Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: 8NE9+JtiQLGRTK9asNkL+BgpKhgUEz9OTMQr7xt26uQ=
Subject key identifier: E3:7B:62:6C:40:03:9D:A7:94:DA:65:B5:00:6E:BA:9B:2E:71:49:17
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 01A15BC2B0CEDD3B0E5CA3F39CCFD697A2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 10E0
Signing time: Wed 21 Oct 2026 00:00:48 +0000
Manifest this update: Wed 21 Oct 2026 00:00:48 +0000
Manifest next update: Thu 22 Oct 2026 00:00:48 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: vgO8JMljjtS4UnSkJIQIDqb38Yhjcn0z2dDUZ6onJ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:b0:ce:dd:3b:0e:5c:a3:f3:9c:cf:d6:97:a2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Oct 21 00:00:48 2026 GMT
Not After : Oct 22 00:00:48 2026 GMT
Subject: CN=e37b626c40039da794da65b5006eba9b2e714917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:16:0b:53:e3:75:e7:29:7f:50:be:0b:24:
18:9c:61:21:d0:0e:b6:d6:aa:93:63:ad:1f:a9:44:
44:6d:0a:f8:40:ad:45:4d:24:5e:54:7c:88:c7:78:
79:c6:cf:7a:23:6c:8f:00:a9:93:fb:07:d7:93:67:
71:c0:f3:e4:5a:cb:fa:88:cc:fb:7b:01:2c:28:6b:
d1:f6:14:52:78:f3:22:20:2e:a8:d5:08:2e:70:07:
09:8d:a2:1b:30:a8:86:bb:2a:a3:fc:3e:3a:3e:56:
55:b1:03:cb:19:ce:a8:e8:f7:1e:6f:2a:7d:c0:f3:
a6:1e:4e:22:06:1e:27:ad:54:24:b7:cf:9f:14:82:
5a:64:4a:50:79:41:64:0a:0c:75:1f:ad:48:76:3e:
46:f0:2e:88:59:d1:40:84:73:c1:a9:d2:cf:0f:87:
d1:77:a7:82:aa:9d:2f:32:3d:b2:02:2d:6e:38:8f:
46:f3:8b:9c:27:e4:70:ef:e2:ae:b0:3c:f1:6a:c1:
51:7d:70:e1:1a:d6:18:4b:bd:dd:61:08:a8:f4:8e:
50:bc:49:f6:c9:34:45:2b:f6:3e:07:5e:bc:3e:65:
39:02:b7:7b:67:9f:0e:1a:be:35:7a:81:fa:da:cb:
8b:3b:52:85:e0:7e:a8:82:29:e8:2c:f3:0f:9c:c6:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:62:6C:40:03:9D:A7:94:DA:65:B5:00:6E:BA:9B:2E:71:49:17
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:7c:36:bd:41:b6:03:87:b6:71:0d:88:2b:0b:44:d7:4a:
b3:52:d3:74:12:8a:6c:63:9b:e3:c7:17:51:6d:3d:d0:a9:23:
14:0c:59:ab:72:67:b0:fd:0d:51:f7:c2:25:7a:c7:1f:38:ac:
08:ed:c1:61:49:b5:23:47:17:90:14:c5:af:03:a7:5d:aa:dc:
58:f8:6d:e2:d3:80:b1:11:be:6a:11:5a:1c:04:21:d0:42:fb:
19:34:06:0e:79:00:04:f2:91:fc:3d:3b:00:62:56:79:e8:54:
aa:04:50:c8:e6:d8:01:08:b1:1e:a6:5a:f4:98:3d:70:ac:c7:
00:65:9e:f1:a6:64:82:da:6c:40:be:c2:1e:c7:63:e7:f9:5f:
5b:5e:14:0c:75:ff:8a:7d:9d:75:16:76:82:36:45:95:4c:4a:
98:56:4e:3a:91:97:9a:71:9b:ad:88:59:c1:fc:f8:77:08:aa:
15:5f:de:4e:94:bf:c8:7e:99:87:0e:3d:d9:b7:12:74:d6:d5:
d2:b6:d8:79:70:98:a7:8d:bc:b0:e6:74:e3:7b:47:0a:8a:e5:
cb:4b:17:5c:cf:6a:30:a4:45:31:49:bd:84:28:8a:c2:dd:9c:
04:fa:33:ef:70:db:c9:d0:36:4b:fb:8e:74:cf:49:d3:bb:ac:
87:b4:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:24:31 2026 by rpki-client