Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: mDCGves51nODQMnsh4U5BKSzPCEmDLETfbkonhjX1Go=
Subject key identifier: 6F:E0:6B:0D:B2:15:4F:64:E4:09:54:8B:58:58:6A:66:6F:0A:E4:51
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019FA30542ADC9EA3F336451BC63CF3DA87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 083E
Signing time: Mon 27 Jul 2026 10:00:58 +0000
Manifest this update: Mon 27 Jul 2026 10:00:58 +0000
Manifest next update: Tue 28 Jul 2026 10:00:58 +0000
Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: 1WUwNPJkpdjj2zO22AfKS7XtvDOZbNaaCiEFrmDebqc=)
2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:42:ad:c9:ea:3f:33:64:51:bc:63:cf:3d:a8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Jul 27 10:00:58 2026 GMT
Not After : Jul 28 10:00:58 2026 GMT
Subject: CN=6fe06b0db2154f64e409548b58586a666f0ae451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:ae:e3:17:42:20:22:c6:34:d4:2e:ce:a9:
d7:9d:bc:ea:f6:72:70:c1:fd:77:25:6c:24:3d:fb:
92:99:f4:c9:82:2f:6c:2e:22:e9:c3:ac:d3:43:e3:
60:66:3d:72:5c:06:57:bb:7b:31:48:52:94:c9:cb:
87:5e:fa:2e:03:f2:b7:c8:29:57:35:df:c4:c2:82:
81:2e:5a:45:29:d7:51:af:26:31:03:4e:07:74:0a:
66:d6:7d:ca:24:0a:52:56:6b:fb:8d:5b:90:43:9d:
cd:6d:ae:27:09:3a:dc:12:49:c0:b2:a2:ac:2a:11:
af:28:1c:a0:28:97:2c:0b:79:98:b0:33:0a:aa:a1:
13:2b:34:88:bc:dd:34:c2:05:dc:ec:b8:c1:83:29:
9f:c3:77:1d:a2:a3:38:71:74:59:ff:55:3f:c9:99:
6a:60:30:3d:ca:ca:f0:88:2a:ad:c6:80:e2:79:4d:
ad:2e:cc:bc:b6:6d:83:93:61:4f:8b:8b:82:86:94:
a3:f1:0e:83:4c:76:c8:fb:2b:fa:93:6b:87:30:ec:
fa:bb:18:93:b2:81:d5:47:0b:1d:6c:28:39:ba:ee:
57:66:22:f2:05:8c:4a:25:73:c8:33:c2:43:19:eb:
61:2e:70:47:e2:a9:0e:5e:6c:8f:64:e6:2b:fc:6c:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:6B:0D:B2:15:4F:64:E4:09:54:8B:58:58:6A:66:6F:0A:E4:51
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:81:b7:cd:17:e0:a5:0f:88:48:d1:66:55:0c:ae:8e:d8:57:
2c:7d:80:5a:43:bd:ce:84:a2:a9:eb:82:58:47:57:6b:29:cf:
85:8d:51:79:39:1d:4d:aa:b1:0c:8e:76:cd:08:7f:6a:81:9c:
af:3d:ad:64:b2:d5:eb:8a:5d:a1:1d:6b:13:e0:7e:63:9f:3c:
3a:e6:dc:ee:6c:33:34:45:54:be:49:b2:ee:68:53:b8:b1:b9:
cf:72:98:e3:96:b4:b5:89:f5:df:d7:aa:9a:f4:9e:73:b6:cd:
e8:9a:2f:fd:87:fb:ba:1c:0f:72:c7:31:a5:22:8e:44:6e:a1:
56:6f:4b:a5:26:73:2b:42:27:5e:f4:2c:5b:8e:3d:61:a3:05:
bf:3d:e4:18:ce:1e:c8:85:4a:00:b3:16:35:c8:06:14:25:8a:
b2:e8:bf:8f:2e:34:a3:3d:fa:5f:10:23:eb:42:ef:08:4b:5b:
0f:e1:89:3d:7d:d3:e6:22:56:c1:c0:03:6d:75:b5:fa:40:83:
80:5e:b4:2b:42:f0:91:13:79:d9:6d:02:7c:e5:54:75:6d:82:
74:3a:07:29:c4:f6:9a:3b:3a:cc:40:c6:93:2f:8a:90:a6:df:
6f:8f:9b:6f:46:1e:5a:2e:5f:b8:97:59:e6:3e:3e:36:6d:98:
75:c3:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:35 2026 by rpki-client