Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: hlFy3dd1VY2y3qKmjySf/QImHVQHidpGJsTgC8Mh6Js=
Subject key identifier: 74:1F:3F:CC:AE:19:AB:72:52:07:4D:3D:E0:02:B3:E2:4C:A3:78:14
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 019D382EB03CFE8FF4D1101457DBC651D431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 14C6
Signing time: Sun 29 Mar 2026 06:01:17 +0000
Manifest this update: Sun 29 Mar 2026 06:01:17 +0000
Manifest next update: Mon 30 Mar 2026 06:01:17 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: DSYiqZiwOaBke7ageKjV7gwDjA/xH5cgrsxQ55WQpxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b0:3c:fe:8f:f4:d1:10:14:57:db:c6:51:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Mar 29 06:01:17 2026 GMT
Not After : Mar 30 06:01:17 2026 GMT
Subject: CN=741f3fccae19ab7252074d3de002b3e24ca37814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:08:4f:27:2d:94:15:fe:a9:5c:99:73:bf:
42:2c:6f:15:e8:1f:da:f9:74:fe:1a:4a:15:d3:d2:
d9:6a:e9:e0:4f:00:9f:34:c6:31:9e:a0:85:71:61:
e0:50:09:6b:54:b3:14:b2:90:c1:e3:03:bd:d7:4f:
69:ea:db:f6:69:77:2b:d6:78:ae:58:92:e0:84:39:
3a:24:84:b2:fd:cc:4c:a3:67:78:f9:1f:2b:40:75:
84:ef:f7:e0:2f:1b:61:2c:ca:37:a1:e1:13:f4:47:
c5:27:31:cd:a2:58:c7:d4:2f:6f:08:b3:9e:7e:bb:
02:33:c6:47:7c:57:2d:10:ef:5d:30:14:52:d2:f7:
49:2c:66:3e:9c:d0:41:40:1a:a1:f6:7b:a8:4c:f3:
e1:76:61:4a:63:44:bc:1e:38:00:af:e8:4c:e9:99:
9a:7a:8b:75:e3:8e:f9:75:47:0d:26:81:43:fa:42:
09:a1:4a:6f:a0:b4:81:60:1a:5e:b0:01:39:12:16:
12:58:6b:e7:14:06:c4:cc:10:50:5e:75:8b:f5:0d:
af:65:f8:e4:80:b1:b0:d1:51:74:c4:1e:ed:62:88:
8d:37:c8:63:b3:7c:e4:71:a0:12:5e:f4:85:8a:72:
52:68:f9:de:8f:dc:56:3d:c2:67:93:6c:d3:32:fe:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1F:3F:CC:AE:19:AB:72:52:07:4D:3D:E0:02:B3:E2:4C:A3:78:14
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:da:9b:40:64:3b:35:65:b0:9a:c5:03:78:14:05:e4:ef:
e5:15:31:d4:32:50:b9:5c:ff:f1:4b:85:71:52:cd:d3:c4:3b:
c0:92:2c:1b:b2:eb:cd:b2:ad:24:e7:bf:95:b2:dd:06:47:1b:
7d:67:c1:a9:57:6e:63:ff:ba:ee:6e:17:d3:20:61:24:e1:9e:
cc:17:10:1c:aa:f4:54:8a:fa:99:aa:b9:20:c1:1b:38:a7:10:
eb:6e:a3:0d:9a:58:45:f2:48:7d:52:fc:a8:d8:d0:2e:e9:ba:
4e:dc:88:f4:6f:3a:70:24:df:c2:a4:87:fd:58:a9:dd:a1:c8:
b3:d6:35:67:0e:86:1d:7f:4d:4f:67:ea:a7:7e:21:7f:47:ca:
6f:d0:0d:36:f0:d6:d8:d8:3b:50:33:5f:86:ad:a6:61:2d:0d:
52:9a:ec:a7:5d:b8:77:9d:e6:0a:9f:18:8b:10:26:94:fb:e1:
3a:17:7e:78:25:41:de:91:9a:70:ee:75:73:b6:e4:77:65:40:
92:0f:3c:bc:af:25:67:af:73:8e:fd:8e:b1:7b:67:f7:13:4f:
df:34:40:5b:22:ce:05:8d:ee:ba:21:9b:91:9c:16:18:4a:8f:
4b:4f:18:87:3c:f1:2f:1a:fe:3d:94:6c:d9:7f:aa:e5:80:b0:
ec:5e:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:12 2026 by rpki-client