Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: Q016f8XhkD4F9T3ra0nBlDlEMwW0+OnDHgHbeXvgxI0=
Subject key identifier: D1:FB:30:24:5B:16:65:BB:52:98:9D:5E:9A:A1:6B:13:26:F5:24:3F
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 01A13FA7D1F4DCC05071FFECF509368EC757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 13:02:05 +0000
Manifest this update: Thu 15 Oct 2026 13:02:05 +0000
Manifest next update: Fri 16 Oct 2026 13:02:05 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: NM1MzLU4ljG90tx1ykyo726DbiY0cbGp9ZlNbqR9gTY=)
2: OlMlgs31AIpaAYyvx-pkZgJRnD4.roa (hash: E/uAqkcgJ8DHc0dc0BC15Pxbqo2GjJOGoAJB4FHkYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:d1:f4:dc:c0:50:71:ff:ec:f5:09:36:8e:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Oct 15 13:02:05 2026 GMT
Not After : Oct 16 13:02:05 2026 GMT
Subject: CN=d1fb30245b1665bb52989d5e9aa16b1326f5243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:c6:11:5c:50:c5:8e:bb:10:b0:69:57:a7:
81:61:32:76:11:63:fc:13:b9:fb:20:57:c1:98:54:
04:65:b7:f2:8b:7c:97:1d:55:21:5b:c1:ad:86:ae:
c8:cc:a3:f4:02:2b:1e:39:cc:f7:49:e8:f9:49:2e:
d1:b8:1b:90:7f:23:dd:53:57:81:78:e1:89:a6:21:
3f:15:99:b8:e3:40:86:34:4b:f9:90:5b:10:ad:37:
da:eb:c5:d5:90:1f:01:84:bc:64:5b:87:93:44:e8:
ca:c3:1f:7a:fc:09:91:bb:bb:6f:74:fc:34:ad:e1:
d3:40:45:08:56:a2:1e:8a:84:47:27:97:9e:66:a6:
f2:86:83:76:83:4c:fc:67:00:b3:15:ea:3a:31:31:
d6:9b:7c:d5:e1:50:41:bf:1c:5d:fd:57:36:d9:52:
9c:e0:c4:c9:32:d6:49:cb:06:3f:98:6d:f1:58:45:
e9:ac:6e:e7:5e:89:6f:d8:8a:56:fa:1d:30:e5:40:
21:4a:9c:41:5c:41:e8:1c:91:0b:9e:8c:2d:7c:62:
46:c1:fe:d3:65:c5:e0:ef:2b:d4:7d:42:f9:30:4e:
c6:fc:3c:2d:2a:c6:68:51:69:f7:ca:6a:3d:f8:d3:
47:87:94:db:71:79:4a:52:c9:07:8c:c9:52:3d:3d:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:30:24:5B:16:65:BB:52:98:9D:5E:9A:A1:6B:13:26:F5:24:3F
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c4:5a:0a:25:11:15:7a:a1:05:54:02:9a:13:31:e8:3a:7f:
7f:74:84:da:1e:eb:fd:c9:36:d3:fe:d8:1c:ae:94:a2:0a:5e:
42:69:64:db:6f:0f:62:69:3f:8b:a8:37:44:06:37:4e:4a:e4:
bb:08:49:58:36:9d:0f:5d:16:5b:27:6d:90:49:cd:d5:95:f1:
44:93:78:32:3e:29:c3:e1:2f:ca:fa:39:0a:a1:a3:05:aa:66:
49:9f:58:1c:b2:6f:27:9d:cf:cf:64:36:57:97:bf:53:9d:52:
5f:2b:89:a7:86:57:7c:d3:f6:fc:57:49:a3:19:67:ef:57:0e:
3b:7a:c0:75:e7:6f:f8:54:25:23:49:87:24:43:ad:54:cf:99:
03:66:fb:00:79:8c:78:59:12:d0:15:d3:70:e0:09:cb:45:75:
11:bc:d7:a6:1b:44:d1:de:d3:32:b2:78:c1:88:e7:26:22:db:
fc:82:bc:ee:12:13:b4:e1:fa:70:c0:9c:32:7a:29:2d:19:90:
a2:ac:7b:3a:7c:41:9a:b7:80:a6:3a:a7:81:e4:ce:2f:8a:c9:
18:fa:ca:6c:ad:58:d4:64:7f:db:dd:b2:52:67:65:c5:45:23:
2e:1e:99:ea:44:98:c0:63:52:d2:63:4f:6b:ad:79:ee:c1:91:
0b:7f:82:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p9H03MBQcf/s9Qk2jsdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3
MTczYTIwHhcNMjYxMDE1MTMwMjA1WhcNMjYxMDE2MTMwMjA1WjAzMTEwLwYDVQQD
EyhkMWZiMzAyNDViMTY2NWJiNTI5ODlkNWU5YWExNmIxMzI2ZjUyNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lTGEVxQxY67ELBpV6eBYTJ2EWP8
E7n7IFfBmFQEZbfyi3yXHVUhW8Gthq7IzKP0AiseOcz3Sej5SS7RuBuQfyPdU1eB
eOGJpiE/FZm440CGNEv5kFsQrTfa68XVkB8BhLxkW4eTROjKwx96/AmRu7tvdPw0
reHTQEUIVqIeioRHJ5eeZqbyhoN2g0z8ZwCzFeo6MTHWm3zV4VBBvxxd/Vc22VKc
4MTJMtZJywY/mG3xWEXprG7nXolv2IpW+h0w5UAhSpxBXEHoHJELnowtfGJGwf7T
ZcXg7yvUfUL5ME7G/DwtKsZoUWn3ymo9+NNHh5TbcXlKUskHjMlSPT2OXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH7MCRbFmW7UpidXpqhaxMm9SQ/MB8GA1UdIwQY
MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt
M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw
LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucRaCiUR
FXqhBVQCmhMx6Dp/f3SE2h7r/ck20/7YHK6UogpeQmlk228PYmk/i6g3RAY3Tkrk
uwhJWDadD10WWydtkEnN1ZXxRJN4Mj4pw+Evyvo5CqGjBapmSZ9YHLJvJ53Pz2Q2
V5e/U51SXyuJp4ZXfNP2/FdJoxln71cOO3rAdedv+FQlI0mHJEOtVM+ZA2b7AHmM
eFkS0BXTcOAJy0V1EbzXphtE0d7TMrJ4wYjnJiLb/IK87hITtOH6cMCcMnopLRmQ
oqx7OnxBmreApjqngeTOL4rJGPrKbK1Y1GR/292yUmdlxUUjLh6Z6kSYwGNS0mNP
a6157sGRC3+C7g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:55:05 2026 by rpki-client