Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: 4tHV/tsmKTGFvShwgXyMFd/+WZC8D7Sx2ps95z2Bj2c=
Subject key identifier: 1D:5E:1A:30:E0:39:5E:1D:B3:61:5D:15:3F:E1:38:EF:40:43:47:4B
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019D38661AD2E2F853EB33679081D3CA0852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: RI0oel5+AHWQML/89nCeTOypF9deTm+Ne8FARLMklss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1a:d2:e2:f8:53:eb:33:67:90:81:d3:ca:08:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=1d5e1a30e0395e1db3615d153fe138ef4043474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:04:c4:00:08:72:f6:11:16:11:e2:ce:58:
6f:78:50:9d:a1:21:17:af:fc:e7:ca:35:49:72:ef:
61:5c:b2:fb:9a:b1:8d:15:b5:b7:cb:8b:e1:fa:01:
98:a1:14:93:29:7e:a9:db:be:d5:56:3b:67:cd:e1:
39:2d:49:9e:cc:f7:83:c8:94:fa:e2:95:ba:49:7f:
1f:36:e4:e4:47:4b:fb:82:01:57:4b:36:b2:77:50:
0b:c9:70:da:67:56:85:76:c0:ee:cf:67:b0:21:09:
1a:03:97:1e:b1:4b:d8:c6:f0:54:88:38:21:d5:a8:
80:91:64:4e:63:9c:06:68:76:2a:c2:2c:4a:1b:a8:
51:65:d9:c8:57:94:4e:3f:a6:28:5b:be:cb:90:9f:
0a:96:b3:dc:d6:a8:7b:1c:d0:a5:2c:89:6c:18:d1:
bd:39:aa:a2:3a:f2:a0:8c:f2:49:85:5b:ed:97:78:
ef:d6:fe:69:e3:92:e2:96:25:c8:f1:a5:6a:0c:22:
2b:f7:ca:40:65:be:c8:bd:eb:ef:3b:e8:2d:70:b0:
3f:d5:9a:5d:aa:47:2c:9a:67:cf:75:dd:ee:70:28:
42:be:67:60:47:4f:fa:ca:74:66:6d:90:76:e3:e0:
b6:5f:20:8d:c6:f5:9c:c2:88:cc:12:0d:52:1d:4d:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:1A:30:E0:39:5E:1D:B3:61:5D:15:3F:E1:38:EF:40:43:47:4B
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:ea:c0:22:8a:1a:c8:5c:a4:a4:f8:2e:1a:35:73:44:f1:
e3:5e:8d:0e:c2:11:1a:bb:67:62:fe:07:f0:30:93:41:37:b9:
98:2c:02:1d:2b:17:e7:53:2b:e9:01:52:dc:1e:71:5c:99:5a:
0d:a5:84:0e:80:c9:85:53:00:47:11:e9:f3:9d:cf:e2:1f:71:
16:2d:f5:73:bf:61:e5:bc:04:56:06:fa:d6:b3:24:27:df:85:
68:0b:ea:9f:14:d3:cc:56:c0:b1:0c:60:a7:cd:62:71:6b:4e:
94:2b:ff:1a:30:a4:40:f0:22:34:10:01:78:6c:71:5d:2e:3f:
5d:66:f0:33:89:41:b6:cf:1f:82:f9:70:72:92:c2:bc:38:57:
2e:e7:8e:15:0a:01:c6:2a:90:eb:5a:f8:91:7c:21:11:3b:28:
f9:5d:e0:b8:6d:7d:42:e3:7e:f4:b6:8f:6f:0c:51:3c:cc:70:
e9:26:96:e1:ac:b9:44:09:ee:a5:a7:84:cc:25:f7:f6:11:a1:
0e:7d:5e:f7:d2:d6:44:22:ce:0b:1d:50:13:38:de:20:48:2a:
a5:a6:07:17:25:66:a3:92:0e:2f:d6:a2:3e:cb:3b:ac:b7:bc:
8c:f1:dc:8b:82:5e:b4:9e:8f:bf:24:16:dc:1f:9c:7b:c2:67:
3a:95:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:22 2026 by rpki-client