Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: RPcfYos2FmeetjHjCepjHyKc99vYY6T0m80hDuUMb40=
Subject key identifier: D7:6B:6F:57:E5:96:38:CF:63:84:5A:02:15:87:F2:98:1E:EA:DF:6F
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01A0CD7E84842368A49DB14D0916D8DD4168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0EB3
Signing time: Wed 23 Sep 2026 09:00:15 +0000
Manifest this update: Wed 23 Sep 2026 09:00:15 +0000
Manifest next update: Thu 24 Sep 2026 09:00:15 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: 9EMT7c/5JJOI3ZEmrTVGzhahTMf3GFAIQOArONjmc4E=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:84:84:23:68:a4:9d:b1:4d:09:16:d8:dd:41:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Sep 23 09:00:15 2026 GMT
Not After : Sep 24 09:00:15 2026 GMT
Subject: CN=d76b6f57e59638cf63845a021587f2981eeadf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:d4:60:88:8a:af:5f:42:31:46:50:84:9a:
44:6e:f9:b9:e4:c4:c0:83:c9:a2:8c:ee:e2:f0:5b:
e4:02:cd:2a:1a:6e:b0:31:89:3a:61:7b:4a:76:c5:
ab:3c:d7:a5:b4:37:85:87:57:6c:98:9e:29:af:70:
ac:43:4d:12:6c:ce:7d:49:2a:3b:4d:53:8f:ab:62:
28:26:27:3e:f9:f7:7e:e7:27:23:fa:f6:25:a0:a6:
ef:cd:1c:9b:74:86:fc:d0:ed:ff:80:a3:42:59:ff:
bc:19:00:cb:11:1b:5e:e9:ad:78:b0:6c:aa:c2:6f:
a7:4e:07:13:4b:30:7b:d4:44:02:2f:d3:15:04:f4:
3c:9e:55:37:6f:af:13:45:03:84:81:c3:29:f1:25:
a6:17:54:a8:71:2c:b4:8b:c3:79:a8:80:da:4d:56:
f7:b5:f8:67:13:c7:c5:84:85:78:39:a1:a1:40:88:
4f:f5:6f:6f:2c:cd:87:6d:b9:aa:b4:ee:34:64:f4:
be:10:48:09:1b:f8:c6:fe:b4:18:c2:63:5c:de:9e:
62:9f:37:71:7e:f9:23:83:e1:4d:d9:fc:70:13:08:
1a:9c:98:31:27:90:a8:01:f5:34:18:72:34:51:fc:
4d:ad:f7:33:cd:b2:30:91:75:c1:fa:3f:6d:1d:a8:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:6F:57:E5:96:38:CF:63:84:5A:02:15:87:F2:98:1E:EA:DF:6F
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:37:d2:ec:bf:90:a2:ba:93:7e:0d:7f:09:0c:f7:81:51:2e:
d8:e5:39:6f:44:f3:eb:1d:d8:fa:6d:88:66:20:da:62:5d:bb:
41:59:c5:34:f0:a2:6d:1b:d9:6d:7f:7e:ef:67:26:27:d4:be:
ee:3f:25:79:2f:73:7d:88:c6:c1:2a:bf:37:d6:b5:ed:81:5f:
48:d9:ca:4a:b8:b8:6f:5d:ec:f4:f6:e5:fe:2e:3c:9d:63:90:
59:1b:1d:1f:e7:61:fe:be:4b:61:29:ab:6b:1b:40:38:eb:e9:
4f:fa:15:24:ef:3a:bb:c8:ee:58:ce:f0:f7:d8:3d:3a:23:c1:
19:a2:41:3c:dd:79:78:28:85:f3:4c:31:85:77:80:94:6b:c2:
e5:6e:1f:02:9e:ba:29:c9:d5:db:4a:67:88:0e:42:dd:ed:4a:
6e:8e:78:43:a1:86:68:ca:d6:61:7d:cb:85:e5:a7:9e:09:7d:
69:09:47:f3:40:b8:bb:6b:ed:22:3e:3c:2f:cf:5c:a8:15:ae:
be:69:2d:f7:13:86:91:ee:f2:1b:62:ba:f8:54:7c:9d:76:75:
b5:a4:f5:b4:81:5b:95:2a:18:0e:25:67:58:61:72:d4:11:b4:
48:77:b9:47:78:63:6d:b9:e2:74:af:58:d7:44:45:e9:ab:66:
3c:80:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:05:15 2026 by rpki-client