Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: AuX6DNgqkaWon7g7CyYkl4YJGETk22/sNZ1D6aNjNGg=
Subject key identifier: DF:9B:1A:92:8F:22:27:71:B9:61:D4:6E:94:DD:18:4E:73:D8:82:CB
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 019CAED9FB083B1E7F2F60E9867D57F82374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 0152
Signing time: Mon 02 Mar 2026 14:00:46 +0000
Manifest this update: Mon 02 Mar 2026 14:00:46 +0000
Manifest next update: Tue 03 Mar 2026 14:00:46 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: v+Yi24VmcAcao9lABtQ3f+mYkXjlijvqP/rapXkLbnM=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:fb:08:3b:1e:7f:2f:60:e9:86:7d:57:f8:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Mar 2 14:00:46 2026 GMT
Not After : Mar 3 14:00:46 2026 GMT
Subject: CN=df9b1a928f222771b961d46e94dd184e73d882cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:2b:5d:67:41:9b:3a:21:0e:3b:01:8b:91:
ba:a6:03:c8:57:67:a8:72:96:af:f7:39:0b:d7:bb:
20:7f:b6:bb:d4:e5:13:c9:52:32:ff:d9:35:4d:f6:
de:ff:f2:8c:7d:ba:93:9d:09:3c:ed:29:58:6e:ad:
4e:6f:1d:62:8e:3d:89:ef:c9:07:25:99:b9:c5:27:
1f:41:da:26:25:fe:24:f1:73:8a:1f:9a:da:4a:bf:
c7:bd:b3:a8:a2:77:a6:2c:ad:5b:e2:67:2c:4d:06:
19:b1:ae:e5:ca:ba:41:7b:a3:0c:75:37:b0:28:60:
c6:98:6d:62:73:0e:9c:3a:17:f3:91:71:9e:4a:c7:
78:4b:a1:62:7e:ca:36:b9:36:68:cc:89:c7:36:35:
12:ca:b2:b6:03:52:86:ef:b0:85:00:57:ef:71:38:
ed:c6:33:f5:2a:ed:cc:cf:af:c1:cb:94:24:a2:e1:
5f:a4:41:ea:8f:ac:ed:1d:e5:b4:61:1f:79:ff:3c:
ef:4a:fa:ad:65:c9:0b:df:d9:dd:73:81:f4:09:43:
d8:b1:2e:43:39:2f:12:fa:3b:96:64:89:53:38:d0:
8d:09:8e:12:28:6c:81:f7:ee:c3:c0:a3:68:ad:9e:
32:39:9f:e2:d3:29:0f:2e:de:0b:9d:df:f4:7c:0e:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9B:1A:92:8F:22:27:71:B9:61:D4:6E:94:DD:18:4E:73:D8:82:CB
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:70:6f:b8:e2:b7:d2:b6:b3:8e:44:b3:60:99:66:eb:30:05:
4e:d3:4c:06:bb:f2:29:92:9f:05:21:ad:26:b0:32:0c:bd:44:
82:e2:45:ae:ca:ef:f1:01:b0:a0:f3:8f:a6:57:e1:3b:48:70:
d4:8e:d6:6f:eb:c1:a9:0b:a0:7e:36:73:6b:0d:7c:f8:35:84:
4b:71:16:06:92:9f:76:d5:55:49:b4:92:b4:ab:09:65:68:16:
cd:53:d2:b6:32:1b:a1:f9:06:b4:2e:f9:4c:e9:ab:60:94:54:
05:f8:e6:03:b0:d1:e2:59:9c:e6:f8:ca:e3:67:ab:52:24:59:
3c:b4:e4:0c:aa:02:81:81:15:45:87:bd:9b:75:ae:52:1f:86:
e8:d0:7e:69:d0:9b:6e:63:de:25:69:f6:81:36:fc:ff:53:9d:
76:60:4a:af:25:08:6e:0b:3a:b9:ba:81:bc:cb:11:33:f5:3f:
46:82:30:28:ac:66:36:3d:f3:5e:9b:4d:70:e2:b6:17:02:9a:
12:2c:38:b0:34:30:13:4b:96:bc:17:5f:92:21:0f:6d:6a:90:
e8:45:22:79:ba:1e:77:ff:2f:a6:48:5b:5f:58:e6:da:5d:49:
b3:82:0d:b1:4e:d7:a7:7a:9b:cd:94:76:02:86:6e:26:97:83:
53:c9:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:32 2026 by rpki-client