Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: DtpaQjagrohrepKFDHOSiUjRazCKjmfvpFjJ82qSIt0=
Subject key identifier: CB:85:CE:DC:6B:15:CD:DA:6D:AF:40:15:AE:0F:AD:D7:61:F3:E9:62
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019CA8A0CA93E4E6599906C2AFEFAB83848D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0E71
Signing time: Sun 01 Mar 2026 09:00:35 +0000
Manifest this update: Sun 01 Mar 2026 09:00:35 +0000
Manifest next update: Mon 02 Mar 2026 09:00:35 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: 1Icdo7iiBjKF1kHMy/BRVgOdZ3D+1NlFSjwi35wg2VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:ca:93:e4:e6:59:99:06:c2:af:ef:ab:83:84:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Mar 1 09:00:35 2026 GMT
Not After : Mar 2 09:00:35 2026 GMT
Subject: CN=cb85cedc6b15cdda6daf4015ae0fadd761f3e962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:41:a8:59:f5:d6:95:2c:4f:97:9e:db:78:
22:05:26:78:ec:75:9a:c4:28:fd:78:f7:a9:70:17:
b4:d2:7b:60:76:69:cb:9e:88:37:ad:a3:92:96:3a:
28:15:d9:7c:82:7c:f5:46:73:fa:91:bf:45:38:71:
84:f7:17:ea:e1:f1:23:07:24:76:fc:4a:b5:d9:73:
20:66:16:27:0d:b2:96:59:2a:4e:a6:89:de:11:24:
8c:6c:bb:5e:80:ab:e3:0d:19:eb:9d:4c:6b:9f:ab:
c5:b2:55:be:be:4d:52:ea:7d:81:12:3b:d1:bc:5f:
20:b2:da:0c:eb:97:b7:a3:be:14:4d:b1:d2:81:27:
de:8a:48:50:0c:5f:63:e1:1d:a2:d5:e0:c1:fb:63:
e3:67:74:73:92:9f:d0:b0:8b:1f:8f:f9:29:fb:c2:
7a:9c:ad:88:04:09:6d:05:57:9b:1f:8c:07:b2:ab:
18:34:ec:69:16:dc:b7:b8:bf:a7:64:68:56:50:41:
56:57:14:2c:b0:e4:83:d2:98:04:0d:e5:5a:60:f1:
67:e1:1c:71:83:7a:08:0f:e7:7b:83:9c:2b:3b:8e:
40:46:ed:5a:90:3e:ca:a4:96:13:a8:b9:76:cf:76:
3c:94:9c:e0:f8:38:cf:a7:75:19:fe:d7:72:82:34:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:CE:DC:6B:15:CD:DA:6D:AF:40:15:AE:0F:AD:D7:61:F3:E9:62
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:de:30:d3:eb:a9:e3:23:ad:23:91:9e:7a:82:ce:b2:ba:
d5:c8:01:fb:72:b9:67:e2:d4:0f:e8:5d:f3:cb:3d:92:45:67:
9e:5d:08:83:bb:b4:fa:75:e6:48:2c:ff:c7:0d:ea:d7:6b:1e:
31:77:f0:ab:3c:82:7f:30:c2:f4:0b:b1:aa:44:9f:9c:24:e4:
06:a5:23:8c:73:3f:a6:a5:8f:8e:fb:85:e3:3f:89:aa:1f:0a:
9d:6a:40:eb:3f:63:f1:4e:41:bb:94:e0:86:07:e3:7e:5c:5e:
f6:48:f9:8f:24:2a:a4:6c:a3:3c:29:92:9d:7c:57:a8:fd:45:
04:c9:9a:95:8d:f9:ed:de:ef:c2:99:a4:7c:d4:79:5b:f4:0e:
2e:93:38:33:64:36:4b:b4:5d:73:84:c6:c5:2a:c3:f0:1b:bd:
ae:db:ce:c8:cc:9e:cb:a1:52:23:9b:76:75:94:4a:a5:af:ca:
ca:b5:d9:5c:69:7d:4f:b3:a5:09:75:8c:d7:48:f2:62:c6:41:
40:ed:50:24:7a:6d:3a:1c:4f:7a:f8:49:c8:07:9b:6c:2d:dd:
32:fe:3e:b3:25:f8:1d:f0:ff:87:dc:3c:98:4c:cd:bf:e7:db:
ab:a7:c7:40:2f:75:90:8d:51:05:f0:8a:f1:8d:a1:d8:52:2b:
fc:91:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:26:52 2026 by rpki-client