Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: 06aLXbwNF+ZmgNrwK8aVil/9S4HLxd9Jk3KY3PAqfd8=
Subject key identifier: 99:9A:E0:AE:41:15:06:ED:C6:04:90:E2:54:24:CA:B8:20:65:9A:AA
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 019FABD1460085E71EBB213152C48408DE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0E1D
Signing time: Wed 29 Jul 2026 03:00:46 +0000
Manifest this update: Wed 29 Jul 2026 03:00:46 +0000
Manifest next update: Thu 30 Jul 2026 03:00:46 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: v1fqjvF7RAAb5xi5IpvWR0V8IPVPY7QYahgUYUAK8r4=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:46:00:85:e7:1e:bb:21:31:52:c4:84:08:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Jul 29 03:00:46 2026 GMT
Not After : Jul 30 03:00:46 2026 GMT
Subject: CN=999ae0ae411506edc60490e25424cab820659aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:8c:3e:24:97:52:e3:64:ac:c5:01:9b:ed:
cb:57:eb:60:ac:55:16:cf:f7:c2:6a:ba:a7:39:46:
07:df:27:36:a3:69:f3:df:f4:1c:b4:49:86:9b:05:
6d:62:db:94:75:c3:ff:28:87:6e:17:c3:c9:8b:a0:
96:88:10:f8:ae:8d:ca:de:98:3d:4e:a1:6c:39:d8:
a9:4a:a1:1a:47:54:34:44:ad:59:a8:e7:bf:6e:53:
62:ea:2a:54:73:a4:73:4d:54:98:dc:01:88:62:7f:
10:69:06:37:c5:84:8a:35:97:31:75:cd:65:2e:73:
9c:c9:72:1a:11:f4:d8:f0:64:a9:50:76:65:cb:97:
e4:6b:6a:2e:4a:7f:16:9a:00:f0:74:0f:0f:8c:78:
19:2e:44:a3:f5:9c:05:18:17:8f:1e:ef:44:c4:8a:
9b:2a:08:10:53:45:25:18:bd:ed:f8:ac:8a:ba:5a:
78:ea:7b:55:ec:2b:1f:2d:b6:b0:70:e7:9f:8c:de:
f8:f9:9c:73:b3:74:80:30:03:ff:3e:5f:e0:64:a9:
a5:4f:85:d5:e2:6d:a4:a7:e4:78:2a:12:2a:d2:57:
eb:9b:bc:28:d0:a8:d9:66:df:9c:78:8d:dd:85:57:
5c:9e:ae:50:bd:51:03:73:dd:37:18:24:16:79:66:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:E0:AE:41:15:06:ED:C6:04:90:E2:54:24:CA:B8:20:65:9A:AA
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fa:0f:2b:b7:01:44:dd:06:5f:c2:fb:ab:63:ae:79:40:3b:
9c:3d:fc:b4:53:c2:c5:f4:21:74:c4:5d:f3:59:b6:82:de:99:
61:17:b4:c6:96:82:42:61:78:00:77:8c:f1:40:4e:22:58:f2:
bf:80:db:73:f0:c4:e7:84:dc:f0:3c:35:bd:59:26:fd:c8:d9:
a5:5a:62:5f:89:e9:40:40:eb:fa:66:ed:e2:28:3e:6b:f6:05:
ce:75:6d:c9:4d:46:a9:64:81:7f:0a:28:01:b4:2d:08:ae:ca:
46:42:f1:37:98:19:6c:c8:90:69:ca:b9:b9:68:ec:fa:32:4f:
f1:be:e7:a0:cf:db:a5:5c:6b:49:f7:d2:cd:34:33:03:a5:58:
b5:a8:1e:02:82:d3:eb:7e:29:ff:47:f9:90:92:78:5e:9b:96:
ac:60:2c:2c:71:8a:95:6e:cd:29:4d:f6:3c:9c:0e:f8:78:7a:
47:17:ae:fe:2e:a2:4e:b4:75:b0:1d:34:60:7e:52:72:6d:c6:
67:6c:13:5c:f1:bf:1a:a5:a5:ff:e6:99:6a:78:b3:c8:e3:90:
ae:2f:66:4a:ba:35:c2:95:ad:4d:37:f3:82:c9:e7:99:e0:b1:
6d:3e:ec:2a:7f:1a:02:e6:dc:4f:a2:65:9c:79:2e:87:ba:47:
4c:b7:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:23 2026 by rpki-client