 04:01:44 2026 GMT
Not After : Sep 28 04:01:44 2026 GMT
Subject: CN=667d16a5d2d786e905bc8e2daed7db1c089ce9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:98:54:4c:b2:05:72:df:8c:9e:5a:26:36:
f1:c0:88:23:2d:1e:75:06:e8:35:f2:3c:e6:8a:9e:
55:50:83:a8:d0:c8:c1:21:aa:00:8b:9f:4d:46:f6:
69:41:61:1a:ac:3a:8b:71:a4:04:c2:12:b6:6b:5a:
1b:b5:fd:28:9f:a6:2e:9b:76:eb:a1:72:b2:fe:06:
1a:13:63:5e:a1:5f:97:be:ec:0b:82:f7:6b:59:56:
1b:5b:e2:be:30:af:c7:cc:3a:5f:19:04:74:b3:3d:
dc:3b:77:bc:dd:69:7e:38:2e:1d:d9:fc:77:95:8e:
69:be:0c:27:fa:bc:96:88:58:3f:af:9b:5e:69:09:
5a:90:56:64:d8:9c:62:85:07:f1:d9:d7:c1:48:f8:
6a:5a:89:cf:12:71:3a:3c:4f:a6:03:b7:cb:d9:47:
31:cd:cb:b9:4f:66:62:fc:ee:75:41:29:48:68:a5:
7e:8f:ef:69:6c:8b:4d:62:e3:f8:68:5e:3c:0a:72:
f7:61:d1:3a:e8:ff:cb:ec:47:6a:05:ab:60:90:c0:
9d:4a:a6:15:15:6a:73:2c:ee:ab:c7:2c:5a:85:a2:
45:bf:62:ae:5c:87:d9:64:6f:11:52:b7:c8:d4:9f:
f5:10:85:74:b6:c8:f2:ba:e9:68:32:0c:f3:6a:2b:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:16:A5:D2:D7:86:E9:05:BC:8E:2D:AE:D7:DB:1C:08:9C:E9:D0
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b2:09:f5:30:d9:46:66:22:e7:d9:53:81:08:bb:16:79:60:
88:98:2b:69:bc:5f:92:be:67:56:03:c9:19:44:12:70:70:59:
64:c7:ec:40:40:04:e4:42:a0:e8:c7:ba:82:ff:e0:3c:1c:b3:
99:4d:5c:b6:f3:86:ee:29:0c:46:8b:d5:7a:48:3d:09:c6:43:
8a:b7:a0:98:5f:ce:88:38:1c:8a:80:1f:58:6d:f0:64:7f:de:
c1:55:80:d3:0c:9b:36:80:e2:cd:28:cb:f3:02:d0:d8:8f:14:
91:53:0b:56:0c:96:5a:40:eb:a1:55:3b:87:65:51:61:40:78:
8f:30:50:0f:1c:31:6b:7d:cf:3f:c9:07:4c:f7:7c:7b:d6:55:
3c:03:aa:89:ba:fe:18:49:85:d9:f4:6f:ce:1e:ca:77:3f:07:
ea:1b:b1:7e:e5:13:5c:36:ed:78:76:f8:06:89:aa:2f:28:38:
f8:89:19:9c:c8:24:db:fa:ca:a1:f1:dc:11:06:fd:3c:b1:87:
15:13:0f:7f:75:c4:71:15:45:c9:64:0b:c2:1b:18:d7:47:67:
4b:32:02:f2:e4:c6:11:1c:e2:7c:25:6a:b7:59:3c:ce:23:04:
0e:74:c5:8d:b4:6c:fa:a4:68:c0:ad:71:16:48:d5:de:d6:4c:
ce:bc:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:28:02 2026 by rpki-client