Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: a2+HUm45jcfJPtqeYVJdATqhWOtdzhJnWJahFZyszJo=
Subject key identifier: 31:86:6A:D3:CF:3A:12:58:64:E2:FD:4C:0E:8D:0F:75:22:45:B3:03
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 01A0CA7DF63C935FEF3ACA85E97BF2D0D8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 08D7
Signing time: Tue 22 Sep 2026 19:00:47 +0000
Manifest this update: Tue 22 Sep 2026 19:00:47 +0000
Manifest next update: Wed 23 Sep 2026 19:00:47 +0000
Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: 1MDQmnYH2holIw9GdQ5fUjox8HAtbbZ4Zh+ZnAkY49M=)
2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:f6:3c:93:5f:ef:3a:ca:85:e9:7b:f2:d0:d8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Sep 22 19:00:47 2026 GMT
Not After : Sep 23 19:00:47 2026 GMT
Subject: CN=31866ad3cf3a125864e2fd4c0e8d0f752245b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:e7:44:94:f0:7e:eb:6c:c9:55:6d:9b:0c:
d0:4a:64:d9:a9:90:5a:00:39:7b:9d:ba:f5:76:bf:
54:14:a8:35:a4:45:ca:de:49:0e:46:e8:2e:1d:80:
94:e8:6e:60:6e:cf:83:03:a3:5b:37:36:be:4a:0c:
b5:2b:41:52:48:aa:5e:da:84:20:56:1b:7e:f8:ed:
59:41:5b:3e:d8:52:4e:d6:cc:d1:d6:28:1d:a1:68:
5c:52:bd:1e:06:1c:7a:e1:40:54:8a:9f:50:7a:9e:
6b:58:06:13:18:25:fa:e5:6a:40:53:99:6d:30:19:
52:29:69:0f:2f:53:bb:56:53:f9:4b:67:24:32:d7:
96:8f:0e:d0:d7:c5:03:67:88:b7:87:23:e7:96:95:
c5:f3:1b:dd:c6:22:e3:28:60:cc:e9:c3:42:f0:13:
14:da:9b:69:2c:49:d1:6f:51:80:6d:ee:af:20:72:
5e:d0:c9:7a:b0:03:3b:a1:44:92:0a:84:5b:71:45:
8f:d4:b3:23:bc:1f:25:bc:de:1d:93:d4:9b:f7:87:
ff:88:ed:0b:7d:53:8a:e3:68:11:d8:c2:d2:9d:92:
14:4e:37:f4:8b:39:60:4e:a6:05:d0:21:3d:df:c8:
85:6b:9a:04:f2:5f:ee:07:ca:7c:ae:65:38:b0:7c:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:6A:D3:CF:3A:12:58:64:E2:FD:4C:0E:8D:0F:75:22:45:B3:03
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:40:33:f2:23:ee:da:37:71:0d:15:3f:69:50:34:30:9e:18:
bf:65:ab:ec:91:26:fd:e1:26:7c:dd:15:b6:49:63:57:18:a7:
b4:16:3f:85:74:99:fa:10:b1:6a:d2:06:a3:04:be:8c:db:dc:
7d:b0:16:8a:e9:0c:1b:e2:6c:9a:bf:62:30:3d:a0:7e:30:bc:
83:e4:e7:98:19:68:45:45:bd:36:d7:8a:b7:c7:77:4a:70:c1:
f6:a8:7c:5f:19:9a:97:04:1a:0b:20:96:c4:35:c9:45:4e:59:
d0:f5:9d:7b:2a:11:67:7b:7b:8c:37:be:c7:58:e7:c6:2a:70:
17:12:44:18:e6:59:33:92:d6:74:64:87:0c:2a:14:ce:8b:b4:
39:e8:f2:42:5c:38:03:6d:74:dc:00:e1:13:a7:3a:34:c8:8e:
72:95:b5:55:23:60:26:fd:8a:5d:e8:8d:dd:fd:74:4a:39:9a:
53:53:bc:99:67:fd:c0:01:5c:33:f1:6f:74:95:e4:8a:f9:ee:
e0:72:8d:1e:9b:65:fc:ab:fa:2e:74:a2:f4:26:8e:9f:7e:a5:
78:78:da:97:7b:d6:64:c4:6b:88:aa:08:d0:c9:1f:71:89:b4:
c4:44:e2:b3:4d:e1:3d:21:2b:53:63:89:fd:3c:70:dd:8c:99:
74:f9:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:55 2026 by rpki-client