Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: nYtL5CQ1z6qr9cON8gHkgrtxPiVkl/cuIiM3cnFQRvw=
Subject key identifier: C4:A5:F5:7A:77:46:04:F0:A4:CE:01:56:AE:63:92:88:E1:1D:DD:38
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 01A0C5FCA09C736D2C8C02F674EDEC9B6370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 22:01:02 +0000
Manifest this update: Mon 21 Sep 2026 22:01:02 +0000
Manifest next update: Tue 22 Sep 2026 22:01:02 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: x3PWxV8mMKxUHC63mhyu7BdB7sf80wwkG0i08a4RykQ=)
2: OlMlgs31AIpaAYyvx-pkZgJRnD4.roa (hash: E/uAqkcgJ8DHc0dc0BC15Pxbqo2GjJOGoAJB4FHkYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:a0:9c:73:6d:2c:8c:02:f6:74:ed:ec:9b:63:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Sep 21 22:01:02 2026 GMT
Not After : Sep 22 22:01:02 2026 GMT
Subject: CN=c4a5f57a774604f0a4ce0156ae639288e11ddd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:43:8d:68:a3:e0:1b:53:97:5e:50:ac:ec:d5:
8d:8c:13:6e:ff:4b:55:0b:af:b8:9c:62:6a:8e:73:
51:20:de:10:66:09:d6:12:31:64:63:cc:24:fb:db:
2d:00:12:44:b4:e6:19:9d:c4:22:c3:74:2e:d4:72:
dc:f5:f3:96:5c:7c:31:8d:db:c5:fd:26:f7:cc:80:
46:6f:b4:be:c2:d2:f2:21:00:c4:8f:51:b5:8f:22:
1c:7e:90:6f:04:c2:05:12:7d:12:8c:5c:0e:e1:03:
f4:4e:c6:fc:fa:2e:04:33:8b:f2:2a:fa:47:80:33:
d7:1b:d3:cf:eb:8e:d0:ac:ff:b6:95:61:a6:4f:fe:
f8:91:15:5d:3a:14:51:bc:53:6c:ac:f7:8e:70:90:
b2:9e:69:25:11:ca:8f:32:af:3b:5b:12:a2:9d:16:
c1:d6:c9:3b:ed:d4:0d:eb:36:6b:db:fd:08:00:2e:
42:c4:1f:2c:ca:43:04:e5:bf:61:95:8c:ff:18:4a:
d4:55:7c:52:ee:98:e6:a7:88:aa:8b:e9:c4:fc:17:
47:08:9f:fe:96:47:b9:a3:c6:55:df:f5:ac:a5:e9:
89:b9:40:70:6c:32:68:ab:a5:83:c5:c5:3f:13:cb:
4e:10:5f:9b:ea:21:eb:f9:49:66:6d:04:4c:e3:9d:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:F5:7A:77:46:04:F0:A4:CE:01:56:AE:63:92:88:E1:1D:DD:38
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:72:fb:d9:ae:50:d9:60:d9:44:4b:14:bd:38:66:60:f5:3d:
65:8c:4b:b9:55:92:18:bf:cd:d7:1e:3e:cd:fb:be:a0:54:76:
d3:fa:77:ae:38:1a:ea:8f:03:98:27:e4:2e:5c:cc:86:53:d7:
02:93:89:9e:92:30:ec:81:b4:10:4f:31:cc:8c:2b:49:82:69:
ed:9e:ab:74:80:1a:99:f2:62:33:ce:c4:24:01:fe:ee:9b:d7:
0e:6b:ca:ad:1a:41:c8:0c:69:d3:76:f8:76:f4:b8:71:17:e1:
c5:5e:18:1d:c4:d5:23:c0:d4:c7:cd:d2:7c:a2:82:45:aa:d9:
85:e7:59:84:06:83:6c:b2:bf:6e:a9:d9:95:19:87:9f:cb:10:
5d:af:21:8b:9c:55:1e:14:4c:46:48:7d:f5:e0:07:c6:2b:06:
1a:e4:ad:62:8d:32:f8:1a:05:b7:ac:7c:87:87:2d:ad:bc:1f:
a4:3b:c6:d6:d6:a8:39:ba:59:c2:ff:24:98:c4:ea:63:53:fc:
f7:a1:33:7f:ba:7e:0e:42:52:b2:1f:63:ae:f8:bd:55:18:c4:
b3:ad:3d:44:bd:33:d0:55:2f:42:8b:78:f4:36:af:bf:36:e8:
bc:85:87:4a:f0:30:28:e7:92:ae:ab:2e:36:ba:c8:db:be:4c:
6d:ad:7c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/KCcc20sjAL2dO3sm2NwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3
MTczYTIwHhcNMjYwOTIxMjIwMTAyWhcNMjYwOTIyMjIwMTAyWjAzMTEwLwYDVQQD
EyhjNGE1ZjU3YTc3NDYwNGYwYTRjZTAxNTZhZTYzOTI4OGUxMWRkZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkONaKPgG1OXXlCs7NWNjBNu/0tV
C6+4nGJqjnNRIN4QZgnWEjFkY8wk+9stABJEtOYZncQiw3Qu1HLc9fOWXHwxjdvF
/Sb3zIBGb7S+wtLyIQDEj1G1jyIcfpBvBMIFEn0SjFwO4QP0Tsb8+i4EM4vyKvpH
gDPXG9PP647QrP+2lWGmT/74kRVdOhRRvFNsrPeOcJCynmklEcqPMq87WxKinRbB
1sk77dQN6zZr2/0IAC5CxB8sykME5b9hlYz/GErUVXxS7pjmp4iqi+nE/BdHCJ/+
lke5o8ZV3/WspemJuUBwbDJoq6WDxcU/E8tOEF+b6iHr+UlmbQRM4530CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSl9Xp3RgTwpM4BVq5jkojhHd04MB8GA1UdIwQY
MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt
M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw
LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHL72a5Q
2WDZREsUvThmYPU9ZYxLuVWSGL/N1x4+zfu+oFR20/p3rjga6o8DmCfkLlzMhlPX
ApOJnpIw7IG0EE8xzIwrSYJp7Z6rdIAamfJiM87EJAH+7pvXDmvKrRpByAxp03b4
dvS4cRfhxV4YHcTVI8DUx83SfKKCRarZhedZhAaDbLK/bqnZlRmHn8sQXa8hi5xV
HhRMRkh99eAHxisGGuStYo0y+BoFt6x8h4ctrbwfpDvG1taoObpZwv8kmMTqY1P8
96Ezf7p+DkJSsh9jrvi9VRjEs609RL0z0FUvQot49DavvzbovIWHSvAwKOeSrqsu
NrrI275Mba18Cg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:33:48 2026 by rpki-client