Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: 8SZPk7jtYVvoLGJ9hU+fqaFOx6zkleESed3g7PZoTqg=
Subject key identifier: DE:14:42:CB:85:6C:5C:EE:3B:12:F7:07:36:D9:C3:7D:C2:95:6F:65
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 01A0CE5B1963AD61416BB132ED1B523109D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 08D9
Signing time: Wed 23 Sep 2026 13:01:11 +0000
Manifest this update: Wed 23 Sep 2026 13:01:11 +0000
Manifest next update: Thu 24 Sep 2026 13:01:11 +0000
Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: aJ+N4rxja9vXgKHG38XmwPTta5FdNJFoHAJk7QGc7/g=)
2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5b:19:63:ad:61:41:6b:b1:32:ed:1b:52:31:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Sep 23 13:01:11 2026 GMT
Not After : Sep 24 13:01:11 2026 GMT
Subject: CN=de1442cb856c5cee3b12f70736d9c37dc2956f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:07:49:bf:59:92:8d:5c:d4:41:56:2c:22:86:
18:e6:73:21:cb:1d:aa:e6:db:78:cf:c4:aa:29:a7:
f5:eb:22:d9:fa:09:c0:eb:31:05:eb:b9:0d:4c:15:
51:b9:c6:ef:22:c1:d8:8d:b8:43:f5:87:f4:b9:88:
d4:55:17:55:fd:7d:be:62:8e:4c:b9:3d:4a:fd:e0:
4f:87:e2:54:b6:0e:7e:d7:54:f4:97:42:23:41:75:
2e:3a:11:25:6f:9a:57:a3:e3:c5:b6:1d:f8:b4:ec:
3f:e2:3c:09:e0:bf:65:e7:2f:2b:ed:72:3f:41:9f:
95:31:3a:b4:76:96:06:79:0e:5e:f4:a1:55:80:9c:
54:08:35:37:5d:3e:9a:3d:af:87:d6:cf:89:26:23:
6b:17:8f:97:40:94:5b:c1:d1:b7:62:9b:d7:b8:1f:
57:bc:2a:ea:83:c6:24:8a:42:02:c6:13:a6:b7:79:
73:0c:0b:9e:57:d4:a5:97:a0:eb:4f:0a:6d:a2:93:
4f:2a:00:4b:98:45:78:a0:1d:5a:9c:e5:f8:17:4d:
da:95:ca:5f:f1:e5:7f:27:51:ad:1b:3d:30:02:93:
63:8c:58:42:2b:57:44:13:33:fd:f4:46:c6:e4:f1:
54:4b:23:19:49:3d:20:25:4d:68:a1:fa:a0:98:c1:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:14:42:CB:85:6C:5C:EE:3B:12:F7:07:36:D9:C3:7D:C2:95:6F:65
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:48:8e:72:67:41:64:90:fe:0f:e0:22:85:37:6a:f0:c6:
72:ba:33:e0:64:87:a6:ad:51:e3:2d:30:88:d3:d4:cd:51:97:
87:dd:7e:78:0f:d2:2c:36:e3:3c:21:24:c0:04:39:65:bc:12:
a3:fb:bb:2e:19:02:9b:48:be:6d:84:c1:65:e9:34:38:3c:ab:
54:56:3d:37:c0:c9:9d:dd:db:8b:d0:96:e1:84:04:ed:04:d1:
d3:46:4a:92:c9:3a:81:a1:5c:a2:4f:c2:27:d3:5f:0b:03:6b:
f7:ce:cd:f5:91:a4:03:09:90:26:80:1d:48:9e:78:7e:7c:2e:
37:95:7d:45:ea:2b:1e:0e:c9:7f:24:19:ed:e2:1d:3d:c1:d1:
60:87:de:ca:0a:cb:83:39:a3:73:35:f8:f1:bc:5c:cc:7a:01:
f1:b9:cc:2b:c1:3a:a4:b4:97:47:a2:2b:12:2d:e1:fe:85:dc:
28:ee:e7:9d:4c:38:2e:77:79:0b:33:f8:34:10:4d:f0:9b:59:
72:55:51:84:8b:7e:19:ab:8a:4f:19:eb:e8:e9:18:ee:85:d1:
27:d4:84:aa:0d:0c:68:b2:82:72:27:fa:8f:77:19:60:d4:41:
30:22:d7:2c:9a:58:45:72:42:8f:06:af:05:39:2d:19:05:5b:
78:87:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:14:07 2026 by rpki-client