
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier: EzO1NPPaCqgckKZ28uRBhFSlHFMMYeZwAmA/tG7SuRM=
Subject key identifier: 4B:25:03:25:0A:AF:A5:E5:7D:AE:48:DA:F4:89:32:96:2B:67:32:47
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01A179284A47974FFC2BA0A2DC601585FAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number: 1AE6
Signing time: Mon 26 Oct 2026 17:00:45 +0000
Manifest this update: Mon 26 Oct 2026 17:00:45 +0000
Manifest next update: Tue 27 Oct 2026 17:00:45 +0000
Files and hashes: 1: 1-s8esoK90fuTW0AWj651iPGBuh8.roa (hash: sjKIBezOO4ivMoUNXIkq24CJOPHxFuHSGD6EjG7R65w=)
2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: byOblrtxvjZMub0/twR3hYJ62jz7eNvumVPAK1aa4OM=)
3: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=)
4: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=)
5: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=)
6: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=)
7: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=)
8: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=)
9: IqxedTmRHFs7BdwPyhpKn0mZRzk.roa (hash: e1NHWivKVF2OWPAThP8SvF6dgP5roy0fH0Mvk/Lerx4=)
10: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=)
11: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=)
12: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=)
13: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=)
14: m4jWmUWu_NL833wHpjlo_itnadw.roa (hash: RwOqkHbntUy2jo5lIc01YSzNvRHA1IqmYHya8PZXPD0=)
15: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (hash: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:4a:47:97:4f:fc:2b:a0:a2:dc:60:15:85:fa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Oct 26 17:00:45 2026 GMT
Not After : Oct 27 17:00:45 2026 GMT
Subject: CN=4b2503250aafa5e57dae48daf48932962b673247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:68:f2:87:ad:d2:66:e8:cb:d2:59:33:7c:
1e:e4:0f:40:ad:55:58:1e:36:e3:10:28:a2:2f:ce:
e4:0c:c0:af:d6:58:c6:49:f7:c7:42:dd:d4:39:ec:
66:90:d5:5f:49:e3:12:70:d1:fb:6d:16:78:59:13:
92:20:22:6c:6b:9b:b6:13:65:2c:e2:86:bd:ea:e8:
08:ad:33:a7:b7:46:5d:f2:11:a9:0c:4b:75:c3:d6:
49:bb:7b:6b:77:95:f5:e0:a2:d4:e8:3f:cf:f5:12:
69:b2:2a:ed:59:d9:99:f2:f9:e4:b8:3c:64:90:c2:
c1:90:13:96:f7:7d:ea:fe:4f:99:45:78:55:07:b1:
43:ff:0a:bf:9b:15:23:ed:85:cf:12:b4:3d:9f:6f:
93:1b:7b:ad:58:4b:85:11:74:6f:7d:16:d1:e4:4f:
84:98:cc:0c:5f:f4:5a:f4:73:67:33:f0:36:92:b8:
3d:e4:a2:de:ba:ac:44:21:d2:71:f3:98:7f:eb:41:
1a:6e:2d:98:f7:38:54:d3:e6:f7:65:46:31:a3:cc:
69:ac:6b:31:f6:fe:71:8e:0e:c5:3a:57:03:66:67:
97:e5:7e:e2:e7:b6:e6:31:af:44:1c:1d:62:b0:d9:
d9:c7:33:42:89:fa:b8:75:20:1f:2e:42:17:00:11:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:03:25:0A:AF:A5:E5:7D:AE:48:DA:F4:89:32:96:2B:67:32:47
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e2:f6:99:e9:96:66:c4:83:d9:7c:ba:aa:57:9b:b4:f3:dc:
8f:af:1b:8b:e6:7c:a8:4b:21:42:ef:07:19:02:cc:99:74:e0:
0d:00:0e:a4:5a:8e:0e:2a:69:88:08:32:2e:87:a5:d3:f6:f8:
67:86:19:ca:35:a4:f8:8e:4f:e9:9d:16:75:3f:bf:99:5c:3c:
35:87:a6:de:a7:07:f6:10:2b:d2:9c:16:37:9a:96:c9:41:27:
90:15:d6:f4:ec:c0:43:e2:16:71:04:50:c2:81:22:e1:ad:44:
46:92:da:c7:5e:07:50:ed:d8:65:cd:8e:16:bc:93:fd:77:14:
4f:c7:c3:68:9e:44:51:10:14:c5:1c:2c:8d:b2:c8:84:34:1e:
99:e2:ed:b2:ea:c2:88:08:99:7a:ef:9f:9c:89:b2:c1:33:3d:
ac:c8:0c:c2:70:4d:28:ae:13:ea:8a:b7:7b:fa:9d:ed:d4:cc:
44:75:70:d4:c4:5c:12:b6:c6:fd:01:89:3a:64:28:e0:7b:f9:
38:7c:03:c8:43:7a:b0:03:d8:8e:c0:62:8f:42:62:33:f3:3e:
8e:12:f0:33:da:e0:1d:7f:ea:f2:e0:a1:21:95:15:23:9c:2f:
4f:ff:85:02:f7:09:a6:08:0e:6e:a0:65:92:c1:50:1a:03:e3:
78:38:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:46:40 2026 by rpki-client