Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: VMUSVm+3ZP18/3Z2YEOSpdrMjcd8e2pagLf+z73Nd38=
Subject key identifier: 2C:19:3E:AF:E8:7E:6C:F1:4A:DE:7B:69:DA:B6:0E:73:22:DF:AA:66
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 019D2A725DF64F10CFDC6B1D57E7698B9364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 0192
Signing time: Thu 26 Mar 2026 14:00:31 +0000
Manifest this update: Thu 26 Mar 2026 14:00:31 +0000
Manifest next update: Fri 27 Mar 2026 14:00:31 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: nmpkmzPY9caRfAvxz5c1rPS6nsiVLqeccIzCCQKqNW8=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5d:f6:4f:10:cf:dc:6b:1d:57:e7:69:8b:93:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Mar 26 14:00:31 2026 GMT
Not After : Mar 27 14:00:31 2026 GMT
Subject: CN=2c193eafe87e6cf14ade7b69dab60e7322dfaa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:0f:a2:fb:04:41:ef:a0:56:f4:1f:41:2c:
bc:da:be:a2:1f:4e:48:a6:ad:c8:7b:26:0d:68:49:
2e:da:b7:4a:13:74:d0:fd:9b:15:45:fe:0d:ad:51:
d5:e5:f8:64:79:5b:24:5a:e9:ee:44:59:23:04:75:
3a:e2:bb:8d:5b:04:56:8e:7b:66:0c:c8:7a:4b:50:
c8:84:fe:b6:4e:1a:98:45:61:cc:5c:69:43:7f:96:
7b:ea:65:51:37:31:57:a5:62:cf:d5:74:06:e0:81:
50:81:a5:84:cd:95:b4:d7:52:f7:e3:a1:12:44:ce:
c6:1e:eb:77:3e:6d:7e:e8:9b:e9:8f:08:08:73:2f:
4b:fc:65:fa:cc:f2:3d:83:c9:f4:b5:4c:07:2d:18:
b9:51:ab:87:5a:3b:f1:80:f3:df:cc:1b:15:89:8a:
f9:07:7a:b2:19:4a:00:bc:c4:6d:a1:af:16:5f:0a:
5a:bc:86:b6:94:27:44:da:0a:82:87:4c:ff:45:1a:
c2:34:f1:71:17:80:79:f8:a5:75:fc:2c:34:0e:54:
7f:45:72:fa:b2:df:66:9d:20:1f:cf:7a:f0:3e:57:
89:c7:e8:31:20:2b:36:49:69:6c:d5:ae:aa:e7:ab:
33:a4:5f:07:9d:95:4a:dc:ac:8b:99:f8:ba:56:6b:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:3E:AF:E8:7E:6C:F1:4A:DE:7B:69:DA:B6:0E:73:22:DF:AA:66
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:8b:54:f0:54:68:15:e9:81:21:d4:4d:09:66:80:84:e6:
ec:64:5a:91:15:2b:3c:be:1d:2e:75:cb:88:b9:f1:fb:89:18:
12:4b:41:94:78:94:92:3d:8a:20:54:00:b2:54:76:be:29:1f:
e4:5d:d0:f9:46:27:03:51:5d:6c:b3:07:12:36:a6:61:d7:b5:
f3:8b:49:3d:07:82:b7:3e:81:ac:3f:49:04:bf:28:d8:49:99:
4c:29:5b:4f:e1:52:4b:66:66:68:5d:7c:b0:3c:29:9b:a5:d1:
ae:9d:46:51:af:e2:c6:04:3b:72:43:fa:92:3c:98:fc:fb:6b:
14:b4:84:5d:b9:fa:37:1f:f0:61:96:c4:b2:93:3b:51:b0:78:
05:ed:36:3d:ee:ea:d8:9a:84:06:1e:e9:29:b1:e5:24:b0:7e:
c3:92:ce:3f:f5:b2:03:10:91:a1:22:da:c5:78:10:39:ca:03:
75:e2:f7:d5:d5:64:7f:72:f6:d7:df:3d:5d:3b:58:24:c4:1f:
a9:e4:0e:15:f6:a1:2c:db:1b:e0:54:01:05:60:ba:39:c2:9b:
58:ab:8a:e0:e1:da:ed:37:00:cd:bc:3d:fd:69:0d:41:01:fb:
3b:0c:c4:a5:48:08:21:68:78:84:88:d4:3c:6d:47:dd:36:96:
bf:1c:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:46 2026 by rpki-client