Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: yMlxud5bbc406ciQiKy3r+ONewOss7JeFtiwmBLAB5g=
Subject key identifier: 63:B0:3F:C6:DB:A9:EC:AF:93:E2:5C:A3:08:31:FD:A7:04:33:06:05
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 019F90C765EEB47FB3E888E7930192E4F373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0E0F
Signing time: Thu 23 Jul 2026 21:00:14 +0000
Manifest this update: Thu 23 Jul 2026 21:00:14 +0000
Manifest next update: Fri 24 Jul 2026 21:00:14 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: YM/iIjoeO1+hv+tyfKLQ4R7kSiYaBoEBYJY7qOU7Q5Q=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:65:ee:b4:7f:b3:e8:88:e7:93:01:92:e4:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Jul 23 21:00:14 2026 GMT
Not After : Jul 24 21:00:14 2026 GMT
Subject: CN=63b03fc6dba9ecaf93e25ca30831fda704330605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:2f:35:02:d8:a9:32:81:a8:ea:c6:ee:78:
3b:e8:60:70:75:01:ee:a5:ed:cf:65:a3:1a:9c:54:
82:85:46:ec:3a:a2:32:b6:05:22:53:25:de:12:9b:
2c:e8:8c:97:1a:b3:5c:a6:13:51:25:e5:e3:79:b0:
23:88:de:9a:7d:54:8c:e8:be:86:8b:cf:d7:73:dc:
51:7b:7f:39:0f:33:bf:46:8c:cb:e2:e6:21:eb:f4:
48:c5:5e:c8:1a:15:5c:0f:92:61:4f:99:85:53:42:
88:45:9f:f2:cf:6f:56:fc:6d:6c:b3:c9:9c:33:d3:
c5:91:36:85:67:cf:64:3f:1d:38:21:49:83:22:38:
b2:8e:49:45:6a:07:d3:45:b0:bb:34:22:0d:09:cf:
05:3e:95:1e:54:4b:a6:2c:4b:57:2e:a8:e6:e8:c3:
d2:ee:db:76:bf:2a:12:a5:70:f7:29:50:66:69:fd:
3c:1d:56:43:c8:0d:b4:7d:1f:5a:fc:9f:1b:88:8e:
bd:73:4b:d3:8c:e1:d4:7d:ab:12:8f:81:de:9c:a5:
3e:7c:60:15:4d:f4:a6:4b:5a:88:18:cf:1f:5d:30:
e2:ab:68:58:9d:10:4d:e6:95:b0:95:a7:27:cc:a5:
c1:38:f5:f8:6f:4f:e6:64:cf:ad:23:32:33:d5:10:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:3F:C6:DB:A9:EC:AF:93:E2:5C:A3:08:31:FD:A7:04:33:06:05
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b3:ff:06:31:46:dd:38:2a:41:fa:f6:d2:30:4d:f4:7c:39:
35:2a:fb:d6:8b:fc:db:a7:c8:06:f4:96:f0:cd:16:5b:f8:82:
22:3f:bd:c3:77:5b:9a:a7:cb:a4:7a:85:cb:df:57:f0:e6:ea:
9f:7d:0c:fd:d6:5c:72:fa:83:a4:4f:2c:0b:41:c3:a2:1e:1c:
96:45:11:e6:6e:03:fe:9e:8e:f3:8d:66:91:cd:c9:7b:03:2c:
e7:d4:cf:d3:b9:da:cd:aa:bc:47:8f:6c:c0:e3:22:1d:f6:37:
5c:88:4f:f1:d4:2c:b8:59:f3:ab:95:b7:cb:e9:98:a5:5e:8c:
40:31:df:da:73:6e:da:2f:1e:75:db:4b:5e:1c:00:ed:42:f1:
4e:87:16:0a:e9:00:6a:37:89:90:4f:12:bd:d5:a7:c8:b2:58:
22:c1:8a:c1:dc:21:76:91:9c:4c:40:5f:f0:99:4e:00:57:d6:
41:4f:d0:32:a7:83:5c:a5:33:b7:d4:61:75:fd:58:cf:ff:1e:
4d:23:bf:05:0d:c6:72:e5:7d:33:73:30:3c:99:6d:05:cc:a9:
b3:5f:9b:92:39:14:9d:ae:39:9a:66:de:3b:a9:d4:ec:0d:e3:
e0:2f:d6:ac:55:25:e3:33:5e:38:e4:69:97:ea:3f:4e:90:cf:
a8:58:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:21 2026 by rpki-client