Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: OxmZo+MKdDjWUMLg1VDoLjKFYWBvi0lq9qJU58bj4/A=
Subject key identifier: 48:0C:81:F6:E0:1E:12:4B:9C:69:41:A3:96:C8:8B:E8:21:EF:B3:F4
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019CAB6B8639D04B025C3177EA44CBFB5661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: K4WDBF4ruKWLncpY0FO8DKnO0NoNyEQ9QFQkB4i1VdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:86:39:d0:4b:02:5c:31:77:ea:44:cb:fb:56:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=480c81f6e01e124b9c6941a396c88be821efb3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:dc:c2:ad:ea:3c:50:fe:aa:49:e6:be:f5:
e0:5e:5f:de:38:e7:16:3e:43:fc:df:26:13:40:79:
c0:b8:e6:cc:be:18:5c:c1:1b:43:f0:cb:98:ec:3e:
9c:89:b0:02:31:55:1a:6b:8f:ef:d4:d9:9e:10:d5:
19:ad:7a:a4:90:3a:92:fe:90:58:2a:20:29:46:b8:
1e:c9:c0:5f:7b:70:ff:6f:cc:e5:3d:07:7a:cc:65:
d7:a8:93:76:95:11:6a:0c:8a:47:b5:54:dd:a2:32:
50:64:52:3f:ad:20:81:48:1b:c6:37:b3:13:18:00:
8c:7e:ee:8f:bd:fc:29:5d:c9:46:57:80:38:a0:53:
5f:69:5a:ee:f0:84:27:46:f3:d1:05:6b:45:bf:2d:
e9:71:4e:58:32:33:c5:36:38:99:44:f2:12:a8:46:
98:f4:7b:12:5d:86:4a:cc:0a:76:27:d3:66:48:ef:
45:fe:1a:6e:26:77:89:4d:b2:b2:ff:44:ab:49:3c:
21:75:16:d8:3d:30:be:3f:e2:00:a0:2e:61:de:aa:
6a:a8:31:3f:8a:bf:0f:5b:8e:50:61:13:10:e1:b9:
90:02:03:07:cc:97:5b:de:5c:e2:8f:c7:40:f3:06:
f5:53:cc:00:d0:af:bd:f5:55:d5:9e:5d:04:c8:94:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:81:F6:E0:1E:12:4B:9C:69:41:A3:96:C8:8B:E8:21:EF:B3:F4
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:45:c7:f7:31:f1:9e:5a:d1:04:2f:a4:af:87:5b:a3:6e:
62:c7:49:65:fc:d1:c6:76:8d:1d:5d:b1:99:20:98:02:5a:fb:
06:5f:d4:4a:7b:7e:ca:ea:ba:7b:3f:33:ec:62:14:e8:8e:4b:
57:95:f8:dd:6c:2c:09:52:2a:3f:0a:8d:e5:eb:44:63:cd:78:
05:41:a5:7f:10:f9:d4:d4:5b:58:c4:27:71:5d:22:33:7e:51:
2a:ab:cd:46:67:d1:3c:a6:87:c8:13:65:c1:ed:15:65:76:b3:
85:ab:e3:df:1b:56:22:45:64:38:6a:dc:2c:15:03:3b:c0:ff:
7e:3d:b0:47:b0:1a:87:ae:82:d2:11:e4:74:93:5a:3b:ca:ab:
fd:89:5e:72:2c:4e:6a:7b:f8:80:85:3e:28:84:c4:56:8a:d8:
f9:6c:1b:26:15:c8:26:74:b8:76:a6:25:67:a3:22:d1:99:6c:
c8:fb:32:03:c0:ef:01:25:4a:6d:f2:f1:e8:62:70:9f:74:f3:
6a:d8:b8:02:89:81:ad:94:f6:df:35:52:e2:c2:9b:d4:0a:44:
24:63:71:0a:a9:f3:bc:9b:f4:6c:32:0a:80:2f:6b:bf:08:ec:
d2:38:f4:f4:ee:ea:d9:a9:09:4d:24:e2:63:09:49:3e:85:bd:
9a:77:0f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4Y50EsCXDF36kTL+1ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3
MTczYTIwHhcNMjYwMzAxMjIwMTE2WhcNMjYwMzAyMjIwMTE2WjAzMTEwLwYDVQQD
Eyg0ODBjODFmNmUwMWUxMjRiOWM2OTQxYTM5NmM4OGJlODIxZWZiM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNvcwq3qPFD+qknmvvXgXl/eOOcW
PkP83yYTQHnAuObMvhhcwRtD8MuY7D6cibACMVUaa4/v1NmeENUZrXqkkDqS/pBY
KiApRrgeycBfe3D/b8zlPQd6zGXXqJN2lRFqDIpHtVTdojJQZFI/rSCBSBvGN7MT
GACMfu6PvfwpXclGV4A4oFNfaVru8IQnRvPRBWtFvy3pcU5YMjPFNjiZRPISqEaY
9HsSXYZKzAp2J9NmSO9F/hpuJneJTbKy/0SrSTwhdRbYPTC+P+IAoC5h3qpqqDE/
ir8PW45QYRMQ4bmQAgMHzJdb3lzij8dA8wb1U8wA0K+99VXVnl0EyJQvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgMgfbgHhJLnGlBo5bIi+gh77P0MB8GA1UdIwQY
MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt
M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw
LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmJFx/cx
8Z5a0QQvpK+HW6NuYsdJZfzRxnaNHV2xmSCYAlr7Bl/USnt+yuq6ez8z7GIU6I5L
V5X43WwsCVIqPwqN5etEY814BUGlfxD51NRbWMQncV0iM35RKqvNRmfRPKaHyBNl
we0VZXazhavj3xtWIkVkOGrcLBUDO8D/fj2wR7Aah66C0hHkdJNaO8qr/YlecixO
anv4gIU+KITEVorY+WwbJhXIJnS4dqYlZ6Mi0ZlsyPsyA8DvASVKbfLx6GJwn3Tz
ati4AomBrZT23zVS4sKb1ApEJGNxCqnzvJv0bDIKgC9rvwjs0jj09O7q2akJTSTi
YwlJPoW9mncPgw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:19 2026 by rpki-client