Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: /OX/p8TaZkgV1xEU/XDYqeX/fhPLXcjb37WQ15VUrrI=
Subject key identifier: BC:37:1C:72:1B:72:7C:36:11:B3:75:A0:DC:52:1D:BE:62:02:43:6B
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019D2703C506724B9B13457F082DF68D7057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: EDdUsWOUR4F5hVZ5/Re+e9UgmRsfpbnDnQcMYX6axcA=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c5:06:72:4b:9b:13:45:7f:08:2d:f6:8d:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=bc371c721b727c3611b375a0dc521dbe6202436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:1e:c5:f8:c5:84:0c:c1:07:e7:5d:7f:b5:
61:cc:28:0d:5f:9d:8c:24:c5:cf:7d:4b:49:1e:34:
a3:f6:29:5c:c0:0a:6a:7b:db:81:40:2e:85:72:13:
7c:e9:7c:7f:3e:46:2f:40:81:b6:91:50:72:2b:ed:
bd:1c:8a:18:d6:8c:3f:2f:8c:58:5b:7f:4b:33:44:
37:f0:ef:10:5d:ef:b8:c4:71:16:b2:3d:fe:1d:8f:
84:09:0a:75:01:0a:a9:48:15:e7:5e:e1:7b:49:85:
7f:8d:46:4e:14:d3:c5:d5:7c:94:05:f2:b2:03:7b:
61:4b:b3:1b:af:a4:f0:03:d9:b2:be:63:b1:20:e7:
fe:38:0d:84:ce:1e:a6:ae:ba:4d:a0:71:2f:71:ee:
5b:aa:e3:f5:0e:59:d2:c2:ec:0c:56:6c:55:49:7f:
c7:4a:de:d0:8d:8c:16:0e:77:32:2a:86:be:bc:ca:
d1:69:d8:2c:91:16:f8:a1:66:f9:a1:ad:c7:37:36:
55:c7:8f:0c:fb:7b:a5:66:4d:b1:0c:af:f0:b8:98:
4c:e9:10:c4:b4:89:6a:63:70:e1:37:a1:aa:86:dc:
07:ee:42:da:6c:bc:98:68:94:57:a8:56:a2:7f:93:
0b:92:eb:db:45:14:ef:89:bf:b9:e3:76:b6:13:c7:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:1C:72:1B:72:7C:36:11:B3:75:A0:DC:52:1D:BE:62:02:43:6B
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:f5:62:60:3a:17:03:cd:42:d7:e7:fb:16:6c:ea:c0:1d:
70:1e:7f:31:df:12:2c:8d:3a:29:5d:24:dd:76:2f:71:0e:71:
09:60:43:c6:c3:a6:61:dd:2b:ac:d0:5d:d6:64:b9:53:2b:cf:
f5:c7:4f:c8:a2:4b:d8:d1:e7:57:38:da:7a:6a:d0:75:7f:9e:
1f:74:49:ea:df:7a:64:a4:be:f6:de:53:36:d1:8c:7f:9d:39:
ba:31:fb:a3:d1:6f:ad:60:0a:40:f1:3f:0a:7d:e0:1b:4e:1f:
cd:b1:24:3e:8f:3c:ef:b9:0e:76:c4:40:2b:a3:15:fe:ab:42:
1f:89:76:07:e5:dc:ce:b6:b3:7a:20:09:f3:20:67:60:03:6f:
67:33:5d:8a:b1:26:11:1b:d5:f3:5b:b0:2c:cd:c8:48:99:ee:
de:55:34:45:e0:08:8c:e8:90:95:86:3d:3b:86:7b:19:64:b0:
f4:f5:3c:ef:77:ac:b5:fb:23:31:01:bd:d1:d1:e5:df:9a:d6:
2a:bd:ef:d4:3a:36:06:68:af:4f:97:7b:c2:40:df:f0:ec:40:
e4:c0:e1:94:4b:dd:c4:12:9d:c2:85:90:49:26:bd:60:50:90:
3d:2e:d3:e6:50:47:c8:86:21:0d:5f:19:78:7e:0f:11:2b:f0:
bb:4e:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:19 2026 by rpki-client