Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: tBBF8t1PETCsGHVIPRsGDWxIJDA6wp1I5wS3pEYIrnM=
Subject key identifier: EC:A5:3D:F0:B0:A5:67:6E:60:2C:55:30:58:7A:15:4D:F0:0F:B2:F2
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01A120C12F92D97CEF0C66ABFAB67BFCF27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1A97
Signing time: Fri 09 Oct 2026 13:01:33 +0000
Manifest this update: Fri 09 Oct 2026 13:01:33 +0000
Manifest next update: Sat 10 Oct 2026 13:01:33 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: 6GZOXQPAm8cgpiRWN1YTiizRlEqXe3+IWNoGqi1BFnM=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c1:2f:92:d9:7c:ef:0c:66:ab:fa:b6:7b:fc:f2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Oct 9 13:01:33 2026 GMT
Not After : Oct 10 13:01:33 2026 GMT
Subject: CN=eca53df0b0a5676e602c5530587a154df00fb2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:e6:2f:c1:76:9b:99:4e:52:32:fe:be:ea:
8d:cb:a4:ba:00:0f:58:51:d5:a8:9a:99:b3:75:14:
ac:83:b9:fa:c8:89:85:eb:49:2d:6b:a8:52:40:9c:
5d:0b:29:ba:1a:d3:79:19:54:8b:c0:80:f9:f1:f2:
2d:17:b0:a4:8f:a7:4d:a6:c8:c5:38:11:bf:43:36:
e1:e2:e4:7a:e0:bc:4b:37:34:14:bd:00:4f:c4:16:
08:6c:e4:da:a1:32:da:ac:fd:88:1c:60:cb:60:f8:
52:dd:ce:ab:68:13:e0:6d:2e:30:79:c3:fb:d4:1e:
bd:8d:f0:14:1b:96:fa:bb:8a:44:f1:de:9c:93:5f:
35:8a:07:7b:ce:1a:da:da:c4:68:47:31:a1:de:10:
66:0a:03:16:c9:7c:72:72:33:2f:14:87:5f:ab:1a:
e6:ea:60:ae:00:db:f6:7d:03:77:86:67:c6:1d:fc:
61:99:89:e5:84:10:4f:ab:81:a3:34:5a:af:be:20:
7f:07:78:10:1b:c9:d9:53:a7:48:b7:c9:ca:be:93:
62:46:1e:aa:e9:99:58:e4:47:ca:32:e7:44:ca:02:
55:01:e3:cd:c1:d4:80:96:a6:21:cf:7d:04:a8:3d:
22:78:cd:fb:5c:82:3d:2f:39:e4:ae:f9:79:aa:b9:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:3D:F0:B0:A5:67:6E:60:2C:55:30:58:7A:15:4D:F0:0F:B2:F2
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:63:5c:4a:18:26:bb:39:4c:a9:af:3c:46:d5:1c:6b:13:93:
bc:bf:cb:60:2c:9a:fc:74:1a:d1:16:84:36:fb:6e:d5:df:db:
65:34:05:70:31:dd:a2:65:40:41:33:71:7f:d3:f7:b6:ea:53:
49:ce:d2:9d:5b:65:8e:48:77:d7:30:eb:53:52:0a:9c:5a:9d:
a5:e4:0f:0e:0e:ff:bb:40:01:fc:78:7a:10:02:90:5d:80:01:
55:72:db:2f:9c:62:30:e7:55:85:cd:75:27:61:e8:52:6b:e0:
11:c7:bd:47:f8:cc:10:d1:09:eb:6b:b0:9d:b0:1c:99:8c:9b:
7d:5e:86:7d:b8:91:3b:5c:36:c8:d3:56:69:c0:84:55:11:df:
b5:c7:09:9d:98:5b:09:72:8b:77:e4:b7:6d:cc:32:91:59:23:
1a:70:86:b5:72:08:52:19:35:85:d1:1e:28:31:d6:c9:f4:46:
25:97:8a:e3:8f:cd:60:b9:32:81:c5:dd:d7:81:69:1c:b1:7e:
54:f6:a7:97:01:14:b3:5c:ae:7c:80:5a:7b:cb:5d:f9:38:2e:
ef:37:14:4e:51:50:0d:73:8c:a0:f7:10:d4:37:19:65:55:85:
b9:ee:ac:3b:e7:ea:cc:82:0e:7a:de:2d:aa:ce:4c:6d:a1:24:
01:86:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:28:14 2026 by rpki-client