Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: IEgsd000ZzBFieq8ba5LcM58YxGAa7e6/j90FwQ2/M8=
Subject key identifier: 19:C2:2D:61:3A:67:54:2A:D7:1C:40:B4:68:06:D9:99:6A:BB:40:EE
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 019CAAC70AF32E5264F38D6F0B10349F8B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0C8E
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: hD5dhPOLo5xhulE3z2YtvdhouBJxqOW+UqPhlZHE7N8=)
2: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0a:f3:2e:52:64:f3:8d:6f:0b:10:34:9f:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=19c22d613a67542ad71c40b46806d9996abb40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:ea:06:b8:52:14:5b:0c:d9:b4:72:44:d4:
b5:6a:f1:b2:0b:e2:86:dc:5d:3e:06:c7:00:ec:39:
85:45:a5:50:25:af:0a:f9:50:f5:8a:4f:04:e5:b9:
75:2b:c2:2f:92:2a:e1:de:03:a6:16:c1:68:5e:97:
5c:83:91:26:0c:45:4e:1e:9f:13:3f:c7:09:44:a9:
37:f9:23:5b:07:fd:fd:32:92:e0:20:56:45:f7:13:
de:d4:93:4a:55:20:8d:ad:18:31:30:80:71:3d:18:
01:db:65:05:ff:1f:94:65:76:c4:52:2d:04:b9:cd:
97:3c:c9:03:1a:cb:69:9d:18:0c:a7:0d:8d:5e:03:
37:f9:4d:ed:3f:8f:b6:09:02:5f:f5:23:79:62:9a:
d4:ff:0e:19:1f:13:e5:79:01:ee:e3:14:9f:f0:52:
ff:38:71:a7:a3:59:81:e4:9a:0f:99:33:3a:4d:c7:
e9:f7:ce:24:56:b3:95:86:94:46:91:8f:bd:71:ea:
29:d0:68:5d:39:85:01:5c:e8:d7:2a:04:bc:fa:0e:
15:32:5f:85:5e:c8:3f:f2:32:ef:c3:b6:fc:71:5b:
0a:22:51:01:69:be:34:5e:24:57:e2:0f:ff:9b:ad:
a5:d0:3d:68:e6:c3:39:2d:64:c2:00:84:61:a0:4e:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C2:2D:61:3A:67:54:2A:D7:1C:40:B4:68:06:D9:99:6A:BB:40:EE
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dd:28:ea:5c:ea:35:b0:f5:14:57:dc:25:37:59:6b:d3:80:
eb:26:95:13:5a:30:00:93:4d:c2:08:85:74:28:37:0b:e5:c0:
a6:a3:d3:0f:da:9c:51:c6:fc:46:46:e9:fc:9c:4c:88:2a:1e:
95:cb:8e:5b:a2:e2:86:6c:f1:cf:1b:10:eb:50:d8:a4:01:2f:
4c:75:41:b0:ab:7e:5b:9a:9c:53:94:9b:d0:90:01:ac:68:64:
99:96:db:44:b9:ba:f3:c6:49:58:6d:39:b5:8b:4d:76:d7:8a:
ca:65:93:08:bf:cb:85:e5:7e:e3:94:51:15:a3:ce:75:bc:cb:
62:82:e5:03:fb:b3:65:79:a7:ac:5a:1f:d6:56:2f:7e:e0:2f:
a1:65:5c:fd:9e:1b:45:13:63:44:a4:3e:42:09:8e:ee:4b:71:
86:e3:73:04:ef:f2:50:20:94:a9:4c:d2:cb:47:ce:ac:00:d9:
05:ff:7d:98:d2:1f:a0:12:95:eb:0e:0a:ce:c9:8d:23:6c:50:
27:ec:c9:33:29:4e:24:58:41:98:c1:16:be:ce:d4:5b:44:a5:
a5:9d:98:e0:7a:69:ef:be:ac:5c:fe:1b:2a:92:88:af:ab:b9:
90:fc:bc:0b:ed:4a:2a:f8:8f:02:3f:46:84:35:a2:31:c3:68:
41:99:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:40 2026 by rpki-client