Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: vl02vp9MBSG+W04/glNRziuMIpEBlyp/5uz3Fcly0Zw=
Subject key identifier: 0B:B2:D3:77:F7:42:4A:E2:1B:C9:30:21:D3:7F:B5:6E:06:7C:81:A7
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 01A11CACCD713FFCF7000B9DA2FB4DC4F86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 16CA
Signing time: Thu 08 Oct 2026 18:00:49 +0000
Manifest this update: Thu 08 Oct 2026 18:00:49 +0000
Manifest next update: Fri 09 Oct 2026 18:00:49 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: 0kRFtHDG6xU92OS1P1Ilkqi4qnACM7XlHzU8XkhtdgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:cd:71:3f:fc:f7:00:0b:9d:a2:fb:4d:c4:f8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Oct 8 18:00:49 2026 GMT
Not After : Oct 9 18:00:49 2026 GMT
Subject: CN=0bb2d377f7424ae21bc93021d37fb56e067c81a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:e9:42:97:5c:ae:19:82:ce:24:e8:d3:66:
50:2c:f4:e2:45:1e:d2:31:7c:e2:50:d4:85:a3:a8:
13:b0:04:a7:3e:1e:73:dd:df:b0:37:19:94:f5:3f:
c0:c6:3b:af:bb:97:c2:80:90:13:5e:47:03:5f:95:
3b:81:7b:5f:44:10:b2:64:b5:ef:22:7e:e1:b0:67:
4b:89:45:d5:3d:28:95:73:f1:57:fc:ba:28:36:9a:
2a:70:7a:94:00:99:2d:71:3e:a4:14:cd:bf:0e:56:
4a:39:96:83:0b:ae:85:dc:2f:d3:17:21:97:00:73:
07:6d:e1:24:70:dd:f7:0b:06:cf:f3:0a:fb:15:34:
ee:49:cf:c9:ef:05:9e:4d:25:06:24:b7:80:12:53:
b1:94:f6:9c:3d:51:f5:e6:22:91:b8:c3:93:d3:e3:
42:ef:12:1d:2f:49:a8:57:cf:1a:8d:07:30:81:cc:
82:5a:96:bd:3d:e9:04:95:c0:ff:4e:dd:e2:88:6a:
c9:47:52:2c:85:17:2c:58:80:1c:f2:67:62:c4:68:
0d:00:5d:92:ae:1c:29:ed:55:19:0d:e9:b0:bf:20:
b1:06:ad:eb:1b:3e:48:87:e2:7f:72:d3:f8:6b:ed:
4b:19:b7:28:84:88:8b:7f:1f:4e:9c:70:1f:de:c5:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B2:D3:77:F7:42:4A:E2:1B:C9:30:21:D3:7F:B5:6E:06:7C:81:A7
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a7:23:a4:12:5c:49:89:17:92:4a:fa:95:d7:87:ba:2f:6d:
73:05:93:ef:7f:ba:70:c9:7b:74:05:c4:0d:88:19:1f:1a:be:
25:d3:97:a6:35:c1:4b:38:3b:45:6f:c5:54:0a:5e:f1:c5:0e:
16:4d:7d:d8:2c:54:ba:12:bc:80:5a:84:d6:b3:bf:04:7e:36:
10:eb:0d:90:e9:0d:59:ed:49:31:f8:de:9f:85:be:99:06:92:
b7:0b:40:66:ce:38:c3:17:30:c3:bd:8d:eb:79:ba:c1:ef:3e:
60:44:39:1e:29:40:76:4f:ee:6c:38:8c:97:d7:c3:60:76:a1:
60:0c:b2:d0:69:df:0a:f4:e6:bd:1d:56:89:f4:a8:51:20:96:
61:80:8f:ee:fd:6f:94:fd:ba:4e:d4:fa:6a:f3:8d:a3:ed:ee:
12:49:48:d2:e4:1f:e8:ff:f2:f9:18:ec:0f:5b:8f:fc:b9:30:
69:9a:c5:15:27:47:9c:79:a5:85:b5:83:96:14:1a:ba:ec:42:
6c:78:96:be:6a:84:ce:91:63:3a:07:5e:61:6c:1f:11:07:ce:
c8:44:21:6d:eb:e6:0a:10:bd:1a:9f:e7:03:c4:e8:3d:30:8a:
3f:b3:a6:a9:17:8e:fc:36:9b:f3:ea:b4:76:fd:51:c3:13:08:
7b:70:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:06:09 2026 by rpki-client