Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: nExIKkvp543etAK2n+juaHPcan/IqyIk4tDa9dRAr7E=
Subject key identifier: 41:E6:94:28:6D:1C:90:97:1F:C7:9A:26:80:C9:06:13:C0:18:49:73
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 01A000CAA5F4389C451DE7B48AC454181F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 1637
Signing time: Fri 14 Aug 2026 15:01:15 +0000
Manifest this update: Fri 14 Aug 2026 15:01:15 +0000
Manifest next update: Sat 15 Aug 2026 15:01:15 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: akh0nN2qVThpqEUYj4CjW6E7HzPHUwUGz/YJsR9IqrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:a5:f4:38:9c:45:1d:e7:b4:8a:c4:54:18:1f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Aug 14 15:01:15 2026 GMT
Not After : Aug 15 15:01:15 2026 GMT
Subject: CN=41e694286d1c90971fc79a2680c90613c0184973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:b0:9d:97:5f:8a:f5:43:ed:f2:cf:df:12:
79:83:ef:8b:21:ed:88:04:2d:54:bc:57:b8:92:ad:
6c:06:87:f1:00:3d:21:87:6b:c9:90:8c:b1:57:62:
4b:51:a1:80:99:09:c4:c3:a8:57:8f:e3:75:93:54:
47:02:2d:5b:3c:fc:cd:2e:84:81:d8:b2:1c:dc:20:
98:a3:24:22:52:68:76:ac:cf:4b:9e:23:f0:7d:2a:
20:cd:68:4d:e3:0d:2e:16:c7:a8:bb:4c:09:7a:2c:
76:bf:c4:f3:62:0f:2d:e7:13:bb:1d:e9:f3:e2:c2:
0d:a4:ab:92:e6:0d:12:58:f8:90:10:23:f6:b1:52:
ca:6c:3f:55:48:9e:3f:80:2e:77:3d:08:86:19:37:
9f:f9:3d:7b:f9:0d:e1:33:46:1c:1d:8f:d0:89:23:
8b:1e:1b:c8:39:a0:2a:c8:76:21:31:a4:ec:d5:07:
a6:85:a8:7b:aa:bf:41:5c:7b:b0:fc:33:14:38:2d:
b5:9a:ef:7d:72:5b:2a:35:1d:92:be:88:88:97:d2:
3a:23:7a:36:4f:fd:96:e5:86:7c:c4:c4:36:dc:05:
ef:80:d4:3f:c5:5b:67:de:d9:51:f1:d0:84:d2:80:
e8:55:02:1e:11:84:1e:41:5f:89:10:da:a7:71:3e:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:94:28:6D:1C:90:97:1F:C7:9A:26:80:C9:06:13:C0:18:49:73
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:61:2c:5f:bf:22:e8:88:56:c5:ce:de:91:e3:0e:39:8f:76:
6f:56:c0:45:5c:69:05:db:68:12:e4:50:dd:70:f7:f5:23:33:
c6:9f:0f:23:ab:fe:cd:a0:e2:ff:f8:41:ef:e9:65:46:75:0e:
fe:46:27:89:9d:83:4d:8d:69:68:b6:f6:f2:07:2f:77:ac:b1:
9c:16:cb:10:7f:a0:59:d5:4f:11:4c:b0:92:29:7f:4e:dd:ea:
8d:ca:6b:f3:bd:65:12:29:54:f5:9c:18:67:2e:fe:3e:59:44:
9d:2b:ad:95:59:28:aa:e7:85:a1:9b:1f:6e:5f:a0:1e:1d:37:
b9:d6:6f:61:8e:00:16:13:08:61:3f:9d:20:42:fb:b3:e5:75:
bf:69:fb:96:db:f3:87:cc:fc:b8:06:b4:05:5a:c1:52:3a:ae:
41:16:12:86:ac:a7:db:42:b7:cc:d5:dc:b6:10:dd:44:21:f5:
9e:d7:24:e9:d5:34:22:f0:0a:93:4f:27:99:cd:e9:22:a2:b8:
0b:bb:72:27:0e:31:20:3e:44:0d:f4:66:d0:7d:b3:c2:f6:db:
f8:bd:18:4b:bc:e5:c2:fb:c8:27:34:93:d5:c3:b3:87:98:26:
b0:e5:9b:bb:83:ec:b8:5b:e3:c4:2b:a7:d0:d8:67:b0:8c:47:
85:d9:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:55 2026 by rpki-client