Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: xu82u7cHsyWvAH0h8lwZIZ9k1HBLDIVhyX1yWZUhAok=
Subject key identifier: D0:34:4F:0E:C6:7B:2C:80:23:D2:DA:1A:1C:8F:8B:57:D5:CE:2B:05
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019F8F102BA4D961EA6AFAFB96585D401D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 13:00:29 +0000
Manifest this update: Thu 23 Jul 2026 13:00:29 +0000
Manifest next update: Fri 24 Jul 2026 13:00:29 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: ReB/+piICODB7QRHzzPUBQreamDHukrA1oB58eIQ2fs=)
2: OlMlgs31AIpaAYyvx-pkZgJRnD4.roa (hash: E/uAqkcgJ8DHc0dc0BC15Pxbqo2GjJOGoAJB4FHkYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:2b:a4:d9:61:ea:6a:fa:fb:96:58:5d:40:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Jul 23 13:00:29 2026 GMT
Not After : Jul 24 13:00:29 2026 GMT
Subject: CN=d0344f0ec67b2c8023d2da1a1c8f8b57d5ce2b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:7a:fb:cd:fc:f5:df:43:cd:24:d8:ed:b1:
84:e6:d1:17:2d:6c:a7:cd:8a:b9:20:35:c1:05:38:
10:bf:75:7f:7e:af:0a:ba:4c:b5:99:a9:bd:41:fe:
b6:fa:ba:69:a8:b1:95:72:94:c5:b2:0c:50:fa:4a:
b5:ce:46:9c:70:a0:c9:3d:26:18:7e:f9:12:37:b0:
ca:8d:59:7a:b3:18:8d:f6:7a:78:bc:65:a7:78:7e:
55:e8:b1:09:f3:37:7b:5d:7e:6e:5c:94:12:92:a5:
81:ff:84:7e:fd:5e:f1:8c:84:2f:50:58:6f:29:32:
b1:9e:5f:58:07:74:7b:bd:ce:32:aa:62:98:6b:88:
2d:59:b7:9a:d6:6c:74:47:db:0d:a9:38:ce:47:62:
0e:97:1e:ae:2f:dd:59:c4:c7:ac:76:5b:01:59:1f:
df:7c:16:d2:05:7c:d9:ee:82:b5:73:e5:a0:92:dd:
1c:88:4e:cd:4c:0e:b6:8e:7e:5e:e8:9e:df:1a:dd:
34:ee:c9:45:1e:48:3c:a9:50:a2:94:20:b2:46:60:
48:f9:d7:b1:11:85:4c:b3:e4:ef:4b:9b:ec:a9:5d:
a8:4f:21:29:42:92:5f:f7:2c:34:2c:01:3b:ec:59:
db:3b:af:7c:be:bf:7f:78:10:d7:2f:45:69:88:7d:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:4F:0E:C6:7B:2C:80:23:D2:DA:1A:1C:8F:8B:57:D5:CE:2B:05
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c5:ad:7f:ec:b1:15:52:57:a5:f1:e3:5e:ec:d2:71:b0:4f:
d1:22:7d:98:3d:cb:1f:1c:b1:7e:a2:8c:52:59:b9:54:6b:fe:
8f:54:77:44:ec:3d:9e:c7:46:0d:8a:52:d8:8f:e5:c7:18:c0:
0f:27:7b:82:d8:4a:af:40:bf:07:e2:59:e7:36:68:8b:7f:fb:
4a:5d:bd:b8:6d:da:76:a4:de:e4:42:b8:c4:2a:c0:6c:e2:ce:
bc:61:28:2f:7e:fb:19:9f:fa:b8:b5:38:8d:2a:91:49:6b:bd:
ed:79:5b:79:4d:c4:37:15:ad:47:c5:8d:dd:6d:d8:0c:64:4e:
dd:6b:31:09:9b:4a:f5:2f:2b:62:2f:fd:61:4f:20:8a:e1:48:
ed:d8:91:8b:44:05:de:df:bb:b3:7d:be:1d:7b:b9:40:ac:f8:
1b:dd:5c:4f:7e:3b:a5:47:b0:bd:0b:5d:fc:b0:de:36:61:66:
08:23:22:b1:84:06:ab:6f:e9:1c:76:e6:25:3f:b5:5d:e0:f5:
d1:b0:e3:fc:c7:24:80:ba:8e:2d:d7:6b:57:3c:57:e8:2c:8b:
55:3b:8b:aa:f2:23:76:bc:d9:26:f0:73:77:ed:d8:26:f7:c4:
a9:74:8c:6d:64:3b:b3:8e:80:8d:0a:01:eb:3a:55:f8:f6:03:
95:f5:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:35 2026 by rpki-client