Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: ub/1cbyPUtHnRVUfeq1g8muPxt9lC6SiV5Fc11B6xj4=
Subject key identifier: E0:00:88:E9:7E:CC:AC:7D:AA:31:73:BD:BA:11:79:D1:21:4D:32:36
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 019E1C10174CDE45A2DD96E319965F9282CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0D4E
Signing time: Tue 12 May 2026 12:01:16 +0000
Manifest this update: Tue 12 May 2026 12:01:16 +0000
Manifest next update: Wed 13 May 2026 12:01:16 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: 0eIuKLui1sxXhqSUIbSrsVr0JzreaSv2m+GGQdF1MDU=)
2: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (hash: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=)
3: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (hash: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:17:4c:de:45:a2:dd:96:e3:19:96:5f:92:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: May 12 12:01:16 2026 GMT
Not After : May 13 12:01:16 2026 GMT
Subject: CN=e00088e97eccac7daa3173bdba1179d1214d3236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:11:15:f8:e8:06:36:1c:c2:ed:c2:64:57:
53:fa:55:89:71:ee:f6:9a:14:c4:00:88:43:1b:2c:
03:97:b3:94:60:e1:90:c0:be:13:64:cd:8f:58:eb:
f2:d3:84:30:7e:3a:ed:95:7c:6a:6b:a7:26:66:73:
16:05:df:be:fd:9c:19:ff:ae:39:c3:50:27:72:88:
73:34:57:cf:73:49:ad:62:7d:cc:df:a7:55:5a:d2:
4c:4e:6a:5f:ee:8c:9c:73:7e:85:f9:d2:b9:b1:97:
e1:02:e1:c7:65:31:09:da:da:26:12:02:1a:bf:cf:
61:d1:1e:a6:3d:2a:60:5b:48:d6:27:9a:40:97:4d:
3c:d1:93:8d:f9:14:d1:7a:4c:14:4c:a5:d1:2e:1b:
00:2c:37:48:66:a3:59:fe:15:ff:28:13:34:29:ab:
8e:1c:ad:24:31:40:19:42:78:37:2d:30:7e:23:96:
8d:23:54:9c:ab:78:ac:ba:71:5a:e6:3a:8e:42:6c:
f1:bb:34:49:e8:c2:c8:75:9d:ad:f8:4d:d3:55:fa:
22:ff:89:fb:63:d9:46:f7:ad:af:62:7d:c5:ab:9b:
79:85:98:94:c6:a0:74:d0:4b:5d:af:60:0f:ef:c9:
f7:95:10:a7:65:e7:af:21:d6:e9:34:bc:de:0e:2e:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:00:88:E9:7E:CC:AC:7D:AA:31:73:BD:BA:11:79:D1:21:4D:32:36
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c4:c3:5c:4a:21:57:98:e0:23:30:8c:79:f7:e1:94:1a:72:
17:44:20:04:67:d1:d6:97:f9:03:04:53:bf:0c:c2:c0:a0:4b:
97:0b:f8:66:32:58:36:48:6c:98:2e:87:9a:a2:e1:d3:23:4d:
b1:8f:b4:c7:b2:38:62:cf:a3:4f:91:f4:f7:d6:2e:6c:7c:7d:
22:ed:14:86:41:c9:77:14:10:c1:1e:bf:c8:41:a4:32:cc:0a:
e3:84:0b:5d:d7:11:2e:70:98:af:85:b5:9d:16:ea:d9:b0:1d:
c5:7b:44:db:fa:91:ef:3a:94:dd:74:2e:0f:03:4e:ad:d8:8f:
57:54:80:48:e8:bd:93:38:e7:b5:06:5a:b0:c2:c7:79:03:ea:
88:86:a4:5d:3a:de:18:f5:2f:5a:5a:80:27:da:19:5b:85:1b:
66:3e:0a:56:0b:c2:32:b3:d1:70:47:52:04:d6:64:7b:ec:27:
58:63:69:e0:28:89:56:3e:7f:06:8d:07:bf:33:7a:46:50:e0:
d0:28:0f:70:df:32:f4:55:b2:11:90:f3:2f:75:52:85:75:d8:
e7:c6:48:81:62:8f:d8:79:3d:10:e6:20:74:02:85:3e:66:f1:
4f:71:73:50:04:54:a6:09:3a:fe:ae:1f:51:b0:a4:57:e6:14:
43:63:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:38 2026 by rpki-client