Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: lPfScOobVTPXBzDmDP0SeNOPdzlD2ES0ujnGCXqte3E=
Subject key identifier: BC:DE:E2:B6:5D:CF:B6:03:DB:0C:89:7A:FC:25:8B:3F:80:58:19:66
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019D9AABB4BEE41EF56458877AE59C8E1340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 14F9
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: qStHximq3UHLrUaoAmkSzvjSf7ujb8IpEffFV7lMIAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b4:be:e4:1e:f5:64:58:87:7a:e5:9c:8e:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=bcdee2b65dcfb603db0c897afc258b3f80581966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:e3:6c:4d:c2:a8:fb:78:98:6b:10:40:88:
91:eb:5e:6f:fc:9f:a6:d1:25:ae:69:14:90:88:76:
96:be:0f:78:5a:93:d0:09:1b:6b:60:f0:2d:1a:2d:
8b:9c:c3:1e:47:84:a0:d8:ce:eb:d7:c1:26:98:bf:
0a:4b:69:11:60:7f:04:63:37:39:49:56:1d:5d:f5:
84:59:25:e8:17:b7:0f:26:59:fa:a1:6a:37:c7:2c:
56:7e:98:68:65:83:57:9d:b5:26:87:af:ef:25:78:
c4:a5:1b:31:0e:6c:52:7b:c6:85:a0:87:7f:6c:da:
ce:33:a2:75:10:ca:b6:bf:58:7f:f2:5c:c8:e7:7f:
f4:28:ad:a7:c3:e1:8a:fc:93:69:9a:bd:2c:b6:b9:
26:52:be:ef:b9:9d:ce:bc:dd:69:4d:e4:77:df:33:
c8:f5:3c:be:12:85:4c:66:92:e0:99:ed:cd:f2:74:
d6:28:66:9d:5c:4f:89:ee:f9:d2:27:78:5e:a7:74:
8d:0d:c1:46:a7:c0:d0:f6:53:7a:05:98:4d:11:3b:
fe:8d:5c:7d:81:91:bf:3a:e3:fd:76:d9:07:39:b8:
07:9a:07:ea:6b:f5:de:8a:73:f0:d9:3d:70:b9:65:
f9:71:ab:f1:4d:41:c7:c5:8b:fb:8c:47:5a:aa:c7:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:E2:B6:5D:CF:B6:03:DB:0C:89:7A:FC:25:8B:3F:80:58:19:66
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:54:e7:be:8e:f8:cb:78:08:ea:34:38:f7:3b:79:90:77:
8d:ea:51:b8:f3:84:08:28:1c:c3:56:2e:9f:51:2e:0e:6f:7a:
ae:d5:cf:be:f3:5d:23:ac:b8:02:51:92:1e:37:3c:71:e5:90:
61:f8:14:3d:b5:ae:8d:3e:05:81:72:eb:65:80:f4:b1:0c:9d:
83:ef:70:91:be:e4:29:0e:bc:91:34:4e:3c:c3:78:c7:78:c0:
a4:ad:a1:42:71:38:3a:9e:e7:98:0e:7b:11:1d:15:bf:ab:02:
2a:89:ab:b4:65:7f:4d:55:10:4a:56:ae:6c:50:10:a1:a4:11:
33:4b:5e:7d:1a:4f:97:36:5a:42:9a:96:27:f0:29:0a:c9:b2:
8c:70:92:dd:5f:09:76:c3:89:9f:f2:1e:55:b6:05:52:77:6d:
e1:de:ba:3b:18:a0:39:9e:27:14:6b:4c:9b:a8:96:72:c8:40:
5c:7e:bf:3a:8a:02:bb:d3:3c:e7:c9:31:43:71:60:f2:1a:57:
5d:13:fe:27:a2:bf:9f:fe:27:2e:5d:a2:98:31:29:3f:84:37:
99:56:fb:45:7e:50:cd:c4:6b:ec:52:e3:14:be:e8:dd:e5:ad:
4a:63:55:22:6a:36:15:3f:4b:55:e8:cf:c6:1d:12:b8:80:ce:
6d:dc:f8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7S+5B71ZFiHeuWcjhNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm
YzNhZDIwHhcNMjYwNDE3MDkwMDM3WhcNMjYwNDE4MDkwMDM3WjAzMTEwLwYDVQQD
EyhiY2RlZTJiNjVkY2ZiNjAzZGIwYzg5N2FmYzI1OGIzZjgwNTgxOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fnjbE3CqPt4mGsQQIiR615v/J+m
0SWuaRSQiHaWvg94WpPQCRtrYPAtGi2LnMMeR4Sg2M7r18EmmL8KS2kRYH8EYzc5
SVYdXfWEWSXoF7cPJln6oWo3xyxWfphoZYNXnbUmh6/vJXjEpRsxDmxSe8aFoId/
bNrOM6J1EMq2v1h/8lzI53/0KK2nw+GK/JNpmr0strkmUr7vuZ3OvN1pTeR33zPI
9Ty+EoVMZpLgme3N8nTWKGadXE+J7vnSJ3hep3SNDcFGp8DQ9lN6BZhNETv+jVx9
gZG/OuP9dtkHObgHmgfqa/XeinPw2T1wuWX5cavxTUHHxYv7jEdaqsfYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLze4rZdz7YD2wyJevwliz+AWBlmMB8GA1UdIwQY
MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt
ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm
LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxZU576O
+Mt4COo0OPc7eZB3jepRuPOECCgcw1Yun1EuDm96rtXPvvNdI6y4AlGSHjc8ceWQ
YfgUPbWujT4FgXLrZYD0sQydg+9wkb7kKQ68kTROPMN4x3jApK2hQnE4Op7nmA57
ER0Vv6sCKomrtGV/TVUQSlaubFAQoaQRM0tefRpPlzZaQpqWJ/ApCsmyjHCS3V8J
dsOJn/IeVbYFUndt4d66OxigOZ4nFGtMm6iWcshAXH6/OooCu9M858kxQ3Fg8hpX
XRP+J6K/n/4nLl2imDEpP4Q3mVb7RX5QzcRr7FLjFL7o3eWtSmNVImo2FT9LVejP
xh0SuIDObdz4jg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:19 2026 by rpki-client