Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: L62ibkPTft5q3War8/i2wzCgTWG8AryS4Vg0HFm4BJE=
Subject key identifier: DB:66:92:C6:03:55:99:84:C1:E6:C7:5D:D3:DF:F8:42:18:11:8A:EC
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019E20238FF61E7BB755D87C5DF7E623E820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 07:01:01 +0000
Manifest this update: Wed 13 May 2026 07:01:01 +0000
Manifest next update: Thu 14 May 2026 07:01:01 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: IxVxxzUe6+QhIPQaCjRM7jKpVmoOBsWj0G5sryAweWI=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:8f:f6:1e:7b:b7:55:d8:7c:5d:f7:e6:23:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: May 13 07:01:01 2026 GMT
Not After : May 14 07:01:01 2026 GMT
Subject: CN=db6692c603559984c1e6c75dd3dff84218118aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:6b:14:98:4a:f6:86:bb:b3:e8:93:e7:f8:
09:fd:5d:3e:dd:eb:3d:c8:dc:d8:37:85:0b:eb:34:
f8:07:15:1d:b4:50:bc:9d:0d:02:5a:7f:a4:2c:47:
a7:36:c4:4b:a6:15:42:1a:c0:7c:b8:0e:dc:84:f0:
9a:fd:31:4a:50:da:a3:b2:cf:83:2f:d6:90:21:51:
31:3f:b7:ad:e2:01:e9:b7:c4:e2:38:af:0f:46:61:
61:e0:43:86:2a:85:fd:67:10:da:90:fc:7a:50:ea:
dd:fb:1b:dd:7d:f2:0b:aa:ff:0c:ed:50:9e:e0:8a:
b4:71:9e:9d:be:ae:ba:db:c0:46:95:8d:d6:db:a5:
49:6a:23:45:a1:59:c4:e8:6a:5d:13:c9:3b:29:a4:
ec:8b:0e:27:01:77:fb:a7:51:f8:44:05:e9:3d:c0:
db:ed:ee:37:41:7f:0c:70:85:5b:6b:38:6a:74:c9:
8a:fc:88:2a:64:59:00:44:c9:d3:f1:bd:51:3d:73:
e8:7c:fe:a4:32:04:89:b6:a0:5e:dd:da:a8:44:fd:
1e:00:3d:42:bc:90:93:af:ac:a4:83:5d:12:d8:38:
69:86:26:bc:6c:ae:37:b1:5e:a0:27:71:d6:0c:49:
e5:77:95:9d:57:b2:42:38:90:76:6a:86:de:2a:a8:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:92:C6:03:55:99:84:C1:E6:C7:5D:D3:DF:F8:42:18:11:8A:EC
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fc:91:c7:ba:69:ed:5b:31:6e:75:16:6b:7e:af:d6:1e:95:
18:a7:99:33:a9:02:75:a3:f5:43:81:4d:47:f2:eb:61:3d:65:
dd:ab:52:ae:d0:6e:a0:5a:96:1d:6f:61:ac:42:81:79:ea:bc:
55:6d:b7:ee:9f:67:59:d0:fe:d9:44:86:56:2c:8b:79:90:ce:
15:9f:4e:e3:95:d4:be:35:30:5d:2f:1b:32:18:9c:cc:34:4e:
82:69:de:7d:88:1c:10:a3:90:9d:9a:0e:8c:20:62:49:08:6a:
9e:6f:31:bd:f5:4a:68:6c:4c:41:a9:a8:4a:2a:25:c2:df:c6:
e4:74:9d:de:c4:de:3f:39:64:fd:79:21:41:2e:ca:44:e0:08:
63:53:ab:52:fd:87:12:e6:b4:73:35:f1:b4:bd:f6:40:f3:bc:
db:c4:b1:b4:55:50:fa:d8:fa:22:32:97:f8:7f:2d:ab:14:4a:
50:aa:fb:04:70:0e:18:0a:18:cd:bd:52:68:51:bd:0c:ee:12:
20:fd:8e:01:5f:be:35:be:77:5f:84:23:ed:c8:64:34:80:5f:
0c:01:a1:41:cd:00:7f:09:6e:d6:93:57:a0:c1:7d:42:10:91:
28:16:da:99:8e:e2:62:95:7d:b2:0f:f6:0e:92:a3:9c:a3:b7:
f5:19:19:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:35 2026 by rpki-client