Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: W6CmR3BDWSUUs17NlitsfHZValAw7Xjuh9yOPzvh3r0=
Subject key identifier: C3:20:0D:D3:9B:C8:7F:8C:E0:DE:67:4F:7F:5B:4A:0B:A1:2B:68:4C
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 019F90916A438E6558906504C3A7C3E8DDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 02D0
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: Jr46WVo2Ufo4allYQwc+QieEtjJqbXPaRH+JC/VEy2E=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:6a:43:8e:65:58:90:65:04:c3:a7:c3:e8:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=c3200dd39bc87f8ce0de674f7f5b4a0ba12b684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:42:ee:d7:0f:1a:1f:d9:2f:80:c5:de:64:
b0:89:7c:1d:56:9b:d8:35:14:9e:d8:30:08:68:64:
ab:d5:ea:0f:ce:3e:cc:b7:fb:ca:18:2a:21:37:33:
36:41:74:74:ec:33:aa:83:f9:a9:71:39:5b:f0:22:
87:ff:a8:f8:d6:a1:59:ea:48:b4:6a:9c:1c:a5:4b:
55:d0:32:73:b0:23:ad:19:3d:78:13:85:17:3b:a1:
98:9b:f0:fb:96:1c:4f:73:db:9a:bb:2c:17:93:30:
48:55:47:db:4b:12:b9:fb:79:38:ca:a7:79:cc:5b:
47:ef:8a:05:40:f4:d9:99:ad:86:6b:dc:88:9b:ce:
eb:29:14:63:25:77:f8:5a:9c:d4:da:94:6f:62:49:
d1:4e:f4:1d:3e:3a:cb:25:27:a9:09:0b:59:28:a0:
82:6b:6e:06:a7:8a:a8:b4:86:ea:70:d2:0b:f3:0f:
31:fb:89:51:c9:4b:46:9b:5b:1d:33:c0:f0:8c:db:
4e:4b:46:4a:f0:db:1d:ef:71:ed:15:60:03:b9:86:
94:4a:13:b7:57:7d:49:f1:ff:a8:59:d2:bc:8d:00:
2a:7d:89:58:f6:2f:3b:a3:06:cf:12:f9:59:e6:46:
45:78:76:64:3f:b8:f9:f5:d1:68:2b:5a:2a:53:1b:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:0D:D3:9B:C8:7F:8C:E0:DE:67:4F:7F:5B:4A:0B:A1:2B:68:4C
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6e:98:94:1c:a4:b9:9b:c4:2d:a6:16:1f:4e:65:2f:a0:38:
cb:c9:b4:ba:12:b8:26:18:a8:46:44:af:74:9b:ef:0c:32:54:
de:cf:71:84:9b:5c:2a:9b:57:8b:28:0e:31:4b:e5:31:0f:a7:
dc:1f:6f:4b:f2:cf:2f:34:46:e5:82:44:b7:77:ea:61:03:f3:
f9:90:55:b0:ce:39:38:d6:7e:b1:86:76:f2:05:b4:9f:4f:e2:
a8:1a:b5:5c:33:ff:c4:c2:f1:b4:12:ac:e8:36:0e:c0:a8:88:
2b:7c:c7:c2:af:92:d7:10:46:d0:4f:1f:14:d1:da:ad:8a:64:
53:2d:54:c1:da:7b:ab:d8:ae:e6:d0:9b:ff:85:c3:d3:4c:d4:
c7:3e:88:98:6d:29:92:5a:1c:19:96:e8:5a:ab:fc:06:6b:92:
fd:16:c2:15:43:db:77:a6:cd:fe:75:62:4d:53:90:38:c0:77:
e2:2d:a9:0e:6b:ec:d3:e0:c7:8c:58:39:eb:37:82:1a:8c:2e:
01:0a:f3:95:a6:81:cd:55:53:e7:20:fc:eb:71:66:8c:c7:0c:
fb:da:25:d9:12:08:27:35:4d:b2:9d:3d:f9:6c:85:6b:eb:e1:
5b:b7:bf:eb:c4:5d:0c:11:a9:b2:87:59:51:1a:f7:8a:58:b6:
26:01:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:39 2026 by rpki-client