Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: +fapUyDcD7+5Y2xciyty6qHAOgT6aBWxgx8PGz+aHpM=
Subject key identifier: B1:39:13:DC:2C:53:44:A8:6E:FE:71:03:1E:5B:D1:5B:55:6A:10:5F
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01A11AF4F4C0DBC4ADB063607E183B8D0BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 10:00:23 +0000
Manifest this update: Thu 08 Oct 2026 10:00:23 +0000
Manifest next update: Fri 09 Oct 2026 10:00:23 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: 8ckfT7YrOEbjVevcHnl5XCsjho1Obt5+AwekY57ppqE=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f4:f4:c0:db:c4:ad:b0:63:60:7e:18:3b:8d:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Oct 8 10:00:23 2026 GMT
Not After : Oct 9 10:00:23 2026 GMT
Subject: CN=b13913dc2c5344a86efe71031e5bd15b556a105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:f5:49:71:d4:0a:f5:47:78:98:a6:f4:d2:
6a:93:20:4b:75:ba:ff:13:65:c6:89:c2:44:c7:b5:
c2:4e:5a:b4:c8:ba:51:c3:fa:87:12:b7:f5:48:c5:
fd:3d:d2:5a:1a:db:74:9c:e1:f1:1b:5b:57:ff:de:
a8:53:23:bc:9c:6f:05:96:41:a0:4a:0c:ce:b0:03:
02:01:c5:12:fd:36:f4:e5:2f:68:8c:33:5d:16:20:
90:3e:1b:36:61:8f:48:02:5c:14:09:50:c8:c0:e4:
82:63:7d:88:dc:42:c3:a1:d3:a4:58:05:5f:04:99:
21:49:86:67:ac:e0:83:11:73:5c:77:e7:34:7d:5a:
cf:9e:40:be:0b:9a:99:96:1e:bd:38:0b:2f:12:75:
8f:04:22:67:09:7f:fa:0b:3d:6a:7a:37:07:a8:69:
b9:b1:96:ff:d2:81:f9:fd:9c:32:d0:60:7d:02:e8:
57:ce:08:9e:3f:a6:25:c4:bd:f2:31:f3:91:55:95:
9e:b9:71:29:dc:b3:cd:4f:57:56:2e:5f:1d:a0:e4:
23:c8:a8:6b:25:13:79:9a:c9:9d:bc:4a:59:49:49:
9c:8a:04:10:73:42:94:c0:b2:41:c2:a6:de:60:8a:
b8:a8:72:03:08:d2:dd:72:c5:4f:bf:6a:86:e9:d5:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:13:DC:2C:53:44:A8:6E:FE:71:03:1E:5B:D1:5B:55:6A:10:5F
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f3:0a:3c:39:45:12:d3:17:bc:bb:f0:db:4b:4c:b8:d6:70:
f5:32:da:c4:b9:3a:b7:e8:33:a7:e4:2c:5d:af:d2:01:2e:35:
63:a9:cb:0e:2b:77:cc:15:8d:2b:75:61:27:38:f5:5a:85:a3:
c5:3a:ff:e6:65:15:ff:a5:fa:c6:d4:a0:a1:d9:f5:96:82:d2:
f4:5b:c8:07:f0:ae:a3:21:10:fb:85:f5:9e:1b:53:8a:e4:d5:
fe:dc:5e:53:85:d0:cb:8b:ee:7c:32:2f:c9:e5:64:9a:09:c4:
1a:b7:a3:ea:78:95:e4:e1:ad:60:6c:35:13:2a:45:30:95:2d:
22:97:11:53:ff:56:b4:48:6a:29:ab:39:12:2c:c8:40:d2:2d:
24:95:2f:6d:e5:f8:5a:82:05:84:e3:91:99:1a:73:8c:42:0b:
ae:c7:fa:bd:4e:0b:4a:4c:5c:43:a1:8f:17:6d:c1:72:b8:47:
0d:2d:80:d9:ea:1d:ff:df:4b:04:cd:b5:0d:f1:84:3c:b0:a0:
ec:6e:44:c9:4d:d6:b5:f7:60:e8:cf:e7:1d:37:2a:8d:69:bd:
8c:83:c9:e8:51:08:3c:11:cb:e3:5e:99:5c:be:4e:4a:9c:4a:
2c:be:ee:39:8d:27:a4:15:e1:11:04:4a:1b:7d:ad:56:39:86:
68:17:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:06:36 2026 by rpki-client