Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: Q/yizcS75QPKTLq6a+GRu9lgHtkg/Bfj6rFOZKk27Ds=
Subject key identifier: CC:7D:87:EB:4A:28:05:22:D7:48:4B:F5:99:C7:05:19:86:D9:E6:C4
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019D3789626A305FD3C41F03D72A8CE145A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0EBB
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: 5AXDg1t8S6qCWiIkDAy7jZ9Z9e1HKnMQloAAoFFgNBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:62:6a:30:5f:d3:c4:1f:03:d7:2a:8c:e1:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=cc7d87eb4a280522d7484bf599c7051986d9e6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:9c:25:16:5c:10:08:87:af:a8:10:a9:52:
67:69:ba:26:92:92:dd:4a:29:ec:e5:e6:3d:41:9e:
17:6b:9c:19:68:3d:57:52:f5:e7:5b:5b:eb:9a:23:
45:62:b4:78:c4:94:e0:8e:26:0b:a7:36:e4:a7:2c:
3d:0c:a3:c3:c1:a9:dd:67:0f:64:d7:30:28:94:43:
a9:c8:16:18:f5:c8:8e:0f:f8:57:29:02:34:d7:5b:
c2:82:a8:61:6c:54:8c:44:c1:82:df:a2:59:06:23:
e7:5d:dd:7c:a7:39:a1:d6:54:80:32:06:38:a0:5f:
13:07:55:50:62:e2:86:00:0a:98:b0:3e:a5:9e:58:
6c:25:04:47:8c:2d:c2:ed:ca:42:e5:75:6e:f7:bb:
9f:9c:b6:cf:e1:15:21:08:67:a7:94:58:4c:d7:ed:
01:95:01:e2:a2:ad:1d:94:19:ad:09:f7:37:69:f4:
e5:75:04:cd:27:8a:cc:7b:39:4a:a3:53:00:a4:a4:
fe:59:83:86:55:0e:7d:da:45:2d:02:39:63:50:01:
54:25:77:22:09:17:68:60:8b:18:0d:9f:bc:eb:18:
4b:41:b9:6b:9b:4b:f0:7a:bf:14:48:31:0e:11:bf:
c1:e1:a1:2b:00:6a:93:06:66:fe:59:34:9d:8e:59:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:87:EB:4A:28:05:22:D7:48:4B:F5:99:C7:05:19:86:D9:E6:C4
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:b7:72:54:5b:22:1a:81:38:fa:ba:d5:14:91:b2:ba:13:
e8:10:a4:56:3f:b2:9e:9c:ac:ee:2c:51:ae:31:df:92:73:b9:
d3:6b:67:4e:06:82:69:02:e2:ac:6a:55:72:f9:dd:ef:b5:d5:
e2:07:8e:7d:71:09:a5:3e:6f:76:08:d7:e2:e7:d4:38:c0:40:
9c:d4:b5:a6:3d:19:07:f9:52:e7:ca:e1:38:e1:31:7f:e3:6c:
10:f2:ad:62:45:1b:ea:ed:d3:99:2e:b3:1a:6e:8d:67:dc:61:
86:bb:90:19:9e:a5:ed:ed:10:7c:0e:32:8b:ce:0d:c0:21:48:
71:53:7a:68:a7:74:38:70:21:19:83:36:2e:5f:40:06:94:70:
a8:9b:b3:0d:e6:93:79:05:59:c4:3d:02:95:bb:73:a5:cd:7d:
45:78:a1:d3:e9:9c:ae:8a:07:40:49:55:2d:52:b8:a0:19:22:
08:80:44:25:c4:44:ca:1d:77:34:88:05:9e:77:a6:21:be:f1:
fd:2e:96:fc:12:13:2d:c1:bc:52:51:1e:5b:e7:4b:8f:1f:96:
67:64:e4:34:37:17:8a:2e:ac:52:50:30:fb:2e:5b:d8:f2:81:
84:4f:3b:00:16:6a:5b:da:56:b3:e4:d5:9c:19:7a:a3:b2:63:
a6:2b:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:41 2026 by rpki-client