Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: IhbsyxytZ1k/0dquo25OJDvSo93KLNJu+r/aQSZ0IX0=
Subject key identifier: DC:66:3E:45:C3:5E:CA:8D:CD:AF:85:33:42:D1:AB:F3:0F:82:97:DC
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 01A1076ED2D5C7796790F5EEF780A9757801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0ED1
Signing time: Sun 04 Oct 2026 15:01:05 +0000
Manifest this update: Sun 04 Oct 2026 15:01:05 +0000
Manifest next update: Mon 05 Oct 2026 15:01:05 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: 198f9dl70uxHD/8ghFkd5pmxk0r2vj0y9m9771xz1Nc=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:d2:d5:c7:79:67:90:f5:ee:f7:80:a9:75:78:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Oct 4 15:01:05 2026 GMT
Not After : Oct 5 15:01:05 2026 GMT
Subject: CN=dc663e45c35eca8dcdaf853342d1abf30f8297dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:ba:c3:bc:15:37:16:2d:1a:d8:99:c9:6b:
b4:66:d4:b9:e9:a0:7a:26:2b:f4:93:0e:7b:83:76:
fc:36:6c:d8:79:10:5f:e4:37:3d:c3:f2:11:f1:e3:
c5:6e:0a:c7:de:9f:f5:d6:ec:7f:a1:d1:27:a3:be:
d3:89:38:09:b9:8e:3e:f1:26:9a:54:ed:5f:36:3a:
a2:93:e7:ab:bd:e3:3e:ae:59:96:0e:29:2b:2d:8c:
38:ea:bf:c2:09:66:64:ca:f4:00:21:2a:68:ac:2e:
d3:b5:2e:c2:db:bc:f5:74:85:e1:7a:24:38:15:99:
3d:51:b6:74:e8:9c:64:3f:5e:91:32:6b:43:c2:4e:
e0:ec:7c:9a:f5:ae:0c:64:55:1a:5d:29:15:cd:38:
d4:6d:3f:c9:5a:53:73:de:03:f4:52:90:d7:ee:8f:
67:68:01:94:c9:de:a4:95:05:0b:46:62:e6:5e:22:
dd:e3:1b:39:5b:4b:45:2f:5a:60:43:94:9b:b2:e5:
08:dd:b1:8d:53:0e:ab:a9:3c:66:30:01:27:15:9a:
0a:7a:92:1f:68:66:63:c2:77:99:b4:b2:79:31:b2:
95:9d:f8:12:49:92:1c:2e:48:77:3e:53:91:d2:98:
33:82:6b:b9:ab:07:68:e8:54:4a:ab:a7:d4:e8:56:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:3E:45:C3:5E:CA:8D:CD:AF:85:33:42:D1:AB:F3:0F:82:97:DC
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:00:ef:45:9f:32:6c:29:9e:f9:c2:51:1e:01:92:6b:7b:ba:
01:37:f8:84:aa:fa:98:14:48:4d:43:47:52:ed:3d:9f:e7:92:
a2:1f:83:09:fa:06:56:64:ea:81:38:6a:a0:7d:b7:ed:00:1d:
c8:52:22:25:23:e0:41:74:aa:b0:4b:b5:cc:f0:df:85:7d:37:
36:95:7e:26:0c:12:3d:c5:85:21:19:8f:0e:c4:3f:39:86:74:
54:05:07:5d:04:ad:4d:04:12:be:80:7f:53:9b:9a:5e:44:9c:
0f:5d:36:02:a2:30:d5:28:a7:f5:4e:4c:6b:6e:e8:0e:6a:c3:
a4:91:06:cd:37:ef:55:7a:f6:f1:47:82:f1:49:a8:56:34:c0:
f9:53:5c:df:d8:09:5d:39:11:39:7b:1f:3f:41:93:09:d1:37:
f0:54:8c:de:ae:0f:bb:86:5a:f6:5f:00:1f:8b:f8:a1:63:2c:
29:d8:ab:ea:9d:dc:17:fc:75:eb:b9:fe:6e:e1:4c:aa:c0:72:
e4:0f:18:5a:a1:54:4c:f1:98:ac:6d:c5:f3:bb:aa:c4:8c:81:
3c:77:8e:13:d8:4d:9a:72:dc:14:78:c1:18:6d:7e:7a:2b:eb:
38:e0:3d:e8:63:23:61:14:fc:b5:fd:76:62:18:fb:62:43:8a:
4f:34:b1:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbtLVx3lnkPXu94CpdXgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj
YmE1ODUwHhcNMjYxMDA0MTUwMTA1WhcNMjYxMDA1MTUwMTA1WjAzMTEwLwYDVQQD
EyhkYzY2M2U0NWMzNWVjYThkY2RhZjg1MzM0MmQxYWJmMzBmODI5N2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+O6w7wVNxYtGtiZyWu0ZtS56aB6
Jiv0kw57g3b8NmzYeRBf5Dc9w/IR8ePFbgrH3p/11ux/odEno77TiTgJuY4+8Saa
VO1fNjqik+erveM+rlmWDikrLYw46r/CCWZkyvQAISporC7TtS7C27z1dIXheiQ4
FZk9UbZ06JxkP16RMmtDwk7g7Hya9a4MZFUaXSkVzTjUbT/JWlNz3gP0UpDX7o9n
aAGUyd6klQULRmLmXiLd4xs5W0tFL1pgQ5SbsuUI3bGNUw6rqTxmMAEnFZoKepIf
aGZjwneZtLJ5MbKVnfgSSZIcLkh3PlOR0pgzgmu5qwdo6FRKq6fU6FZgRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxmPkXDXsqNza+FM0LRq/MPgpfcMB8GA1UdIwQY
MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct
MDA4YTgwZjZmZjExLzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx
LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwDvRZ8y
bCme+cJRHgGSa3u6ATf4hKr6mBRITUNHUu09n+eSoh+DCfoGVmTqgThqoH237QAd
yFIiJSPgQXSqsEu1zPDfhX03NpV+JgwSPcWFIRmPDsQ/OYZ0VAUHXQStTQQSvoB/
U5uaXkScD102AqIw1Sin9U5Ma27oDmrDpJEGzTfvVXr28UeC8UmoVjTA+VNc39gJ
XTkROXsfP0GTCdE38FSM3q4Pu4Za9l8AH4v4oWMsKdir6p3cF/x167n+buFMqsBy
5A8YWqFUTPGYrG3F87uqxIyBPHeOE9hNmnLcFHjBGG1+eivrOOA96GMjYRT8tf12
Yhj7YkOKTzSxpg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:11 2026 by rpki-client