
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: yjeaprCZ010lOcRrAgLxFhNgviDVlu596/FVIzgVZ8I=
Subject key identifier: 0B:40:42:01:1A:68:5C:61:63:73:CD:32:DD:46:56:1B:0C:B1:5A:ED
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019F94DB1B7D2D9F70A5593C9EF57784C8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 16:00:15 +0000
Manifest this update: Fri 24 Jul 2026 16:00:15 +0000
Manifest next update: Sat 25 Jul 2026 16:00:15 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: YLVDjafZMTlqgsdoajD0S4MXY/hT05PAtQXJdCJi5sU=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:1b:7d:2d:9f:70:a5:59:3c:9e:f5:77:84:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jul 24 16:00:15 2026 GMT
Not After : Jul 25 16:00:15 2026 GMT
Subject: CN=0b4042011a685c616373cd32dd46561b0cb15aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:9e:8e:2a:65:14:ec:ad:89:d2:ab:49:f0:
a1:56:1f:d6:d4:6f:63:33:70:ca:fa:09:cc:8f:e7:
37:5c:e9:2a:76:a6:94:52:bc:10:da:de:57:27:4e:
72:9b:60:3e:9c:5c:a4:34:a3:ba:ef:db:25:a1:72:
ef:e6:d8:aa:dd:97:fe:f6:81:7b:47:94:89:75:ff:
83:d8:c3:b8:57:b8:be:92:7b:ee:c2:68:2c:7c:b9:
bb:ee:31:66:4f:01:b6:12:f9:cb:86:2e:d2:58:96:
73:10:3b:d1:08:d4:63:e4:47:92:04:96:0c:2b:a6:
8a:10:44:17:22:f5:89:33:10:51:b6:9a:54:51:cc:
ca:1f:d6:af:7c:f1:f7:1a:40:42:da:76:28:e9:83:
0b:bf:81:87:a5:36:27:bf:32:8a:aa:d0:f7:2d:0a:
bb:8f:76:08:65:0d:ad:a8:0d:dd:6c:28:21:f3:ab:
82:82:9e:e5:dd:42:27:93:c3:7d:9b:a9:ee:e9:59:
d1:cd:22:f0:3d:5d:e3:17:04:b8:70:3c:f9:9b:ac:
56:ba:6a:82:36:a9:53:d7:51:64:e4:f4:61:6f:ac:
f7:ea:6b:8a:aa:df:e7:d0:af:e4:7d:47:70:b9:6b:
c4:19:a9:b6:43:cf:df:b7:65:79:a5:5d:ef:6f:b8:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:40:42:01:1A:68:5C:61:63:73:CD:32:DD:46:56:1B:0C:B1:5A:ED
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ad:70:16:93:7e:d4:04:ba:3e:8a:dd:24:61:7b:20:d7:af:
12:f1:76:1a:b4:62:1b:5f:24:4a:83:68:bb:6b:83:4e:55:28:
36:19:3e:92:23:e9:9d:df:46:38:b5:71:f6:89:09:95:9c:75:
27:34:20:5a:67:55:59:81:6a:14:30:47:08:5a:53:76:00:64:
1b:f1:24:54:41:bd:65:b9:21:67:c3:f3:ba:8e:aa:31:15:3b:
cf:04:28:51:e9:74:26:98:b1:ac:50:ee:1e:ce:a9:31:4f:9d:
06:74:b1:e8:f1:5b:b7:d4:04:6e:4b:91:ca:76:d0:59:64:73:
75:de:20:70:5f:c0:3a:36:29:4f:de:c7:c7:50:02:95:90:52:
d4:69:4a:a0:03:b1:f3:20:30:65:57:45:b5:e4:a5:b2:35:7f:
fe:04:c1:61:70:19:d6:8c:07:3d:1e:ff:1f:79:bd:8e:30:80:
79:04:13:e3:00:88:0b:68:af:a8:54:10:16:37:ff:9c:10:69:
a7:1b:a1:92:36:bb:ba:f5:6b:52:d8:a7:75:2c:2a:96:61:5e:
20:6b:bd:48:99:9e:ed:8b:31:f5:c3:00:e9:56:04:fa:06:50:
7c:46:95:ed:83:02:82:57:ab:c3:0b:bd:b9:8c:7d:8f:ef:75:
96:7d:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:27 2026 by rpki-client