Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: hwLg6LHHpgfsqQRbyUmFCS8CvyI4ZiNEtf0AeA5QQvI=
Subject key identifier: 3A:27:54:95:73:21:70:03:DD:C2:63:3C:E5:AE:F3:4A:2E:A6:6E:A9
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01A1DDCBB19FFCEB5350B6FEC4B3E77B8EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0F40
Signing time: Sun 15 Nov 2026 06:01:16 +0000
Manifest this update: Sun 15 Nov 2026 06:01:16 +0000
Manifest next update: Mon 16 Nov 2026 06:01:16 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: 1AS73IYDys6mgIzWCh2Y3hbOPE3Xg4JecxWbeZoHpA4=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:b1:9f:fc:eb:53:50:b6:fe:c4:b3:e7:7b:8e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Nov 15 06:01:16 2026 GMT
Not After : Nov 16 06:01:16 2026 GMT
Subject: CN=3a27549573217003ddc2633ce5aef34a2ea66ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:9c:c1:ea:3a:94:cb:38:61:87:ba:c8:b8:
6b:85:34:3a:d3:20:93:21:86:e3:54:27:b6:80:28:
5c:e3:d7:f0:95:43:72:e2:62:a2:25:01:7b:e8:42:
53:8d:85:ac:a3:f5:22:7d:51:95:53:19:f5:43:80:
cf:90:4b:ce:56:9d:4c:8d:36:f0:b1:d6:0d:7c:3e:
74:7b:5b:d2:77:0a:4d:c5:78:c6:ed:fe:83:e6:29:
4d:50:7d:8a:af:ee:0a:d7:1f:87:9d:4d:4e:72:d6:
bd:ea:21:83:cb:7e:e2:4c:63:a9:4e:bc:e1:bc:74:
29:31:56:af:6d:16:92:77:0c:a3:2b:1e:39:23:00:
67:f5:5d:1d:ee:ca:c5:74:b2:f1:af:03:84:2b:b7:
8b:9a:19:34:34:75:2d:01:ca:32:21:b4:b8:1a:6e:
e0:a0:72:91:53:7e:0b:ce:5c:25:11:18:bf:56:48:
52:53:f6:61:64:3d:5a:ee:d7:3d:14:2d:25:51:dd:
c7:cd:31:98:39:73:3b:f3:1a:13:f1:38:cc:f0:8b:
2f:3d:c5:16:23:e9:e5:59:1c:27:37:7d:67:a4:c7:
ac:7b:2b:62:85:49:2f:81:6a:c9:da:bf:ee:51:ad:
c3:5d:f1:88:f1:af:fb:5d:f9:c4:39:6f:25:05:43:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:54:95:73:21:70:03:DD:C2:63:3C:E5:AE:F3:4A:2E:A6:6E:A9
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f8:5e:e2:e8:d4:c8:22:c7:77:31:8d:d1:c8:23:c1:69:ae:
d2:8c:df:4c:55:eb:a6:f7:c5:cd:3b:44:bf:87:ee:8c:75:13:
9b:28:96:a4:b2:2f:73:bb:b3:a0:60:95:6f:e0:84:d6:37:f3:
36:0e:ee:8c:fe:ef:05:d4:7b:0b:87:0c:5f:e8:45:f6:4c:ab:
3b:6c:97:4e:70:78:75:bf:d4:38:e4:f0:9c:b6:24:63:92:cd:
38:66:60:12:ce:ec:3e:d0:98:36:38:d5:53:6e:fa:09:e4:7c:
28:bf:37:4e:37:39:39:12:09:51:e1:6b:e4:9e:1e:9a:6d:1f:
f5:b3:27:ab:f6:af:2a:69:a4:60:2a:ca:13:3c:38:3a:80:bf:
61:63:f2:5b:58:36:da:fc:d0:8a:3d:db:5b:26:cd:35:af:fd:
d0:78:c4:5b:69:f7:f1:21:63:78:e9:c8:b9:f4:ed:c1:2f:8b:
a8:4a:38:d7:af:e0:66:d6:b8:ff:d2:82:3f:16:16:44:62:3c:
ca:08:55:e5:dc:83:46:4f:38:a2:de:59:71:38:d1:c6:3a:66:
93:50:b2:5a:8b:be:41:25:95:a0:08:35:9c:d5:18:ce:d1:32:
b2:a4:a7:d3:9d:73:1f:c1:ca:d3:c9:9e:96:60:aa:7e:f0:5a:
c1:67:ff:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy7Gf/OtTULb+xLPne47aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj
YmE1ODUwHhcNMjYxMTE1MDYwMTE2WhcNMjYxMTE2MDYwMTE2WjAzMTEwLwYDVQQD
EygzYTI3NTQ5NTczMjE3MDAzZGRjMjYzM2NlNWFlZjM0YTJlYTY2ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmOcweo6lMs4YYe6yLhrhTQ60yCT
IYbjVCe2gChc49fwlUNy4mKiJQF76EJTjYWso/UifVGVUxn1Q4DPkEvOVp1MjTbw
sdYNfD50e1vSdwpNxXjG7f6D5ilNUH2Kr+4K1x+HnU1Octa96iGDy37iTGOpTrzh
vHQpMVavbRaSdwyjKx45IwBn9V0d7srFdLLxrwOEK7eLmhk0NHUtAcoyIbS4Gm7g
oHKRU34LzlwlERi/VkhSU/ZhZD1a7tc9FC0lUd3HzTGYOXM78xoT8TjM8IsvPcUW
I+nlWRwnN31npMeseytihUkvgWrJ2r/uUa3DXfGI8a/7XfnEOW8lBUMLiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDonVJVzIXAD3cJjPOWu80oupm6pMB8GA1UdIwQY
MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct
MDA4YTgwZjZmZjExLzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx
LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvhe4ujU
yCLHdzGN0cgjwWmu0ozfTFXrpvfFzTtEv4fujHUTmyiWpLIvc7uzoGCVb+CE1jfz
Ng7ujP7vBdR7C4cMX+hF9kyrO2yXTnB4db/UOOTwnLYkY5LNOGZgEs7sPtCYNjjV
U276CeR8KL83Tjc5ORIJUeFr5J4emm0f9bMnq/avKmmkYCrKEzw4OoC/YWPyW1g2
2vzQij3bWybNNa/90HjEW2n38SFjeOnIufTtwS+LqEo416/gZta4/9KCPxYWRGI8
yghV5dyDRk84ot5ZcTjRxjpmk1CyWou+QSWVoAg1nNUYztEysqSn051zH8HK08me
lmCqfvBawWf/wg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:27:14 2026 by rpki-client