Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: b/D0ZrAwhKriDiAFsIUCy7swOqF4qeN5UfiOyskGuYE=
Subject key identifier: 0E:2B:79:66:EC:5E:02:33:7A:50:5D:2B:61:10:D5:D0:7E:9C:EB:C5
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 01A0EE1DB24A00C27E17DAA0241A9CD80AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 0385
Signing time: Tue 29 Sep 2026 17:01:58 +0000
Manifest this update: Tue 29 Sep 2026 17:01:58 +0000
Manifest next update: Wed 30 Sep 2026 17:01:58 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: /56t3mwM/7IsXoKS7WpyF8yyvbUaH26r3u1FAHmgBZM=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:b2:4a:00:c2:7e:17:da:a0:24:1a:9c:d8:0a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Sep 29 17:01:58 2026 GMT
Not After : Sep 30 17:01:58 2026 GMT
Subject: CN=0e2b7966ec5e02337a505d2b6110d5d07e9cebc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:5a:f9:4d:40:f8:eb:01:dd:4c:31:aa:b4:
37:4c:44:4f:37:53:71:3b:3b:6f:13:85:66:2e:86:
b4:de:9a:d5:e4:f4:b9:73:5e:9d:34:c6:48:7b:42:
d3:3e:3c:7b:a7:12:ef:52:90:9f:55:24:0b:87:41:
80:00:ba:93:02:6d:2d:6c:ee:34:98:dd:f1:ec:1f:
42:ab:70:87:a4:84:3e:ed:65:f9:f1:2e:f5:cf:c4:
e2:9d:3c:49:71:44:c0:20:0b:f1:45:e2:be:88:05:
d9:3e:7e:7c:2e:47:e0:c3:d6:50:5d:c4:b4:3d:ae:
d9:2a:a5:54:d0:6c:1e:a3:16:cd:58:14:98:cd:59:
3a:50:f4:cc:7c:58:18:6f:41:7d:8e:ac:49:f8:2a:
55:3c:89:a4:de:b0:cb:1b:fe:97:9d:03:1b:6b:38:
f4:3c:c1:4e:f7:d8:9f:b6:47:11:91:3b:94:18:5e:
53:a4:df:29:96:b0:56:df:f2:e1:8d:1b:58:db:13:
be:e6:8d:79:07:d2:62:0f:23:18:13:38:a4:db:f1:
e1:b7:ed:e2:8b:e8:b6:b5:d0:fe:e4:3d:eb:ce:cc:
cf:eb:bd:10:5e:d2:2a:7e:c7:aa:0b:4b:ed:26:0e:
3b:93:62:02:de:98:da:0c:02:ea:03:ba:7e:6e:ab:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2B:79:66:EC:5E:02:33:7A:50:5D:2B:61:10:D5:D0:7E:9C:EB:C5
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:59:3d:74:cc:9a:c6:29:5c:f0:21:54:29:ab:9f:c9:a6:9e:
60:a8:38:29:2c:7c:a7:37:33:84:ea:5b:66:b5:48:e1:44:27:
1d:06:1a:1c:71:03:4e:41:58:bd:69:2e:aa:42:8c:a6:fe:6b:
33:b9:af:76:91:49:14:ec:dd:c4:c5:d6:ce:ca:0d:dc:6a:a3:
5b:3b:6c:9e:c0:95:82:4d:9c:3f:e4:4d:7b:00:e2:53:c2:56:
f3:0e:7e:91:c6:eb:43:20:61:2b:9a:ab:f5:8d:7d:7b:52:16:
94:88:c9:7a:5b:a9:ef:8d:52:16:f7:98:07:d2:0e:82:1d:3f:
8a:e4:dc:2d:53:ca:82:42:bc:e8:f9:51:15:ea:cd:a0:2a:42:
87:3d:92:15:7c:64:bb:e2:4a:02:e0:a0:70:e0:bf:89:51:d2:
8f:11:4d:21:79:de:b6:8f:27:e5:88:eb:b6:e9:c4:17:c2:8b:
0a:8c:23:63:bb:d1:19:94:a9:c0:cc:eb:11:a5:52:35:fe:db:
71:91:bd:65:9c:5c:40:3d:0f:5b:d9:e4:8d:f1:17:2f:6a:d7:
3e:51:7c:d0:9c:61:82:16:e6:f4:59:ed:e3:c8:ad:25:80:b8:
c4:d6:1d:9a:c0:f0:02:f1:25:0a:bf:70:b8:1c:fd:c9:ab:29:
e1:1a:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:14:18 2026 by rpki-client