Manifest
$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
File: A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft (raw, json)
Hash identifier: QFTnR148DAoK0HZHZN+PmX7bLthvnTS8WtuR9XviKZM=
Subject key identifier: C3:96:7B:3B:11:1E:1F:64:09:AD:3A:C7:CB:8F:07:62:CE:6B:C7:15
Authority key identifier: A9:99:00:0A:0E:CA:46:10:E0:BB:AD:70:1D:3F:0F:43:29:C3:79:A1
Certificate issuer: /CN=a999000a0eca4610e0bbad701d3f0f4329c379a1
Certificate serial: 229FD5B3EE48A134E7040171F3B0E875E86B5904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZkACg7KRhDgu61wHT8PQynDeaE.cer
Subject info access: rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
Manifest number: 24
Signing time: Sat 14 Nov 2026 14:52:57 +0000
Manifest this update: Sat 14 Nov 2026 14:47:57 +0000
Manifest next update: Sun 15 Nov 2026 15:08:57 +0000
Files and hashes: 1: AS218995.asa (hash: PA5XocsxjZ/Ur31C9IY9D+at89QjWXmyHzaidkwo524=)
2: A999000A0ECA4610E0BBAD701D3F0F4329C379A1.crl (hash: hofFQ0EYRIa8YgjQSyEwS+5PttYpcYUIeTC4OxoG41Y=)
Validation: OK
Signature path: rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.crl
rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZkACg7KRhDgu61wHT8PQynDeaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9f:d5:b3:ee:48:a1:34:e7:04:01:71:f3:b0:e8:75:e8:6b:59:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999000a0eca4610e0bbad701d3f0f4329c379a1
Validity
Not Before: Nov 14 14:47:57 2026 GMT
Not After : Nov 15 15:08:57 2026 GMT
Subject: CN=C3967B3B111E1F6409AD3AC7CB8F0762CE6BC715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:af:85:ab:f4:52:bd:64:da:c1:81:d9:1c:01:
68:e8:73:a8:6a:f2:f8:23:67:c9:43:12:fa:e7:e9:
3e:fa:3e:ac:44:52:6b:90:3c:62:0c:c0:d6:23:45:
2b:54:b7:3f:cc:33:36:ed:f7:ec:a3:9b:db:9d:43:
f1:c2:e7:27:e9:f4:75:99:d1:f8:70:19:4b:9e:b6:
e9:80:dd:87:e0:b1:43:31:3b:3d:0a:f2:13:11:ce:
e6:a2:f6:f4:e8:81:3f:82:f0:91:9c:6d:8c:fe:86:
49:e7:42:50:14:eb:19:95:f8:0d:bb:aa:3c:35:05:
80:13:b6:55:ee:e6:98:a4:82:23:5b:aa:df:bd:5a:
b1:c2:49:41:b7:7d:fd:40:5e:ce:6b:fa:d1:f1:fb:
1f:b8:c0:7a:89:99:84:34:67:a7:1e:f0:9e:cf:3f:
f6:7e:69:be:2f:91:23:0f:a1:7b:60:46:8f:99:a6:
2e:97:b8:83:ad:98:c9:37:5e:ab:cd:20:38:c8:20:
2d:db:b4:74:25:da:de:11:cf:ba:ea:d2:fc:28:8a:
54:66:1e:40:d0:e4:47:4c:4f:82:13:01:f1:b3:84:
b9:bd:50:cc:3f:92:70:8f:7f:68:12:41:66:84:35:
bb:32:c0:82:a5:31:da:73:5b:2b:a8:14:8f:02:75:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:7B:3B:11:1E:1F:64:09:AD:3A:C7:CB:8F:07:62:CE:6B:C7:15
X509v3 Authority Key Identifier:
keyid:A9:99:00:0A:0E:CA:46:10:E0:BB:AD:70:1D:3F:0F:43:29:C3:79:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZkACg7KRhDgu61wHT8PQynDeaE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2f:07:a7:02:52:3a:29:62:ae:39:a7:3b:b5:3d:a2:f0:b5:
2b:b8:5c:38:36:8a:44:f7:23:f2:be:b3:75:83:99:51:69:9f:
f0:4f:a2:f1:a8:48:14:ea:ec:96:03:75:87:76:0e:b6:e5:2b:
cf:40:9e:f5:61:7e:88:0d:8d:9b:1e:af:f6:6e:12:15:3f:b3:
14:0d:02:0d:bb:3a:29:82:9c:84:ab:13:00:be:d3:ab:20:42:
64:ae:73:3c:cf:92:ca:4e:79:f6:2c:21:62:cb:53:9d:cb:95:
48:55:ac:43:45:22:c4:73:fd:a8:4a:a1:32:a3:c9:3e:9d:c9:
c0:19:11:2c:0f:37:ff:00:f1:36:64:20:33:c6:db:78:9e:56:
90:88:36:6d:c9:b1:e7:90:63:bc:43:da:22:49:93:27:cf:99:
d2:09:d9:06:54:35:df:9c:fb:f0:08:03:a6:83:d7:d2:a2:a8:
c4:a3:d5:86:f1:c3:03:89:f6:24:f5:e0:59:d2:16:ba:7a:02:
72:20:8a:1b:89:e7:25:23:5d:50:aa:c9:df:dc:26:aa:af:f0:
ef:58:df:fb:6f:b4:d5:81:26:20:0b:88:85:92:8f:04:e9:60:
e8:7b:9d:1d:a9:00:b0:42:04:58:73:35:5b:8f:6b:d6:80:48:
8b:7f:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:45:32 2026 by rpki-client