
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft
File: arsX3XvH8gmcVO73hn2fOaeSk4Q.mft (raw, json)
Hash identifier: r9i7+97YpM7J+rvWJMnJCWzLvm99nbDUHk+2OT52cnI=
Subject key identifier: 54:84:76:2B:3B:94:29:12:38:DE:30:7D:DD:E4:91:87:F2:10:D1:DC
Authority key identifier: 6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84
Certificate issuer: /CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384
Certificate serial: 019D37897B8ACC5824F4E09B16498D06EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft
Manifest number: 0114
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: arsX3XvH8gmcVO73hn2fOaeSk4Q.crl (hash: yDM5v63mhYRXWeIoGKwvAzEZMwZ+e5Z09Shr27NdAec=)
2: vbN_eCvKwWT_rMGE4kvqQZz1flc.roa (hash: CqWChSxKkOBoTByukgK5hHqgGj4r+oDXaXQX8ugmTrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7b:8a:cc:58:24:f4:e0:9b:16:49:8d:06:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=5484762b3b94291238de307ddde49187f210d1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:08:c7:19:6d:81:9e:c9:71:fd:ec:36:7c:
f9:f8:3e:ef:72:32:2b:ff:94:01:3f:a9:35:54:63:
e3:b8:3a:2e:ba:18:f6:59:a2:d9:f3:d6:ee:1e:b2:
ad:88:88:ff:51:23:45:26:de:b9:45:d7:e0:96:7f:
7e:ab:b7:48:1f:67:4f:a5:54:02:50:41:d3:64:a4:
71:eb:de:5a:41:ad:4c:4f:f7:43:d3:1e:d4:4b:5c:
e9:94:b4:d9:43:6a:98:89:e5:1d:99:d9:9b:cd:56:
4c:ee:ee:1e:ac:fb:5a:42:e6:fb:95:2a:57:c1:57:
5e:f9:fe:fe:49:52:0a:e8:ba:82:10:d5:8f:c9:7c:
ec:cd:18:a7:ec:5b:a7:1b:bc:35:26:28:d0:7d:a5:
5f:b2:e3:66:c9:1e:fd:77:2e:32:6d:7a:fd:7f:a3:
96:a2:62:34:d1:23:60:6f:25:8a:bb:c1:08:03:42:
a0:c6:8b:71:f0:60:b4:9b:49:2d:7d:5d:53:c9:c0:
17:2b:07:5f:53:1f:04:5e:c3:14:10:e6:4f:52:5a:
80:5b:0c:5c:bf:c9:3d:63:48:a0:eb:e4:55:2b:7a:
c4:b4:87:a8:e2:10:b5:d6:05:4e:83:3a:e1:67:3c:
8f:e3:f7:57:15:5d:68:9b:fe:15:5d:4a:0f:26:d0:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:84:76:2B:3B:94:29:12:38:DE:30:7D:DD:E4:91:87:F2:10:D1:DC
X509v3 Authority Key Identifier:
keyid:6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a5:75:ec:9f:20:97:58:c3:ac:c5:6c:6f:1f:ef:df:2d:ae:
73:b6:06:40:7e:c4:04:1f:a3:bf:d8:fa:37:c8:98:de:5b:75:
d5:e3:8e:47:a5:18:6e:5c:f1:56:3a:9a:b4:b6:85:8f:39:ca:
4d:94:49:1b:05:c2:32:66:67:42:45:3f:02:bc:74:2d:e8:00:
56:64:a2:3c:10:45:14:65:dd:3c:bb:35:94:54:b3:ba:8f:66:
36:b7:eb:00:1a:0d:e2:ee:89:0f:79:08:dc:64:01:d2:e4:6e:
1c:0f:6b:12:5a:bd:7b:8a:46:b5:26:9f:0a:a6:a8:ea:23:c9:
57:e1:55:ea:da:62:cf:65:33:4d:b9:50:a3:b2:1b:20:6f:73:
8a:18:1b:21:85:fb:98:c8:39:fc:49:d4:be:52:05:fd:e5:7c:
55:b7:5b:e6:72:34:9f:ee:53:7e:61:c9:16:fb:70:97:6b:29:
fc:21:fd:25:41:f4:0d:8b:4d:30:23:81:a2:e0:10:5a:0c:9b:
8e:f6:57:4a:c2:24:0a:be:11:45:de:25:d5:35:97:a7:85:42:
26:9e:ea:0b:25:24:8a:0a:42:ee:7f:55:e2:9d:83:2d:4b:78:
c6:0a:03:c3:5e:5e:c3:8a:70:1c:21:e9:58:47:3a:bc:41:fc:
5f:0c:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:26 2026 by rpki-client