Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: ntfOkhmUCkRWh/JFCyEpU6FvUOHh0IQM7KJFu1cVNLQ=
Subject key identifier: 5E:6E:27:2A:76:7E:23:9B:B5:13:23:82:95:09:8D:76:D2:90:45:2D
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019FA9E28B8B9D3BAB74FABA3EFD37D9D910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 160A
Signing time: Tue 28 Jul 2026 18:00:23 +0000
Manifest this update: Tue 28 Jul 2026 18:00:23 +0000
Manifest next update: Wed 29 Jul 2026 18:00:23 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: TXkCDcFQX6BYgXrivW4XkTSj0xKOdXPv76YL5DyGdDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:8b:8b:9d:3b:ab:74:fa:ba:3e:fd:37:d9:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Jul 28 18:00:23 2026 GMT
Not After : Jul 29 18:00:23 2026 GMT
Subject: CN=5e6e272a767e239bb513238295098d76d290452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:70:fa:bd:15:9f:6f:e9:4d:3d:ad:93:d8:
d7:6d:a4:81:a6:5a:df:74:12:0f:58:f2:54:dc:22:
c2:6c:dc:fc:6e:b9:49:53:40:c6:0b:d6:69:d5:96:
4d:28:e2:c8:a6:da:be:5e:0d:53:95:75:a8:a3:bd:
2c:f6:83:0f:23:78:65:da:62:16:ba:3b:94:64:97:
fe:dc:f0:f5:31:36:81:cb:01:26:f6:f5:2e:d0:79:
16:ce:c5:a4:7f:d8:3e:7f:b5:21:03:bc:f9:15:95:
97:c5:a3:e1:eb:29:14:39:b2:b6:9c:74:8f:c2:3a:
a7:20:aa:43:bb:32:f8:d4:67:18:30:f4:fd:94:a4:
d4:fa:b0:4b:fb:85:db:c6:9e:4f:55:85:76:9a:cf:
53:9e:f7:b8:16:97:85:e2:36:8e:da:9d:58:85:d0:
66:ce:7b:b3:30:6d:7e:82:47:89:16:b9:c0:78:7a:
b6:3d:de:55:ce:bb:d7:02:e8:63:04:cc:cc:6f:81:
b2:31:c1:16:8d:ed:17:d3:b7:e3:a3:6d:5f:3e:e8:
ae:5f:4a:bb:f0:3a:9f:fa:a3:14:9b:29:0a:0f:e0:
13:9a:44:be:20:cd:07:5a:bb:c3:1b:25:95:d0:58:
c4:2d:22:53:4c:87:ea:9c:24:60:29:67:ae:a5:81:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6E:27:2A:76:7E:23:9B:B5:13:23:82:95:09:8D:76:D2:90:45:2D
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0e:1f:1d:13:c2:19:e6:9d:0c:1a:12:c3:42:14:d8:46:60:
c9:9a:d3:bc:31:a0:c1:44:63:9e:74:c6:f8:9e:c4:6b:c5:0a:
4c:66:29:59:b6:e4:ff:ea:5e:1c:e4:0b:b2:a8:83:99:cd:5f:
99:fa:71:88:7e:ef:fc:98:b4:db:95:0c:5e:ad:f2:60:dc:7f:
99:f6:8d:76:9a:67:cd:ae:02:13:3b:73:08:cb:69:fe:7f:fb:
e0:af:7b:67:77:91:41:ee:54:fe:c1:86:22:56:04:7e:ca:b7:
af:39:99:71:ac:d2:71:ba:cf:99:3b:b8:e3:e1:15:ed:5d:f1:
d8:67:06:63:e4:99:97:23:6b:98:c4:e0:e7:ff:d2:16:b3:ca:
7d:26:7a:2b:df:95:e1:01:32:bb:28:30:ba:82:71:61:4a:ec:
62:d5:a3:4e:41:57:39:a4:e9:ed:8a:e3:de:d2:c1:c9:91:f9:
5b:a9:2c:bd:da:c5:c5:e9:df:23:ab:9c:f6:1f:b0:a7:fb:a1:
55:50:fc:2b:00:58:cf:11:ae:80:6a:2c:ae:14:73:ce:48:55:
e2:07:74:aa:12:6c:90:55:af:54:6a:b0:88:03:9f:bd:60:34:
1a:a2:db:8e:71:a5:96:2d:7c:80:6e:be:d1:ed:65:56:42:bf:
38:51:e6:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4ouLnTurdPq6Pv032dkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm
YzNhZDIwHhcNMjYwNzI4MTgwMDIzWhcNMjYwNzI5MTgwMDIzWjAzMTEwLwYDVQQD
Eyg1ZTZlMjcyYTc2N2UyMzliYjUxMzIzODI5NTA5OGQ3NmQyOTA0NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG9w+r0Vn2/pTT2tk9jXbaSBplrf
dBIPWPJU3CLCbNz8brlJU0DGC9Zp1ZZNKOLIptq+Xg1TlXWoo70s9oMPI3hl2mIW
ujuUZJf+3PD1MTaBywEm9vUu0HkWzsWkf9g+f7UhA7z5FZWXxaPh6ykUObK2nHSP
wjqnIKpDuzL41GcYMPT9lKTU+rBL+4Xbxp5PVYV2ms9Tnve4FpeF4jaO2p1YhdBm
znuzMG1+gkeJFrnAeHq2Pd5VzrvXAuhjBMzMb4GyMcEWje0X07fjo21fPuiuX0q7
8Dqf+qMUmykKD+ATmkS+IM0HWrvDGyWV0FjELSJTTIfqnCRgKWeupYFRNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5uJyp2fiObtRMjgpUJjXbSkEUtMB8GA1UdIwQY
MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt
ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm
LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQ4fHRPC
GeadDBoSw0IU2EZgyZrTvDGgwURjnnTG+J7Ea8UKTGYpWbbk/+peHOQLsqiDmc1f
mfpxiH7v/Ji025UMXq3yYNx/mfaNdppnza4CEztzCMtp/n/74K97Z3eRQe5U/sGG
IlYEfsq3rzmZcazScbrPmTu44+EV7V3x2GcGY+SZlyNrmMTg5//SFrPKfSZ6K9+V
4QEyuygwuoJxYUrsYtWjTkFXOaTp7Yrj3tLByZH5W6ksvdrFxenfI6uc9h+wp/uh
VVD8KwBYzxGugGosrhRzzkhV4gd0qhJskFWvVGqwiAOfvWA0GqLbjnGlli18gG6+
0e1lVkK/OFHmbQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:30 2026 by rpki-client