Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: /41v2G7iilKdIiNnSquUcaJPTfo5553t6tbvPF5vgSc=
Subject key identifier: 55:81:E8:5A:4A:01:8A:12:1A:B7:85:77:2A:D0:C1:A7:F5:17:BB:79
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 01A0D124B779DD721F93178D630168FE4C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 0376
Signing time: Thu 24 Sep 2026 02:00:39 +0000
Manifest this update: Thu 24 Sep 2026 02:00:39 +0000
Manifest next update: Fri 25 Sep 2026 02:00:39 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: dcan8m8IUjqqP68bawda1Ngfhugrg8qip13a1W9wAtg=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:b7:79:dd:72:1f:93:17:8d:63:01:68:fe:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Sep 24 02:00:39 2026 GMT
Not After : Sep 25 02:00:39 2026 GMT
Subject: CN=5581e85a4a018a121ab785772ad0c1a7f517bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:a1:bd:2f:d7:d8:02:44:ab:32:0a:81:10:
78:78:5f:ee:aa:69:57:b4:e3:3c:08:d3:93:c3:b5:
26:48:68:3e:9a:a7:5d:14:64:0e:bb:cb:39:a4:ea:
dc:45:63:8f:eb:cf:10:fa:a7:b5:70:42:c2:c6:0a:
92:cb:50:75:c4:dc:9b:99:8c:4d:01:78:4f:20:9c:
6d:83:aa:43:14:00:60:1a:e0:4a:0a:54:40:de:e1:
12:28:23:9b:ef:43:20:9e:1c:ad:de:bf:59:39:e3:
7a:07:6e:5e:de:9f:e8:e8:99:ef:11:8e:02:db:d9:
b2:9d:8c:59:cf:69:5b:6c:4a:ab:1a:a6:46:26:67:
ed:fc:15:7d:19:ad:56:1e:31:8c:66:79:5c:2b:6e:
86:85:8d:9b:10:0e:7e:de:51:7f:2a:0a:99:d1:98:
ed:bd:3f:05:7a:e6:df:a0:f6:42:20:df:c8:21:d0:
ee:58:67:bd:d5:47:79:d6:28:30:74:70:21:f6:35:
34:26:45:1c:65:5f:db:d8:e0:a7:5e:6e:6e:b1:f3:
7f:51:35:1f:33:d8:71:6b:8b:db:9f:b5:bf:4e:b6:
4e:9a:b1:8e:a4:b3:b1:3d:f2:a0:d8:b1:d9:28:51:
72:a8:0f:e8:71:6c:b8:33:6c:b1:1a:52:a6:04:11:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:E8:5A:4A:01:8A:12:1A:B7:85:77:2A:D0:C1:A7:F5:17:BB:79
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:60:eb:fe:5c:6c:2f:4d:2a:59:ef:32:02:5b:a0:ba:f8:c4:
77:51:4d:b1:97:a9:36:ca:69:a5:23:75:21:0b:5c:da:a0:42:
ba:50:28:be:ef:e0:0b:b7:93:06:64:8e:e2:7d:6f:58:f2:c4:
bc:ca:e6:4a:b6:0d:a8:c8:3c:90:7d:a8:4d:23:01:62:26:45:
a2:cd:88:12:da:8c:6e:e5:1b:73:da:be:41:9a:89:fd:22:fd:
29:0c:30:fd:cb:d7:79:21:56:c4:3c:e2:fe:af:3b:be:60:92:
fa:88:83:26:0b:c6:4d:9d:87:e2:7a:22:26:1f:7f:f2:1f:dd:
55:87:aa:a5:b4:41:46:aa:d1:fa:5a:75:26:a8:19:56:55:a2:
a5:03:b7:01:e4:16:56:ac:ac:b2:a6:0f:6f:d4:c8:91:c1:89:
b7:fc:75:c9:9d:dc:c4:80:0f:0f:49:4b:93:99:7c:14:1e:65:
4b:87:e4:21:c8:21:38:7b:63:ff:5d:f5:d0:90:ad:02:22:b1:
c4:5b:b2:dc:0a:5f:54:04:9c:75:4f:d5:ac:f9:0e:29:4c:01:
b8:e6:74:fa:bc:17:bd:b3:32:a7:06:fd:02:c5:28:08:a4:8c:
b7:fb:a4:2d:28:91:00:3f:57:2e:2b:62:40:f3:10:c7:6e:5c:
ed:9d:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:44:12 2026 by rpki-client