Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: 4kfw+gYog6ElSl2dIXV8Dlr+YFqg4pBFCxfwKUX9dl0=
Subject key identifier: 2D:D5:B0:7B:97:F3:AB:C6:E4:08:06:96:1B:70:56:E2:25:07:FB:8E
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019CAA21E592C776F71BEEA3CA4F1700552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 06B4
Signing time: Sun 01 Mar 2026 16:01:14 +0000
Manifest this update: Sun 01 Mar 2026 16:01:14 +0000
Manifest next update: Mon 02 Mar 2026 16:01:14 +0000
Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: XTn4YDWOO/7RmSC1CyvtkCW9o1XA5NkPQAF3VVHI+RM=)
2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e5:92:c7:76:f7:1b:ee:a3:ca:4f:17:00:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Mar 1 16:01:14 2026 GMT
Not After : Mar 2 16:01:14 2026 GMT
Subject: CN=2dd5b07b97f3abc6e40806961b7056e22507fb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:f2:d9:f2:f4:bb:9b:79:65:76:70:cf:b3:
9a:05:f8:d7:c7:db:c7:ef:d0:27:7d:0d:65:9a:e7:
ff:69:ea:9d:62:fd:de:1f:00:f7:52:90:20:87:0a:
f2:84:ca:6a:22:4c:87:f5:aa:43:ae:69:8d:b1:44:
f8:e3:d3:5a:64:c8:b8:e8:75:22:dd:04:23:e9:dd:
c2:ee:f4:d7:82:79:ba:6a:de:2e:60:5f:fd:0a:70:
fd:dc:36:34:6d:b0:7f:b4:fe:77:12:e9:83:49:c6:
75:f6:35:9d:69:c7:64:f6:7e:cc:0a:2d:9e:55:16:
88:f9:70:02:8e:af:2f:8d:00:fe:28:dd:59:93:75:
75:03:5a:ab:6c:69:82:c9:51:90:73:95:19:ce:50:
00:c0:1d:dd:2b:b7:b8:61:2d:a4:95:84:0c:5b:d5:
86:05:08:fc:8f:8b:5a:62:65:8b:9a:a3:dd:27:c6:
ce:ec:68:6f:c2:6a:6f:9b:7c:37:3f:48:44:71:2d:
e2:e8:c0:cc:03:b8:89:af:4c:36:42:33:fd:3a:85:
6a:8f:2b:c4:2b:94:8b:fe:a5:8e:15:d5:c4:11:32:
7b:a1:17:08:9e:53:45:2c:9a:fd:90:00:ef:19:54:
48:64:4a:8b:2c:bf:a2:45:80:1a:51:ec:7d:0f:96:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D5:B0:7B:97:F3:AB:C6:E4:08:06:96:1B:70:56:E2:25:07:FB:8E
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:06:bf:d8:97:04:73:8d:01:79:f2:55:e2:6a:10:16:42:63:
35:c3:02:f9:bc:f9:d5:01:93:eb:5c:ac:75:ff:dc:2b:24:ec:
bc:ac:4d:c7:f9:31:8a:6e:f6:53:b4:c4:85:66:29:48:3b:63:
a3:8b:a8:43:13:13:f7:87:44:19:ec:c2:e2:e1:8f:b3:d2:fa:
bc:3a:0c:a2:5c:b6:ea:d6:2c:f6:16:55:c6:5e:fe:97:b5:d2:
70:ca:ff:61:8a:f7:55:4b:c7:e9:ec:d6:0c:4e:93:a1:85:2d:
8f:cb:5f:76:8f:64:21:78:40:e8:41:e0:9a:a8:6f:c8:71:1f:
84:ac:7a:8c:cd:f6:ef:f1:aa:90:20:85:3f:18:b0:e8:07:c8:
5a:90:30:c9:ef:bd:2f:8a:70:07:31:23:36:93:7c:b6:32:f2:
e0:83:49:28:11:4c:e2:97:2f:5e:70:d1:7c:2f:b6:45:bf:c2:
03:13:3c:7b:72:61:7c:c4:d9:4e:f7:5f:73:bb:72:ff:c5:29:
66:0a:70:61:7c:8b:2f:af:5a:b1:f8:e7:bf:7a:e6:d6:c4:ad:
ab:14:ac:0d:48:a1:4b:57:50:ab:3a:b8:9d:04:99:d0:a3:8a:
b1:55:af:1e:47:9c:43:e9:7f:a3:cb:a8:d3:a4:0d:a0:69:82:
d2:1f:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:40 2026 by rpki-client