Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: JSMSKzJk/Pg9wrVH1Z+BWLEHh3UmopkEMydid5PFayY=
Subject key identifier: 58:5C:B6:EC:07:D6:76:D9:C8:89:B6:44:FB:FF:9E:14:E0:AC:E3:32
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 01A0404E937E50CC6C657BDA4A21FA8973E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 032B
Signing time: Wed 26 Aug 2026 23:01:26 +0000
Manifest this update: Wed 26 Aug 2026 23:01:26 +0000
Manifest next update: Thu 27 Aug 2026 23:01:26 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: h5FNvJzVFJWsN+Z8oDXMPP/vwBqmT8FocsLtTCKLDy0=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:93:7e:50:cc:6c:65:7b:da:4a:21:fa:89:73:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Aug 26 23:01:26 2026 GMT
Not After : Aug 27 23:01:26 2026 GMT
Subject: CN=585cb6ec07d676d9c889b644fbff9e14e0ace332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:9a:22:9b:f8:8b:6c:75:ba:3b:5f:b9:4e:
39:1a:ee:12:06:52:3b:63:e1:1e:b0:11:91:ad:fa:
22:95:d7:6f:22:83:b7:0d:9e:bb:9e:5d:44:12:eb:
dc:b3:39:b7:4a:27:f4:45:7f:fc:48:76:cc:db:81:
79:18:f4:cd:9f:bd:4b:ae:00:42:d3:c9:99:13:cc:
72:af:76:60:bf:7f:04:d9:98:d4:0d:92:26:87:19:
6d:42:e1:31:83:0b:2c:c7:82:5e:7e:04:5d:4e:d9:
b6:b7:d5:c1:7b:d5:6d:73:99:01:9c:34:a3:7d:0e:
10:6e:f4:50:64:ac:b0:77:fd:81:b7:78:00:1a:d9:
eb:b7:7a:9c:8d:d6:ee:01:d5:42:6f:c5:bb:14:98:
02:69:3b:8b:58:87:ce:01:be:bd:86:4a:16:57:4d:
bd:31:f8:8a:ff:b6:bf:45:6c:da:5d:e5:a3:b2:dd:
20:11:3b:18:5b:89:11:07:f6:be:8c:68:8b:da:6b:
51:6c:0b:1d:a3:6d:4d:98:5c:d7:6e:83:26:ff:8c:
a7:05:00:f9:61:da:29:f4:c2:22:5b:47:fb:3c:19:
90:c7:43:11:63:8d:e8:52:15:a0:e2:04:a1:b4:4c:
b6:52:64:cf:14:8c:19:0e:df:20:20:de:7f:a9:4e:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:B6:EC:07:D6:76:D9:C8:89:B6:44:FB:FF:9E:14:E0:AC:E3:32
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:81:2c:7a:32:90:d9:98:fe:c2:3e:78:49:18:50:cd:e3:9b:
81:63:2e:c1:bd:8a:42:86:81:04:a6:b5:c8:29:35:db:19:f1:
cf:78:77:2b:47:5e:fa:bb:a2:8a:fd:4d:1f:46:ef:c2:21:6b:
f5:b6:6c:17:e9:6a:bc:83:6e:f8:41:8f:6c:5e:5e:44:97:f3:
2c:ad:27:0e:4f:37:97:53:f1:e3:9d:6b:94:af:1b:81:11:6a:
94:e9:23:4f:1a:46:a6:0a:cb:9e:43:37:8a:d9:57:0d:22:10:
5f:47:ba:52:12:3d:cf:34:85:1b:43:96:1a:b8:2a:4c:f1:63:
2a:0a:fb:67:d5:84:3a:df:57:a5:86:0f:8f:d7:5a:25:50:c7:
df:c0:b3:36:62:f3:4a:48:f5:76:4a:a6:03:27:97:a5:01:39:
40:1c:e6:8b:4c:6f:bf:38:80:0a:09:84:bb:1c:d0:b0:0b:48:
37:ef:df:71:11:81:42:b0:3a:6c:c7:aa:3a:04:b8:d2:6a:77:
e9:8d:98:54:f3:8e:a9:8b:49:64:95:d5:62:eb:5a:43:f0:82:
46:5d:ec:58:65:30:01:79:39:f1:5a:d5:e8:96:de:3e:11:ae:
10:8c:10:8a:33:33:1a:7d:5e:70:ea:3e:41:02:96:dc:f9:a3:
87:6e:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:15 2026 by rpki-client