Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: znSdgXbT085JSXtcsJF56a5zCVPonXkyHltpf8sl0yg=
Subject key identifier: 21:93:97:13:48:1E:DF:7F:BA:74:18:07:72:4E:E9:9A:8D:F4:AD:92
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 01A0EC2F4A163732477501E274BADB813424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 0384
Signing time: Tue 29 Sep 2026 08:01:57 +0000
Manifest this update: Tue 29 Sep 2026 08:01:57 +0000
Manifest next update: Wed 30 Sep 2026 08:01:57 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: BXRF2Z9oEviOyh/Q/o3SBc+JHNfiNEN/O2c+zs1FIfk=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:4a:16:37:32:47:75:01:e2:74:ba:db:81:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Sep 29 08:01:57 2026 GMT
Not After : Sep 30 08:01:57 2026 GMT
Subject: CN=21939713481edf7fba741807724ee99a8df4ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:00:b2:f0:b1:72:80:7f:ea:b2:04:d0:ab:
18:9e:c4:88:ff:ae:ef:14:bb:46:ec:d4:41:fc:32:
e3:8a:05:26:31:a1:37:3e:71:87:e2:8e:46:7c:af:
d7:9b:6c:fc:e9:19:08:3c:01:aa:b9:3d:57:59:c2:
72:ed:5c:11:73:ec:97:f2:fb:81:e6:5b:6f:fb:a6:
ad:40:91:25:04:01:3c:ad:82:d4:6a:de:c7:54:eb:
02:8e:a1:b9:33:0e:c8:b8:ac:55:e0:d6:31:12:fb:
fe:1c:dc:cb:66:55:d3:b1:79:5a:e8:c2:6e:04:61:
d3:cd:6a:c2:6e:b0:19:92:79:21:e1:8d:94:0b:9b:
8b:d2:28:eb:6a:d7:99:43:4d:f4:25:26:80:b7:f1:
f4:9f:5f:d7:37:64:18:0f:31:16:0f:a2:4e:ab:2e:
c3:d9:78:0c:0c:c1:f2:48:cb:67:fd:96:9d:83:d4:
51:ad:b9:93:78:b0:6e:70:18:33:13:d5:e2:70:9b:
e0:21:6c:42:34:20:d3:ae:91:bb:5d:76:61:57:d0:
d4:13:da:a2:e7:2b:86:e9:b8:4f:a5:61:ba:e4:71:
c4:c3:d8:ae:c0:37:62:1f:01:f8:f2:57:bb:da:39:
75:14:61:57:8b:20:c3:62:b4:80:c4:1d:a8:69:d1:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:97:13:48:1E:DF:7F:BA:74:18:07:72:4E:E9:9A:8D:F4:AD:92
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7f:44:b0:62:28:f7:55:5d:3b:46:a1:e5:51:3d:1f:84:3b:
84:27:4e:6c:6d:d6:f0:c0:7f:1d:b8:7e:07:4e:56:99:8c:26:
da:a8:e2:af:22:a9:fb:f6:78:1e:da:83:25:70:b6:e0:19:34:
a9:29:cf:69:8b:f9:8e:fb:77:91:41:74:56:8d:db:34:55:3e:
f4:59:4b:5f:cb:c2:34:71:7d:51:23:6d:d5:13:51:ba:37:0d:
90:06:c9:83:5c:80:93:4c:f9:d8:7d:1f:70:24:fb:43:b4:da:
cd:da:cc:c8:73:b7:3c:18:ec:2f:18:22:12:2a:00:de:1d:98:
14:62:69:fc:d0:78:e4:e0:91:86:da:a6:c3:00:26:bb:de:c4:
9b:2f:62:a2:91:45:80:35:d1:62:12:75:1d:91:cf:b7:ac:96:
1f:85:0e:9a:07:8a:09:db:c5:d5:51:fc:7a:b2:17:3b:bb:66:
03:f2:98:02:16:9f:1f:23:85:c8:bb:a6:2b:b3:81:57:93:44:
5a:24:94:30:54:e1:f5:e8:2c:35:cc:d1:6b:44:e2:90:60:7f:
8f:c8:ed:4f:ed:66:cc:ee:a4:64:f8:02:fa:d5:90:d7:9a:04:
6a:26:d9:8c:b5:0a:06:87:4c:c7:63:a9:f4:20:63:20:be:af:
9f:fd:76:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsL0oWNzJHdQHidLrbgTQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz
ZDZiOTEwHhcNMjYwOTI5MDgwMTU3WhcNMjYwOTMwMDgwMTU3WjAzMTEwLwYDVQQD
EygyMTkzOTcxMzQ4MWVkZjdmYmE3NDE4MDc3MjRlZTk5YThkZjRhZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBkAsvCxcoB/6rIE0KsYnsSI/67v
FLtG7NRB/DLjigUmMaE3PnGH4o5GfK/Xm2z86RkIPAGquT1XWcJy7VwRc+yX8vuB
5ltv+6atQJElBAE8rYLUat7HVOsCjqG5Mw7IuKxV4NYxEvv+HNzLZlXTsXla6MJu
BGHTzWrCbrAZknkh4Y2UC5uL0ijrateZQ030JSaAt/H0n1/XN2QYDzEWD6JOqy7D
2XgMDMHySMtn/Zadg9RRrbmTeLBucBgzE9XicJvgIWxCNCDTrpG7XXZhV9DUE9qi
5yuG6bhPpWG65HHEw9iuwDdiHwH48le72jl1FGFXiyDDYrSAxB2oadHgnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGTlxNIHt9/unQYB3JO6ZqN9K2SMB8GA1UdIwQY
MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt
ZWNkNjcxMjgyYzFmLzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm
LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin9EsGIo
91VdO0ah5VE9H4Q7hCdObG3W8MB/Hbh+B05WmYwm2qjiryKp+/Z4HtqDJXC24Bk0
qSnPaYv5jvt3kUF0Vo3bNFU+9FlLX8vCNHF9USNt1RNRujcNkAbJg1yAk0z52H0f
cCT7Q7TazdrMyHO3PBjsLxgiEioA3h2YFGJp/NB45OCRhtqmwwAmu97Emy9iopFF
gDXRYhJ1HZHPt6yWH4UOmgeKCdvF1VH8erIXO7tmA/KYAhafHyOFyLumK7OBV5NE
WiSUMFTh9egsNczRa0TikGB/j8jtT+1mzO6kZPgC+tWQ15oEaibZjLUKBodMx2Op
9CBjIL6vn/123w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:43:06 2026 by rpki-client