Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: AF75UAixssRJzFLolsJwvysAbdsy2pMI4BKG9/yquGY=
Subject key identifier: ED:78:AA:83:51:F3:08:B9:62:7C:91:CC:ED:A3:1B:6D:A5:D9:EA:F0
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 01A13F7000D4D8E1BC500B549F27AD67CC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 16DC
Signing time: Thu 15 Oct 2026 12:01:07 +0000
Manifest this update: Thu 15 Oct 2026 12:01:07 +0000
Manifest next update: Fri 16 Oct 2026 12:01:07 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: o3bKSS/HaC7fofv61C17F9h1Vb01oauTUgy45KOZYio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:00:d4:d8:e1:bc:50:0b:54:9f:27:ad:67:cc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Oct 15 12:01:07 2026 GMT
Not After : Oct 16 12:01:07 2026 GMT
Subject: CN=ed78aa8351f308b9627c91cceda31b6da5d9eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:69:05:f9:da:46:58:9c:52:a7:08:1a:8d:
72:e1:e6:3c:cc:65:ab:e1:64:a9:cf:a5:f4:2a:b1:
ee:e7:6a:a0:e9:56:9c:0d:f4:c5:68:07:75:5d:c0:
c4:37:b1:57:89:99:f8:d9:4e:fa:fc:df:6e:d2:47:
a1:50:c2:29:55:74:57:58:76:8e:1c:d6:ac:4c:e3:
65:3f:0c:8b:37:80:ff:32:f2:91:ac:ff:8d:c1:e1:
70:21:84:45:ab:0c:64:6a:c4:e1:6e:85:67:2d:0c:
40:40:6c:1e:1c:02:08:17:5e:50:36:4b:cd:a0:20:
d6:52:98:1d:27:88:78:60:90:16:28:6d:3a:08:fb:
bc:8d:98:a0:0c:72:c4:47:b2:8f:99:aa:11:37:89:
a3:e4:48:88:b4:9d:c1:96:18:cf:19:57:d2:42:e0:
b4:58:92:66:c8:bb:23:37:db:8d:80:30:0c:8c:c3:
0a:9e:71:b1:be:42:94:ea:fd:73:0d:0d:98:cb:b8:
13:db:65:c2:32:7f:f7:61:6a:1d:cf:0a:7e:ed:bd:
fe:68:a2:cd:64:d5:9c:bb:c9:b3:71:1a:49:09:ef:
cc:b5:89:f7:9a:ed:1c:c8:15:95:c6:32:c4:f5:2f:
30:39:ee:1e:5c:f3:a6:69:3b:f3:70:1a:11:84:c2:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:78:AA:83:51:F3:08:B9:62:7C:91:CC:ED:A3:1B:6D:A5:D9:EA:F0
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:64:96:fe:18:bc:79:37:27:92:2b:ff:e3:27:31:22:3a:99:
cb:42:1f:16:4f:61:58:39:51:66:3b:b0:3d:20:ef:e8:27:51:
c2:f7:d0:64:2c:6b:5b:32:92:31:c6:f2:ae:8b:a0:a2:aa:80:
eb:0b:e8:23:8c:a8:80:1d:d5:05:89:2b:81:7c:f6:e5:54:25:
7b:24:08:66:1f:50:9a:4d:eb:bd:a6:53:77:4e:2a:a8:6e:ff:
8f:54:c2:de:37:48:4f:46:8a:1c:34:03:89:77:e7:af:90:ec:
34:88:94:d7:95:57:29:44:b5:50:a0:76:a6:c0:37:a8:87:d3:
01:90:58:7f:2c:cd:58:85:49:74:92:ef:2a:2e:72:e9:a5:9e:
7a:9b:15:15:a2:c2:13:e4:7d:f4:39:dd:3c:95:bb:4b:bf:a9:
4e:30:62:80:5d:d1:87:b1:1f:4d:9a:b0:63:6b:b2:f5:45:ec:
8c:9e:a7:11:67:fc:e8:57:d7:da:95:18:e9:1f:c5:ab:ab:fb:
ed:70:68:ae:11:dd:7b:5e:72:bc:bc:b6:47:f9:1a:c6:c9:3c:
ce:a2:b8:b3:5a:8e:66:f1:ed:69:7c:0c:0e:c5:0f:c6:73:b2:
8f:ec:ee:d3:07:e9:5a:9b:c0:e2:c5:96:6c:67:78:9a:b8:f7:
36:12:c0:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cADU2OG8UAtUnyetZ8xcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm
YzNhZDIwHhcNMjYxMDE1MTIwMTA3WhcNMjYxMDE2MTIwMTA3WjAzMTEwLwYDVQQD
EyhlZDc4YWE4MzUxZjMwOGI5NjI3YzkxY2NlZGEzMWI2ZGE1ZDllYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusVpBfnaRlicUqcIGo1y4eY8zGWr
4WSpz6X0KrHu52qg6VacDfTFaAd1XcDEN7FXiZn42U76/N9u0kehUMIpVXRXWHaO
HNasTONlPwyLN4D/MvKRrP+NweFwIYRFqwxkasThboVnLQxAQGweHAIIF15QNkvN
oCDWUpgdJ4h4YJAWKG06CPu8jZigDHLER7KPmaoRN4mj5EiItJ3BlhjPGVfSQuC0
WJJmyLsjN9uNgDAMjMMKnnGxvkKU6v1zDQ2Yy7gT22XCMn/3YWodzwp+7b3+aKLN
ZNWcu8mzcRpJCe/MtYn3mu0cyBWVxjLE9S8wOe4eXPOmaTvzcBoRhMLjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO14qoNR8wi5YnyRzO2jG22l2erwMB8GA1UdIwQY
MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt
ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm
LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2SW/hi8
eTcnkiv/4ycxIjqZy0IfFk9hWDlRZjuwPSDv6CdRwvfQZCxrWzKSMcbyrougoqqA
6wvoI4yogB3VBYkrgXz25VQleyQIZh9Qmk3rvaZTd04qqG7/j1TC3jdIT0aKHDQD
iXfnr5DsNIiU15VXKUS1UKB2psA3qIfTAZBYfyzNWIVJdJLvKi5y6aWeepsVFaLC
E+R99DndPJW7S7+pTjBigF3Rh7EfTZqwY2uy9UXsjJ6nEWf86FfX2pUY6R/Fq6v7
7XBorhHde15yvLy2R/kaxsk8zqK4s1qOZvHtaXwMDsUPxnOyj+zu0wfpWpvA4sWW
bGd4mrj3NhLAkQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:49 2026 by rpki-client