Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: VHXOJVTqbTVmIDgs4tsaP7cQyzDxPSkE+hUlr3GGzO8=
Subject key identifier: FE:23:25:0B:4A:DB:14:E3:9A:AD:DB:A6:3C:47:A1:33:1A:C9:E3:C1
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 019D265F4F34492990FB187A3ACE69FBAB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0CCE
Signing time: Wed 25 Mar 2026 19:01:13 +0000
Manifest this update: Wed 25 Mar 2026 19:01:13 +0000
Manifest next update: Thu 26 Mar 2026 19:01:13 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: inX3xXoVYNnZr5x6oZTYuV6ajb0ewThB0JfQ3zBnnug=)
2: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4f:34:49:29:90:fb:18:7a:3a:ce:69:fb:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Mar 25 19:01:13 2026 GMT
Not After : Mar 26 19:01:13 2026 GMT
Subject: CN=fe23250b4adb14e39aaddba63c47a1331ac9e3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:e0:fc:da:5a:e6:b1:9c:92:6e:45:89:db:
9d:a4:ac:5b:39:c5:c7:51:b8:9a:a1:a7:9f:dd:2e:
f3:b8:8c:20:28:9b:84:9a:00:49:3c:03:b5:21:ee:
eb:25:49:0c:15:84:9f:fb:ed:e6:05:ef:6f:59:04:
b0:3d:9e:cf:27:72:9a:22:3b:c2:b6:4f:84:d6:2b:
1b:5c:6a:8d:69:0a:9e:95:34:e3:2d:ed:6e:32:dd:
35:69:d4:c3:1d:2b:76:3a:58:da:3e:c3:5a:db:6b:
81:62:3d:12:11:d0:ef:7c:63:da:ff:fa:ad:8e:a6:
b3:bb:a3:f1:62:2b:03:2e:72:71:88:e8:b4:7d:72:
9f:e7:dd:a7:cb:df:42:39:fc:91:0a:f9:52:e0:7b:
92:c9:70:7f:2b:69:cf:98:15:f9:99:a2:d9:b3:5e:
f1:16:c7:df:0b:31:34:f8:76:6a:64:a7:11:32:ac:
32:3a:6f:df:17:ee:17:c5:11:74:75:8d:f1:49:8f:
65:d1:dc:4c:b4:35:36:fd:68:8f:b8:74:fd:f0:5b:
11:a8:82:46:bb:52:53:08:5a:ab:39:cf:00:35:19:
f0:0f:de:58:d9:be:9d:99:72:59:4d:22:9f:7e:ac:
13:2e:c1:a7:06:36:b8:ee:f7:b3:bf:0d:3e:11:a0:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:25:0B:4A:DB:14:E3:9A:AD:DB:A6:3C:47:A1:33:1A:C9:E3:C1
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:86:71:e5:e3:f7:7e:85:00:23:7b:e4:22:7c:5c:c5:25:08:
d9:ba:c7:83:55:5f:c7:b7:7f:d3:ae:83:d3:a4:a1:f0:dc:a6:
19:23:13:ae:6b:73:c0:f9:a3:7c:74:26:c4:a0:95:e0:c7:32:
f4:49:27:ea:38:60:79:0f:b4:75:eb:e2:f3:91:03:a5:61:6f:
df:ae:15:86:74:07:17:32:de:92:ce:71:de:0d:fd:70:c2:8e:
87:24:a7:30:5c:97:5c:f7:ff:a6:0f:80:27:bd:37:b5:7a:6f:
df:63:64:07:c6:9e:ab:26:74:1c:53:6c:0c:7f:47:f1:12:68:
2c:e8:5d:5d:56:69:e4:4a:43:07:fb:9d:ac:64:01:0c:cb:b1:
57:9e:f4:71:c0:ed:05:15:a1:cc:f7:f9:71:6f:ed:ea:df:18:
8d:10:34:1e:a4:bd:a8:ad:70:c4:3c:5b:16:1f:79:a0:56:46:
3c:e6:17:43:cd:43:53:18:6c:19:9f:64:92:e8:9a:c7:fe:1e:
51:1f:c7:39:ea:28:cd:a4:db:c8:99:89:f3:5c:12:1b:64:45:
36:28:d5:33:2d:1d:a5:c0:96:2e:57:76:9c:30:b1:d9:28:7d:
d3:d0:93:e0:08:6d:ef:e9:bb:cd:79:80:7b:05:02:dc:98:2d:
7d:3f:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:45 2026 by rpki-client