Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: 8jT2tit8kY8L9Sp+cXTKKT6DwgN2+8mv6ZbOFCC5kCk=
Subject key identifier: 0B:67:FA:BA:37:CD:48:65:A8:F2:CE:08:10:21:4D:3A:E7:9E:EB:F4
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019DD19A3D20B721648C0648B6E4C04C88AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 074D
Signing time: Tue 28 Apr 2026 01:00:39 +0000
Manifest this update: Tue 28 Apr 2026 01:00:39 +0000
Manifest next update: Wed 29 Apr 2026 01:00:39 +0000
Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: vJHHYKkREnMpiPAoLhLZhpRadajmlL+63aqji6MTNMA=)
2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:3d:20:b7:21:64:8c:06:48:b6:e4:c0:4c:88:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Apr 28 01:00:39 2026 GMT
Not After : Apr 29 01:00:39 2026 GMT
Subject: CN=0b67faba37cd4865a8f2ce0810214d3ae79eebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:ca:79:c7:43:cf:d9:09:2a:f2:91:86:9f:
de:24:38:e2:fb:b5:f9:76:0a:20:69:90:88:3f:18:
90:e1:1c:3f:61:62:7f:14:85:c7:2c:b2:21:37:9d:
2c:47:64:07:70:a0:86:1f:18:3e:f3:05:8b:9f:0f:
fd:a5:91:c5:f0:61:da:f9:83:87:e9:1c:c7:d0:3b:
a5:11:39:37:3b:9c:e4:a3:2d:da:e2:6b:59:93:d6:
13:56:4c:fb:df:61:dd:8e:98:ac:27:81:c8:e8:96:
33:62:61:7f:24:8f:39:fa:fa:6c:54:6f:a8:d6:b4:
38:b5:d2:1b:ea:13:76:02:ee:e6:ff:25:1e:5d:ff:
5d:60:cb:34:f1:5a:2c:d2:6b:6b:8f:6b:96:42:27:
b9:af:38:9e:0e:6b:2f:be:f5:a7:70:24:67:b6:3e:
8f:7a:57:32:f5:f4:fe:ef:4f:f2:27:70:51:cb:a9:
6c:6b:f8:65:f6:ee:37:67:de:38:7b:cc:04:fb:ec:
e2:28:a6:be:26:ce:89:35:e0:fa:8d:54:ae:f9:b5:
20:e0:2f:d6:cf:9e:5a:22:49:c7:ca:88:93:da:ef:
ed:94:47:0b:dc:79:67:65:ee:d6:a3:21:b4:5a:74:
80:8b:65:ef:21:cf:d9:5c:80:a1:0d:7a:77:74:68:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:FA:BA:37:CD:48:65:A8:F2:CE:08:10:21:4D:3A:E7:9E:EB:F4
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:cb:ba:0f:7e:e0:00:de:cb:96:8b:70:7a:27:3d:0a:a8:
9d:7e:49:c4:9c:9c:78:d9:14:32:28:d5:19:75:56:5c:8c:d6:
ac:78:b5:ed:53:70:68:6a:6f:2b:10:e9:9d:c4:a2:09:0b:e5:
3c:ec:f8:79:e4:18:8c:23:04:fe:53:b2:24:fd:e8:62:bb:b7:
46:11:52:7d:84:46:28:4e:66:be:99:a6:70:99:96:d2:dd:e1:
9b:6e:1d:d1:0a:46:f8:51:fd:46:a8:b7:4e:35:6f:36:a8:67:
66:84:ef:48:8e:98:b3:94:48:a1:5f:89:dd:0a:73:0b:12:1e:
f8:6f:db:9f:8f:03:fb:cf:e2:55:cf:0f:39:99:1b:b8:d0:0f:
fa:12:82:b2:16:43:ae:eb:bb:8e:20:c2:6e:d5:9c:ba:7c:38:
98:7e:f7:e4:17:02:65:21:8f:d2:fd:c7:a8:48:f7:65:41:59:
7f:e9:fa:a4:9b:76:55:3e:db:96:ea:1f:00:b4:4d:37:98:d9:
42:91:96:c0:9b:68:2d:5c:50:d1:f6:e2:12:2e:4b:bd:28:b6:
19:e3:1c:53:7e:00:15:0d:e6:9f:20:ed:2a:37:5e:e4:15:2d:
39:83:48:ee:14:48:20:d5:36:df:e2:73:12:3c:03:35:15:84:
c1:e5:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:29 2026 by rpki-client