Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: 0WVyoU1V5jIgUuBG9aNtJvYRKgpu4EK+o0LKalvZYa0=
Subject key identifier: 1D:09:16:1F:25:96:11:6C:C4:5D:1D:93:3A:A5:B2:26:5E:C7:82:EB
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019CAD22821E6BC444593136D777479C1B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 147E
Signing time: Mon 02 Mar 2026 06:00:45 +0000
Manifest this update: Mon 02 Mar 2026 06:00:45 +0000
Manifest next update: Tue 03 Mar 2026 06:00:45 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: 2TiKm1gS9NJbEVyH7Z5y3r7iDBopEuGf8v6vPjFiSNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:82:1e:6b:c4:44:59:31:36:d7:77:47:9c:1b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Mar 2 06:00:45 2026 GMT
Not After : Mar 3 06:00:45 2026 GMT
Subject: CN=1d09161f2596116cc45d1d933aa5b2265ec782eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:62:d1:0f:f3:cd:ef:cf:16:6b:57:b3:c3:
8f:fe:a3:dd:77:43:b5:bc:25:0f:54:3b:94:4f:37:
9f:b6:be:e8:9a:7b:b9:fd:32:68:25:28:86:19:f4:
5a:76:45:25:75:d3:f0:1c:46:05:5c:d1:b8:f8:80:
3a:f6:e0:db:60:03:9b:73:42:cc:9a:db:b8:b2:7a:
82:f3:90:c0:9f:bc:a3:61:82:39:39:30:89:6a:90:
07:37:de:9b:0b:fe:27:04:0c:1b:4a:0c:86:e8:ed:
59:a1:f1:35:e9:31:e0:8b:43:ba:5e:4d:81:07:7a:
d4:d4:20:39:a8:93:47:08:29:1b:5b:37:8f:6a:c8:
74:cd:99:15:48:d2:95:7e:39:71:4a:82:2c:1c:ee:
1b:50:8b:d3:d1:5b:bd:79:16:96:72:77:8c:69:27:
1b:c8:b2:1a:64:a5:99:f4:78:9d:2d:9d:0b:03:41:
5d:e4:da:20:ba:9c:7e:c0:6c:49:e1:5d:0c:12:95:
9d:2b:8a:e7:7c:f3:77:d2:34:ba:d7:c9:b2:88:2d:
d4:db:68:2e:75:3e:0e:62:4f:b9:84:59:cd:bc:d8:
11:22:b4:20:32:86:8b:ea:86:56:6e:67:f6:13:e1:
a7:3e:77:ed:a5:30:c3:db:c7:83:4e:d3:64:1d:e3:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:09:16:1F:25:96:11:6C:C4:5D:1D:93:3A:A5:B2:26:5E:C7:82:EB
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:39:7a:d1:27:8f:07:1a:00:46:ec:fd:ca:b0:29:61:3b:
d7:e0:c6:d0:8c:f7:8e:6b:75:d4:99:e5:ae:45:29:d7:28:66:
8c:c3:fa:29:82:b1:fb:f7:05:54:61:6f:f6:eb:cb:7a:b5:e1:
73:f6:4f:d9:36:41:53:40:53:38:31:4f:02:36:2f:cc:17:1d:
03:18:26:48:a4:5d:ab:8c:36:2a:9c:35:22:69:e5:44:7e:7b:
25:fd:ae:e0:30:11:ea:69:d2:41:57:07:2b:c6:f2:6e:9d:bf:
52:fa:09:b8:82:9c:13:d7:4a:d6:98:5c:3e:7a:60:30:09:8d:
e6:b9:00:68:7f:53:31:2c:aa:23:ec:50:f9:19:e9:9f:90:cc:
cb:d3:5d:25:e6:a3:fa:10:0f:8e:9f:76:b9:24:36:c4:47:07:
35:33:7d:07:ce:e6:62:d7:16:b5:39:44:91:69:c7:a6:a9:d0:
0f:8a:e4:70:93:1f:f4:04:b1:11:b9:18:ed:05:45:25:f3:98:
af:85:ae:f2:ab:58:71:6d:24:cb:2f:33:eb:d2:62:b8:fa:7d:
93:92:7e:98:81:b8:83:7a:41:f4:d8:a2:44:e6:fd:a1:db:1b:
42:d9:61:ba:61:fb:f7:4c:61:05:bd:d4:29:0a:74:39:70:1d:
e5:64:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:36 2026 by rpki-client