Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: bVAJz06i+OlGy8D+SmlZCpA7xzWQXSKe5qxJpjUXb9I=
Subject key identifier: 70:D8:11:21:39:C5:4C:7D:AE:0E:CE:AC:D1:CB:0B:8C:82:F6:8A:16
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019D98184EAF7382ABE6B528D0640D6FF631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0EED
Signing time: Thu 16 Apr 2026 21:00:22 +0000
Manifest this update: Thu 16 Apr 2026 21:00:22 +0000
Manifest next update: Fri 17 Apr 2026 21:00:22 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: C3tEXHj69yZNbsBNV1fsJmDv4EqZHskIGxVuQVu2+ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:4e:af:73:82:ab:e6:b5:28:d0:64:0d:6f:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Apr 16 21:00:22 2026 GMT
Not After : Apr 17 21:00:22 2026 GMT
Subject: CN=70d8112139c54c7dae0eceacd1cb0b8c82f68a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:4d:88:3f:66:4a:da:cc:da:5d:b3:01:f8:
ac:87:d4:d5:2f:c1:99:c1:f8:5e:02:e7:e0:a2:8f:
9b:a7:ab:05:20:a2:c3:65:2a:73:ae:11:42:8b:a8:
f4:25:d6:d4:86:9f:ff:2f:dd:19:76:b0:52:9e:1b:
c9:e4:7f:eb:ab:0d:a2:c1:f9:75:85:11:42:54:5d:
60:be:ab:9e:da:95:e6:14:c2:a7:2d:20:14:a3:83:
70:e3:85:23:8f:f4:7c:89:d1:8a:b1:86:20:39:ff:
d3:98:51:2f:6d:9f:72:e1:89:39:c5:03:89:79:8d:
3d:46:fa:81:4a:e5:8e:2b:2f:12:98:28:88:e7:7d:
5a:3c:2f:d5:20:56:00:a1:b5:55:5c:4c:58:5e:58:
a9:84:41:db:81:ca:44:cf:83:8a:aa:36:ba:e4:78:
43:d8:10:14:2b:a8:77:08:9d:98:bd:bf:fd:0a:6c:
d4:52:e9:5a:28:e8:21:df:cb:d2:a2:16:11:b0:59:
44:b1:28:f9:b9:f3:9d:4a:6f:2f:40:d3:3e:3a:d1:
83:2b:74:cb:49:09:c6:32:ae:a4:f6:8b:c6:84:9d:
e8:a0:a8:74:44:6b:e0:d6:66:08:8d:c6:4c:6c:8d:
19:22:14:dd:88:4d:7f:5f:01:85:4c:02:bd:1b:54:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:11:21:39:C5:4C:7D:AE:0E:CE:AC:D1:CB:0B:8C:82:F6:8A:16
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:47:b4:28:54:3d:f8:83:46:a9:93:24:09:94:15:75:8c:67:
ef:c5:fb:d7:1a:73:e6:52:6c:88:4f:15:e3:36:4a:9a:d6:9c:
3d:c4:9f:1c:14:a8:ec:2a:aa:2a:ee:13:f5:e7:69:ed:5a:5a:
d1:0a:e6:73:ef:6e:e4:63:21:21:97:92:a6:6a:ca:e2:02:14:
8c:6a:e1:9e:21:2c:5e:19:64:6b:b5:f6:41:0a:ff:86:e3:5f:
b9:e2:7b:ee:2d:03:61:98:16:c3:82:98:1b:ce:27:60:c9:e9:
c4:42:47:47:7e:a7:ea:f5:62:5a:9e:18:36:d8:9c:18:f8:ff:
b7:db:f3:79:68:d0:25:c3:f5:0e:14:3a:5e:ed:f5:a9:f0:de:
7e:37:cf:14:c1:f3:20:30:ed:59:c2:68:52:46:3f:a5:a2:b7:
69:43:a1:e6:85:ae:4c:dc:9e:24:77:ab:70:9a:4f:5a:f0:26:
ba:39:b1:b0:ce:c0:20:33:44:7a:07:43:40:47:d4:f9:eb:a1:
cc:93:06:09:08:0c:7a:de:ae:59:0e:02:47:45:70:81:c3:ce:
48:95:ec:0b:4d:f3:bd:86:e4:b0:87:00:68:e6:92:49:3d:34:
8a:70:a7:61:3f:4d:e9:4c:69:a2:b5:3a:bd:71:d1:db:2f:3f:
73:43:82:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGE6vc4Kr5rUo0GQNb/YxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjYwNDE2MjEwMDIyWhcNMjYwNDE3MjEwMDIyWjAzMTEwLwYDVQQD
Eyg3MGQ4MTEyMTM5YzU0YzdkYWUwZWNlYWNkMWNiMGI4YzgyZjY4YTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyilNiD9mStrM2l2zAfish9TVL8GZ
wfheAufgoo+bp6sFIKLDZSpzrhFCi6j0JdbUhp//L90ZdrBSnhvJ5H/rqw2iwfl1
hRFCVF1gvque2pXmFMKnLSAUo4Nw44Ujj/R8idGKsYYgOf/TmFEvbZ9y4Yk5xQOJ
eY09RvqBSuWOKy8SmCiI531aPC/VIFYAobVVXExYXliphEHbgcpEz4OKqja65HhD
2BAUK6h3CJ2Yvb/9CmzUUulaKOgh38vSohYRsFlEsSj5ufOdSm8vQNM+OtGDK3TL
SQnGMq6k9ovGhJ3ooKh0RGvg1mYIjcZMbI0ZIhTdiE1/XwGFTAK9G1TDVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDYESE5xUx9rg7OrNHLC4yC9ooWMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA30e0KFQ9
+INGqZMkCZQVdYxn78X71xpz5lJsiE8V4zZKmtacPcSfHBSo7CqqKu4T9edp7Vpa
0Qrmc+9u5GMhIZeSpmrK4gIUjGrhniEsXhlka7X2QQr/huNfueJ77i0DYZgWw4KY
G84nYMnpxEJHR36n6vViWp4YNticGPj/t9vzeWjQJcP1DhQ6Xu31qfDefjfPFMHz
IDDtWcJoUkY/paK3aUOh5oWuTNyeJHercJpPWvAmujmxsM7AIDNEegdDQEfU+euh
zJMGCQgMet6uWQ4CR0VwgcPOSJXsC03zvYbksIcAaOaSST00inCnYT9N6UxporU6
vXHR2y8/c0OCXg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:30 2026 by rpki-client