Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: 0XMZXliMpQ2NRDd7+ncOSZue56MSgjuMaIUxB9a4IRQ=
Subject key identifier: 8D:4D:EC:61:D3:9A:36:6F:AC:54:6F:1A:8E:D1:E2:95:7A:38:70:51
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 01A17C28F45386A5EEC1A06D6EBAA4818FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 0933
Signing time: Tue 27 Oct 2026 07:00:21 +0000
Manifest this update: Tue 27 Oct 2026 07:00:21 +0000
Manifest next update: Wed 28 Oct 2026 07:00:21 +0000
Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: b9XVQoFDykIEomZSP0zKGkHkOhqdxvwIA4VhqzcodhU=)
2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:f4:53:86:a5:ee:c1:a0:6d:6e:ba:a4:81:8f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Oct 27 07:00:21 2026 GMT
Not After : Oct 28 07:00:21 2026 GMT
Subject: CN=8d4dec61d39a366fac546f1a8ed1e2957a387051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:85:e0:7c:1c:85:18:d0:66:da:79:15:05:
ff:55:f3:cc:d8:2f:40:07:2e:ac:9d:8e:d3:f5:b3:
69:a8:fd:e5:9c:0d:64:30:92:3d:3a:c9:74:ba:25:
d0:8d:d3:60:a4:7d:bd:56:0a:a8:90:6c:5d:c6:c3:
6c:f2:b4:0b:9c:fb:10:48:34:0b:85:fa:36:2d:a1:
6c:4e:87:3d:7c:33:a9:ca:1e:87:c8:0a:01:97:87:
b1:f8:83:59:e9:4c:eb:6b:a2:77:1b:c5:b7:77:95:
9a:26:07:c2:d2:ec:40:7d:c4:b9:71:45:4a:96:8b:
f7:92:e4:f0:02:8c:67:42:1a:37:5f:96:ca:93:8d:
56:4b:71:5a:8b:49:dc:eb:67:f2:fb:67:0a:ba:dc:
e2:19:87:91:d2:a1:fe:90:31:0d:c9:05:b6:d2:45:
41:fc:c3:32:79:46:7f:27:ac:40:29:8c:12:0f:fc:
3e:92:4e:81:db:03:a2:23:bf:da:9f:c9:2c:c8:fa:
8b:96:ad:7d:18:c9:99:c1:64:88:d3:bf:ae:e6:77:
5f:b6:fa:f0:08:a2:c0:a0:6c:bd:12:78:6d:e4:b1:
19:ef:c2:d1:59:78:c7:e6:17:6e:78:ac:80:30:35:
9f:3a:e3:a7:5d:d4:bb:e9:98:d1:27:ce:e3:fb:bf:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:EC:61:D3:9A:36:6F:AC:54:6F:1A:8E:D1:E2:95:7A:38:70:51
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:33:39:5a:e6:cf:65:ad:19:aa:e5:4e:c2:f4:38:12:6c:c2:
8c:75:50:5d:5c:1f:14:d1:ff:16:71:39:e4:f4:04:b6:4d:fe:
da:64:aa:ec:30:75:a7:db:32:4e:3c:a0:68:2d:e1:eb:f2:bd:
ba:a0:c6:5e:3f:f4:8b:1b:a2:a1:80:4a:12:25:99:fa:76:13:
6d:53:01:b7:bb:52:d9:f4:59:ab:00:8d:9a:7c:56:e1:f1:fc:
0e:65:25:8a:07:05:dd:68:1d:c0:2d:d9:1b:00:ab:90:ed:35:
ea:32:b0:f8:47:a1:10:0d:e0:77:74:b5:1f:98:73:e9:00:fd:
8f:c5:f4:81:eb:a4:e6:60:05:ce:4f:47:95:db:b5:6a:a3:ef:
84:27:62:21:6a:a5:51:0f:60:b3:bf:90:1e:7e:06:1d:1a:cc:
19:e5:82:15:54:a6:d7:93:a9:96:21:b8:53:f4:2e:46:72:ca:
52:62:f1:9d:a8:fc:a7:b3:14:fb:72:a7:2d:e3:f9:62:95:48:
97:60:af:4f:00:0d:20:b4:dd:17:4d:64:9f:36:ac:4e:82:4a:
05:fb:e3:c2:aa:0d:46:f8:27:b1:6b:38:2d:25:4f:07:d1:16:
b8:0d:93:52:40:08:ae:3f:50:df:4e:02:e3:bf:7a:0a:69:eb:
a5:54:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:17 2026 by rpki-client