Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: Q2AJm7n4m5BKOxsS9tEhEZc9ZNOr+XfkIqr/n0DVQgQ=
Subject key identifier: F0:22:A5:6C:DF:4F:0F:B8:DD:6A:AE:67:90:B7:C1:65:2C:5F:52:D0
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019E2F970A948BC7F6661A8FE7506BD9C1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 07:01:28 +0000
Manifest this update: Sat 16 May 2026 07:01:28 +0000
Manifest next update: Sun 17 May 2026 07:01:28 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: K2MJTpmnk4iQm5CoyEXO0z1fF54Fq10Ygg38TpPl9Ms=)
2: OlMlgs31AIpaAYyvx-pkZgJRnD4.roa (hash: E/uAqkcgJ8DHc0dc0BC15Pxbqo2GjJOGoAJB4FHkYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:0a:94:8b:c7:f6:66:1a:8f:e7:50:6b:d9:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: May 16 07:01:28 2026 GMT
Not After : May 17 07:01:28 2026 GMT
Subject: CN=f022a56cdf4f0fb8dd6aae6790b7c1652c5f52d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:66:61:c3:b0:f8:c4:52:74:ff:ce:9b:8c:
c4:b2:04:b4:48:6c:50:a1:e9:76:ee:67:f9:aa:86:
ba:01:e4:ae:13:d7:fa:de:53:1a:00:10:39:d3:94:
e8:bd:c4:60:09:3b:ee:f8:24:07:57:f5:bb:6a:ea:
0e:3b:36:b7:64:ae:db:7e:07:f5:e2:8d:d9:0a:1c:
ae:c5:af:f6:91:c4:76:e4:89:ce:32:11:0b:0f:0f:
bc:a7:32:0d:30:83:f0:ff:49:f6:de:76:97:45:92:
e0:18:0f:90:84:d2:7d:f9:93:e3:5a:e5:44:2c:2c:
f3:19:85:e4:c0:44:4f:9e:b2:bf:84:1a:34:74:a5:
98:70:a5:77:14:e1:12:d1:26:90:4e:ad:79:70:a5:
b8:c3:26:65:3a:36:17:02:4d:8c:3e:2c:e9:cd:b9:
58:71:5c:10:ee:e7:f0:0c:5a:ef:19:9a:6f:c6:01:
3f:e4:fd:fb:db:2d:b6:ed:ee:bc:cb:62:7c:77:f8:
d0:d5:73:4e:f2:e0:38:26:1a:17:52:29:c1:8c:8a:
fb:87:44:4e:60:1f:6a:71:4a:19:2d:6a:41:37:61:
1d:8f:8e:5d:23:fe:2b:3d:40:1c:51:5e:43:43:73:
4f:29:91:5f:32:4c:c1:65:52:58:f2:df:80:bf:5d:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:A5:6C:DF:4F:0F:B8:DD:6A:AE:67:90:B7:C1:65:2C:5F:52:D0
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c2:53:36:dd:57:e3:59:56:86:f8:81:9c:ca:bb:08:f7:f9:
96:f2:68:f9:32:f0:9a:a3:94:e5:ad:a0:b3:0e:7c:df:73:c7:
b0:0a:fb:86:65:08:2b:ba:2e:1f:44:77:36:6e:3d:90:ab:9b:
33:80:d3:40:ad:57:47:5b:ab:07:59:95:d2:42:d4:b6:62:64:
89:c2:cc:08:53:dd:a2:30:4d:36:ef:60:9e:ae:c3:6a:47:5f:
f0:82:a6:fd:c7:3d:20:08:e4:6a:06:50:2a:4a:4d:da:84:53:
69:9f:4e:0b:35:f1:ad:60:19:83:2f:75:77:26:f4:93:a3:5a:
0b:4f:f1:63:35:76:5c:8a:8b:6e:bd:3e:9c:b8:1a:7d:89:37:
09:55:67:91:68:1f:3e:38:d4:6d:94:7a:0d:d1:78:a7:b1:cb:
90:8f:0f:12:9a:73:36:7d:ce:b9:bf:60:37:20:89:7b:c8:c0:
83:ae:82:8f:7c:ae:bc:be:c8:ef:99:58:45:08:7a:00:11:7c:
b8:25:b5:3b:e9:c9:7c:56:0a:51:44:3e:87:05:88:62:41:23:
0e:76:6a:98:20:73:ed:b1:e6:4a:43:2d:b2:2d:73:77:45:93:
f2:d6:c5:4b:1c:69:7c:75:e8:6a:38:0d:eb:2c:7c:28:86:94:
11:77:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:29 2026 by rpki-client