Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: ZpXhsL6rCg5eeZbseLGxsYO+ayv5fKJ//Pn0npAsWrY=
Subject key identifier: DE:8B:F1:9B:15:7C:BD:5E:01:6A:9A:14:91:77:33:C8:D4:79:01:72
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 01A1DF158D9ED987325DBA8F6651A66D3A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 1124
Signing time: Sun 15 Nov 2026 12:01:33 +0000
Manifest this update: Sun 15 Nov 2026 12:01:33 +0000
Manifest next update: Mon 16 Nov 2026 12:01:33 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: 0YFOBYfLDQH4sGcD20/eT9U2+XvboV6ybHJUn9ERqlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:8d:9e:d9:87:32:5d:ba:8f:66:51:a6:6d:3a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Nov 15 12:01:33 2026 GMT
Not After : Nov 16 12:01:33 2026 GMT
Subject: CN=de8bf19b157cbd5e016a9a14917733c8d4790172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:d4:76:a3:5f:38:06:84:e7:65:9e:21:73:
30:74:57:e9:57:e1:52:6e:c3:48:50:60:b6:b7:aa:
87:52:46:77:a8:d4:18:4a:5b:86:78:38:97:ee:a1:
b2:7f:d1:da:d7:29:40:9c:b3:04:d8:0d:e0:b6:b4:
b5:19:1c:c9:b1:f8:fb:a9:6c:5d:0f:35:6b:c0:25:
33:7e:ff:7c:bb:57:c0:bd:aa:70:9c:ff:ff:85:25:
0d:34:4c:e7:9e:c7:32:67:e9:9a:cc:d4:8c:a2:93:
2c:33:e1:3c:a1:8f:bd:3f:e6:bd:13:86:da:a4:8d:
cb:66:65:a6:fa:1d:6c:f6:b5:88:d8:da:f5:98:c3:
8d:b5:1f:b2:6f:ca:56:0b:bd:21:e3:ae:9d:9c:8f:
a2:18:79:1a:87:ff:d9:33:15:8c:64:af:5d:5a:1d:
1a:36:a0:97:e6:85:e4:69:5d:da:db:8a:c1:e2:b3:
eb:cc:64:58:f5:25:3d:a4:01:e1:d8:30:0e:fa:b8:
ad:44:d3:c3:e0:80:73:2e:2a:d4:38:71:ed:c0:60:
99:c0:6c:e1:71:91:ab:74:06:29:e5:fb:58:18:67:
54:b1:e6:c7:fa:31:c0:71:63:7f:97:7a:7b:c7:44:
a3:95:e5:a3:9d:01:8d:2c:46:bd:c6:b2:cb:66:21:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:F1:9B:15:7C:BD:5E:01:6A:9A:14:91:77:33:C8:D4:79:01:72
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:00:11:06:cb:41:d3:3d:08:6c:30:0d:39:98:89:80:9d:
53:5f:de:eb:4e:f3:42:c3:63:4d:1c:c9:b1:81:7e:e8:50:19:
26:10:f7:24:14:a1:fc:d3:c4:87:a5:99:d3:5c:e7:85:87:46:
c4:6f:48:5c:73:e5:37:06:1c:fd:75:b7:e9:fa:11:ad:8c:b5:
7f:26:ac:ce:39:42:c6:40:0c:9c:36:51:41:ad:a9:6c:b5:64:
77:d9:f6:2c:74:34:3d:b2:b0:fb:6a:f3:cf:49:cd:a8:3e:1f:
50:20:a7:8e:bb:b0:de:c4:32:42:cb:c5:1e:90:9e:18:32:0c:
77:f7:5c:a1:51:0f:de:83:c8:0a:fb:ab:ec:bf:db:e8:d0:67:
d9:b7:e6:85:d2:84:7f:4e:d7:ff:d6:97:a7:99:8c:1c:87:a4:
1b:01:e8:3d:36:96:a6:0f:c2:9b:3b:71:ff:45:c7:f7:88:1a:
15:aa:50:85:11:e8:d1:1e:53:e7:8d:29:2b:14:36:b3:24:b9:
62:da:bb:25:f1:8b:5a:34:ff:af:53:7f:5a:4b:8b:48:1f:87:
58:f8:ef:85:60:8c:42:72:a5:5a:08:c4:a5:ec:16:0c:4e:5b:
8f:54:55:d3:da:1c:84:70:b6:19:f3:3f:0a:78:a7:20:fd:46:
c6:a3:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:12:15 2026 by rpki-client