Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: vd1eaBsuDp4qXpcxd0H25uMrYweq5X73c0PvW3Lfaos=
Subject key identifier: E9:2A:03:29:0B:38:C9:9A:63:02:C8:DC:7C:43:C8:FC:02:C1:3D:17
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01A0C3D69E8B41FB51664761E56073CB196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0EAE
Signing time: Mon 21 Sep 2026 12:00:17 +0000
Manifest this update: Mon 21 Sep 2026 12:00:17 +0000
Manifest next update: Tue 22 Sep 2026 12:00:17 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: vjOGhpMd1Hlq9m8WtgXMUrVZ15vaatzazq3YIsL+K9c=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:9e:8b:41:fb:51:66:47:61:e5:60:73:cb:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Sep 21 12:00:17 2026 GMT
Not After : Sep 22 12:00:17 2026 GMT
Subject: CN=e92a03290b38c99a6302c8dc7c43c8fc02c13d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:c9:01:9d:f5:52:8d:cd:46:59:4e:20:e8:
88:e7:54:c2:1a:5c:b1:75:e9:21:7f:1a:23:dd:43:
bc:ed:82:87:e7:ca:0a:4e:e7:b2:ed:a0:d1:ea:70:
0a:31:b9:bc:47:5c:20:aa:f6:11:e5:ef:d2:5f:24:
ff:44:4b:cf:55:e7:c7:8f:5f:a1:34:c2:bc:20:b5:
08:97:40:25:a8:0e:90:5b:25:e4:3b:5f:a6:12:66:
d0:07:16:58:4c:96:cb:df:86:da:c8:70:25:c3:e0:
7f:81:7b:16:54:c8:3c:46:9a:47:b9:cc:e8:e4:87:
a7:46:10:fe:44:84:79:e2:9f:58:b5:34:0f:78:cb:
f5:15:89:74:f0:a9:ca:ed:e6:56:e4:8a:af:f6:ca:
37:4b:ab:f5:75:4e:34:63:3d:2c:16:c1:7c:11:25:
c6:b2:50:c4:43:cf:7a:0e:1c:e7:1c:da:c3:33:6a:
3d:cb:75:70:9f:bb:3c:05:30:98:57:42:84:5d:1c:
1e:78:ae:ea:5e:55:fa:f1:fc:87:b9:37:b6:73:06:
f6:20:f3:39:0f:c9:4d:34:a1:54:29:11:01:6f:18:
69:b5:b4:a9:93:84:61:d3:79:30:16:47:3e:0b:26:
fe:5d:e8:d5:7a:9f:ed:d6:15:03:8c:42:67:47:87:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:03:29:0B:38:C9:9A:63:02:C8:DC:7C:43:C8:FC:02:C1:3D:17
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3a:ba:ca:03:bc:a9:4e:bc:87:7c:c2:d0:60:9f:80:a7:6c:
22:f4:e6:78:23:be:19:a7:6a:aa:b4:b3:b9:69:5a:8a:94:4b:
b7:ca:93:29:43:a8:ce:b4:e2:bb:48:18:f0:ee:78:06:83:be:
03:23:2c:f3:71:e6:9b:3c:f4:69:97:22:29:33:be:82:80:04:
13:bb:a8:60:e7:66:51:0c:b2:92:5d:a8:2c:20:89:a8:b0:02:
aa:c0:b5:74:08:79:1d:60:5f:72:74:91:3d:f0:f9:25:b6:42:
b4:c5:d4:1c:5c:99:3b:81:27:be:8b:b8:db:2c:09:97:bc:06:
b0:8d:7f:74:3e:98:cf:65:81:b1:ff:98:2b:e4:2a:97:09:f2:
43:7c:50:d0:11:fe:e8:3b:66:d8:04:62:97:f9:27:69:14:a7:
b5:01:fb:b3:97:a6:5e:72:b1:3b:87:59:eb:c6:9d:ac:67:19:
f2:62:3c:c8:53:55:20:5c:93:cc:dd:10:65:f4:88:34:fa:00:
49:a4:24:83:a0:54:93:80:70:ea:4d:49:9f:bd:38:c5:e3:3a:
b1:88:67:f5:7b:9d:08:a6:1f:ff:b2:9f:bd:30:80:c0:55:c5:
53:91:2b:36:47:86:87:b1:1e:ee:71:f8:22:51:c1:0b:31:17:
4b:e0:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:04 2026 by rpki-client