Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: ZXumozQdpjgIKJwntcOWAk27ekEMduxAAl9+bK4hVOs=
Subject key identifier: CA:4F:9C:81:3C:00:0C:43:B5:22:CD:E0:3A:43:64:6C:A7:64:5C:D2
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 01A199FCBD0A6B38A555A63A35FC580E9D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 03DE
Signing time: Mon 02 Nov 2026 02:00:39 +0000
Manifest this update: Mon 02 Nov 2026 02:00:39 +0000
Manifest next update: Tue 03 Nov 2026 02:00:39 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: Wt1lT700xFwFQe44FISWUgqm0HFuEnrEwRGbnvvFcsA=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fc:bd:0a:6b:38:a5:55:a6:3a:35:fc:58:0e:9d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Nov 2 02:00:39 2026 GMT
Not After : Nov 3 02:00:39 2026 GMT
Subject: CN=ca4f9c813c000c43b522cde03a43646ca7645cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:64:77:94:07:c2:dc:0f:2a:2d:ec:e9:e8:
79:1b:0f:46:69:fa:f0:83:dd:64:45:65:cf:74:b6:
4e:77:12:1d:bb:7e:f4:dc:5d:00:a3:6c:7f:bd:d9:
eb:80:e8:8a:42:9a:ee:12:d4:be:a8:fb:ba:3d:de:
a3:cf:ef:40:a5:06:12:75:83:01:5b:49:7a:66:94:
ab:1c:cb:6a:fb:fb:73:53:57:97:59:aa:c1:40:e0:
56:95:8b:96:de:3c:b8:a5:a0:e8:3f:3c:58:b1:18:
84:f9:41:16:e0:4f:09:f7:8c:16:d5:8f:1f:8b:3d:
ce:93:22:11:04:62:e1:28:71:65:ba:14:45:05:63:
04:20:9f:5f:45:10:cb:57:93:84:7f:a3:29:f7:06:
ec:4e:ea:ed:d4:46:6a:09:99:e8:2a:43:6f:03:db:
25:25:68:60:cc:69:9a:0e:45:ac:9a:96:49:e8:2c:
98:eb:7d:74:12:cb:4f:08:7b:34:9e:ef:79:86:fe:
3a:0b:93:22:2f:73:71:60:29:31:92:8f:8c:62:38:
29:55:2e:97:94:c5:76:bc:d2:41:e0:2e:64:58:f8:
ac:d0:62:4c:14:89:cc:6b:6f:b7:06:90:ce:a3:46:
75:f8:54:63:3c:01:2b:13:c0:a9:bd:00:e6:bf:12:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:9C:81:3C:00:0C:43:B5:22:CD:E0:3A:43:64:6C:A7:64:5C:D2
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:22:9e:ea:64:bf:cf:34:b4:ae:9d:4a:96:9d:b9:53:83:3e:
8d:2c:82:36:52:2e:07:ba:84:41:98:58:ba:d3:fc:fb:da:6e:
43:7d:5e:40:ed:6b:e5:7e:f6:08:71:f9:8a:a6:6a:41:48:42:
38:44:1e:5b:c0:78:9c:64:d8:75:8e:7e:77:0a:a1:1e:6f:73:
4d:cf:26:f3:c2:70:7e:dc:e2:6e:d3:d6:af:9c:fa:5b:1e:7d:
81:1e:b9:5f:96:1f:15:c1:81:95:84:c4:48:13:13:71:27:e7:
17:a9:40:5a:dd:41:0e:ce:dc:f2:e5:39:4f:5a:d6:81:88:93:
c6:97:ff:dc:e4:9e:51:86:7a:56:75:76:56:f9:bd:68:46:dc:
e5:0b:ac:c9:6e:ab:93:45:5c:72:1c:72:b9:d8:32:2a:5d:98:
c9:ef:9e:82:ff:65:f0:df:0f:3d:03:9b:fa:ca:50:9c:66:06:
ac:8c:9c:47:e7:c5:b2:3a:07:60:6a:c4:d0:a3:d6:15:22:e4:
c4:15:02:b4:81:64:8f:a0:08:a8:b1:54:ea:57:ea:41:e8:dc:
4b:a2:1d:75:25:08:5c:4a:e2:24:0c:1a:f1:c3:91:3c:48:d6:
b0:ae:d4:be:e6:04:e5:63:48:ed:19:5a:c0:3b:58:7e:5d:1f:
5c:8e:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:41 2026 by rpki-client