Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: BbOQ2Nnmcpg8DC1QOdbk8TtJ4m/bUi2oRQ/g5xXIhWM=
Subject key identifier: 8D:C1:60:63:B9:0E:15:B7:ED:89:E5:E3:B1:5C:80:3D:65:E1:0C:F3
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019F129C230ED2CC3B9619A94420312EC761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0FB1
Signing time: Mon 29 Jun 2026 09:00:50 +0000
Manifest this update: Mon 29 Jun 2026 09:00:50 +0000
Manifest next update: Tue 30 Jun 2026 09:00:50 +0000
Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: 7ApZObWpxBJjhsBRqJThG4QHsCgCJNvDhxv74ctenHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:23:0e:d2:cc:3b:96:19:a9:44:20:31:2e:c7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Jun 29 09:00:50 2026 GMT
Not After : Jun 30 09:00:50 2026 GMT
Subject: CN=8dc16063b90e15b7ed89e5e3b15c803d65e10cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:63:11:a8:e6:ab:75:f9:9e:8f:5f:dc:3b:
e3:e9:40:bd:8a:68:65:50:24:6b:9b:27:df:8c:e7:
22:5c:09:4a:13:77:d9:02:eb:30:02:cf:d0:90:9d:
fb:b2:33:2d:d4:c3:df:93:52:4e:91:f3:68:ee:3c:
87:6a:6f:e5:c5:49:55:de:da:59:4c:6b:e1:41:fa:
de:c1:51:ea:3b:58:c7:54:bb:b6:0e:a5:e9:be:30:
87:08:8d:36:0c:1b:89:e8:ba:01:dd:52:b6:0f:2f:
e3:ca:06:eb:92:5c:6e:52:95:22:09:6c:08:27:93:
be:28:5e:a0:7d:42:2c:7f:80:9d:6e:07:ea:24:3c:
bb:3c:9e:f8:22:87:f7:74:ce:a3:0e:1b:30:2c:41:
19:67:2a:11:f8:90:ea:d0:98:24:b6:3c:ea:f8:8c:
70:7e:12:b1:a1:66:93:f1:95:c6:0b:66:29:b1:b1:
5d:86:34:e9:19:7d:e4:3c:85:8f:c3:df:1d:22:93:
58:6c:a6:3b:87:80:e1:c2:47:24:9a:8b:89:87:c5:
aa:e8:f3:49:5e:ba:dc:99:ae:a2:84:b8:1c:91:ee:
3f:72:7e:3c:7d:77:ba:b1:38:b8:34:45:df:3a:f9:
23:ca:4d:41:a7:73:e7:0e:80:97:6d:f1:6d:43:92:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:60:63:B9:0E:15:B7:ED:89:E5:E3:B1:5C:80:3D:65:E1:0C:F3
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:74:76:89:f9:2d:59:be:37:72:8b:20:80:d7:86:a0:26:
39:fb:c5:75:33:e2:3c:9a:4a:d0:32:82:10:4b:d1:d8:08:d5:
a6:5e:e2:3f:79:e2:be:2d:e2:3f:53:34:57:e9:37:a5:27:e0:
e5:82:8f:09:e9:16:d4:c2:10:ea:0f:d5:fe:68:a1:df:07:1e:
b5:94:b8:12:f8:dd:5d:86:59:30:b9:5f:f8:67:b0:99:cf:2b:
63:4d:62:d6:1d:85:b1:2e:8d:ea:18:1e:d2:90:ff:6e:5f:e3:
17:f7:30:50:6a:84:67:6c:c8:68:2f:ee:62:68:4c:76:b6:63:
7f:1d:67:02:3d:58:d3:77:da:9d:4c:9e:c7:63:88:39:a3:5c:
1a:10:03:3f:a5:87:60:ba:e2:e3:b5:5f:6e:99:b3:9d:65:77:
e7:dc:4f:90:7a:6f:db:b4:43:da:76:14:d1:72:b4:dd:22:e7:
df:c6:89:51:e4:e6:49:9e:b9:82:24:a6:42:d6:5e:1a:c2:4c:
11:34:67:66:86:4d:07:a1:8e:c2:67:c1:94:df:55:ab:ff:04:
fd:a2:52:a9:95:9e:ed:bd:a3:3e:63:38:46:01:3e:f4:f6:c7:
f9:76:ac:b7:1f:bd:6f:03:cb:8a:8d:87:c5:12:b1:00:fb:9e:
98:8f:ec:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnCMO0sw7lhmpRCAxLsdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjYwNjI5MDkwMDUwWhcNMjYwNjMwMDkwMDUwWjAzMTEwLwYDVQQD
Eyg4ZGMxNjA2M2I5MGUxNWI3ZWQ4OWU1ZTNiMTVjODAzZDY1ZTEwY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu79jEajmq3X5no9f3Dvj6UC9imhl
UCRrmyffjOciXAlKE3fZAuswAs/QkJ37sjMt1MPfk1JOkfNo7jyHam/lxUlV3tpZ
TGvhQfrewVHqO1jHVLu2DqXpvjCHCI02DBuJ6LoB3VK2Dy/jygbrklxuUpUiCWwI
J5O+KF6gfUIsf4CdbgfqJDy7PJ74Iof3dM6jDhswLEEZZyoR+JDq0Jgktjzq+Ixw
fhKxoWaT8ZXGC2YpsbFdhjTpGX3kPIWPw98dIpNYbKY7h4DhwkckmouJh8Wq6PNJ
Xrrcma6ihLgcke4/cn48fXe6sTi4NEXfOvkjyk1Bp3PnDoCXbfFtQ5K8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3BYGO5DhW37Ynl47FcgD1l4QzzMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyh0don5
LVm+N3KLIIDXhqAmOfvFdTPiPJpK0DKCEEvR2AjVpl7iP3nivi3iP1M0V+k3pSfg
5YKPCekW1MIQ6g/V/mih3wcetZS4EvjdXYZZMLlf+Gewmc8rY01i1h2FsS6N6hge
0pD/bl/jF/cwUGqEZ2zIaC/uYmhMdrZjfx1nAj1Y03fanUyex2OIOaNcGhADP6WH
YLri47VfbpmznWV359xPkHpv27RD2nYU0XK03SLn38aJUeTmSZ65giSmQtZeGsJM
ETRnZoZNB6GOwmfBlN9Vq/8E/aJSqZWe7b2jPmM4RgE+9PbH+Xastx+9bwPLio2H
xRKxAPuemI/sZg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:34 2026 by rpki-client