Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: EBnreYiknjvoEmMsGjov9cgpJbIp3CrtBvqBQooKsSM=
Subject key identifier: 2E:CC:0F:65:B9:F3:15:D3:43:6A:35:04:96:01:4B:59:38:21:28:9F
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01A000CA6EEA0AD18402C8B9A58BEBAD7BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0E49
Signing time: Fri 14 Aug 2026 15:01:01 +0000
Manifest this update: Fri 14 Aug 2026 15:01:01 +0000
Manifest next update: Sat 15 Aug 2026 15:01:01 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: AWc8SmwLK+PL+wkDQPu1NX5voygWEbVmsPtr3q4ca6E=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:6e:ea:0a:d1:84:02:c8:b9:a5:8b:eb:ad:7b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Aug 14 15:01:01 2026 GMT
Not After : Aug 15 15:01:01 2026 GMT
Subject: CN=2ecc0f65b9f315d3436a350496014b593821289f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:79:3d:79:43:f4:98:d5:91:72:1e:46:a8:
c3:8e:10:72:88:17:0d:27:2b:41:6d:cf:31:b8:2e:
61:b7:d1:8e:c2:c6:ac:71:d3:cd:52:9f:b7:88:33:
4e:d1:51:f4:76:21:7b:9c:fc:b6:d7:ae:96:da:9f:
8e:3c:2d:91:cf:3a:21:34:51:35:a9:f1:25:fc:84:
2c:74:cc:29:36:b9:88:5d:c8:57:36:f6:1e:f4:b5:
6c:af:1d:83:13:51:0a:be:4c:98:29:55:46:bc:8c:
bb:05:81:4d:68:19:17:e2:61:30:02:97:67:f2:4f:
68:6e:d3:2d:90:4c:9f:db:56:d5:f7:cb:13:85:f2:
6c:d5:14:62:92:c4:e1:db:d0:f0:ab:3e:4b:bc:13:
9b:d7:91:22:5e:48:b0:7d:fe:1f:c9:86:a2:d4:35:
70:3c:e0:8c:19:db:09:74:ff:78:55:05:8e:ad:cb:
b0:e8:e1:2f:4d:ed:35:fc:30:be:d6:3a:47:ce:20:
6c:59:23:0c:3a:fe:e0:39:e5:6c:ea:df:c0:66:8f:
44:22:f7:d7:6c:3d:c6:f0:33:7a:de:08:34:71:05:
62:86:32:6e:be:a2:e2:0b:69:dc:52:1e:ae:ee:1a:
45:b5:78:34:2e:db:f8:6e:79:0a:35:0c:2e:5f:e7:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:0F:65:B9:F3:15:D3:43:6A:35:04:96:01:4B:59:38:21:28:9F
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b2:b6:d4:e1:d7:b6:7d:04:62:f5:0e:40:5a:96:86:90:48:
15:81:06:19:35:1a:ef:89:45:51:1d:32:f3:98:62:ec:43:01:
ec:c3:79:18:ed:69:d8:21:0c:26:37:fb:10:3c:49:a7:44:0e:
97:81:34:7b:ec:e9:42:a9:63:11:47:2a:fa:c9:b3:2f:e7:86:
9d:3c:37:64:c3:0f:07:e6:4a:12:26:44:e9:7d:6f:0e:e7:09:
24:8c:33:4f:1f:bb:73:a6:99:ad:64:00:4c:28:4b:a2:84:b8:
68:29:56:22:da:59:11:5a:74:e8:67:eb:d9:87:d6:76:08:af:
d1:59:84:b8:ec:3d:f8:e5:d7:8d:f4:e5:44:c6:61:80:77:60:
74:a7:b2:ce:0f:70:01:de:8c:ed:3c:39:2f:c8:fa:d5:34:2b:
00:61:34:f9:82:32:ae:1f:2d:f3:e4:f2:11:6e:03:53:7a:4d:
7f:d2:05:d9:d0:81:d1:9e:a6:84:50:70:d0:cd:49:a3:bb:3e:
44:01:03:e1:8f:f9:8e:48:b1:af:17:1d:61:00:6e:5c:7c:91:
f6:93:f8:f1:63:d7:72:19:3c:b4:45:53:ba:00:3d:58:f6:d2:
fc:94:2e:7c:06:99:db:a1:0d:80:08:a4:bd:ca:8c:59:fc:b4:
1f:d2:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:49 2026 by rpki-client