Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: xl55Ige89D2hqjmwZgSzR9LoRYyZWPrW683l4eBJFrg=
Subject key identifier: 6D:34:EA:19:6A:93:11:7B:59:ED:1D:9A:40:8D:25:D0:5B:CB:86:DD
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019D1F4B70815DEC89C91EAD5DE80EA2F311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1884
Signing time: Tue 24 Mar 2026 10:02:10 +0000
Manifest this update: Tue 24 Mar 2026 10:02:10 +0000
Manifest next update: Wed 25 Mar 2026 10:02:10 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: /Rd0lYusj5CUoRZJUO1nNk0WOZsiuqb2d2Z71rXlrLw=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:4b:70:81:5d:ec:89:c9:1e:ad:5d:e8:0e:a2:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Mar 24 10:02:10 2026 GMT
Not After : Mar 25 10:02:10 2026 GMT
Subject: CN=6d34ea196a93117b59ed1d9a408d25d05bcb86dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:49:64:57:7b:c4:0c:c9:f8:90:fb:56:bc:
8c:81:c2:0d:9e:72:ed:8c:ab:05:ed:0e:02:4b:51:
7d:5a:0c:1a:8b:e5:07:fd:25:b6:f6:ce:c4:26:1e:
b8:6e:85:a9:08:78:78:b4:6c:bb:a8:83:0b:87:e5:
e5:33:b9:82:5d:3e:5d:93:65:55:bc:1e:a1:f8:a5:
e1:63:0a:99:8d:1a:20:21:4f:87:a4:33:bb:fd:9a:
82:36:c7:4b:c1:64:3f:68:18:13:9c:5c:34:1a:e2:
02:6b:27:24:a0:34:9e:47:cd:ae:57:dd:56:5d:87:
bc:44:da:ed:17:51:70:97:af:a3:6f:6b:5b:42:3d:
8a:98:d0:2c:f0:01:d3:29:b9:e9:e0:d8:5b:ca:87:
fa:ae:dd:4a:90:dc:2a:4c:e3:02:30:8e:ef:36:5d:
9b:a5:60:4f:f6:f2:a1:52:7d:e8:69:e3:8f:e3:b7:
19:8b:a8:11:72:65:2e:dd:91:6e:91:22:45:bd:e5:
c0:4c:86:5a:d9:ad:61:16:2e:f3:08:57:db:74:52:
54:a1:5a:f8:31:ae:9a:d7:4c:ae:41:00:81:56:62:
53:24:f1:e8:11:ad:af:1a:f9:ba:e7:1f:e3:46:61:
41:fc:09:52:b1:71:d4:df:cc:db:43:78:2a:f4:1d:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:34:EA:19:6A:93:11:7B:59:ED:1D:9A:40:8D:25:D0:5B:CB:86:DD
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:87:24:d3:84:f6:fb:df:5a:ad:bb:e3:3b:55:b0:98:fd:
75:d7:8a:6e:f4:30:c8:5e:e0:e2:83:b6:29:7b:a6:c6:01:7a:
50:3f:a3:ed:14:2f:74:ff:6c:78:58:f9:bb:92:f3:e9:1a:fb:
b2:be:55:10:0f:8e:ac:1b:c1:c3:19:56:7d:76:3f:a5:0b:41:
8f:b2:a2:cb:c2:bd:ee:28:96:1b:c9:b2:e8:5d:1d:e8:3d:7e:
c9:f0:da:34:26:fa:37:2e:33:be:64:d5:28:98:14:d4:61:65:
36:7f:39:db:33:d6:64:8e:94:5b:57:67:79:91:4c:19:7d:58:
7e:73:bd:c8:87:32:8b:a1:08:8a:bb:fc:f3:9d:42:74:02:8f:
2d:4e:5c:e3:7c:b6:4f:ae:df:85:5f:6b:e1:93:b7:5e:99:fc:
bc:1e:0f:07:27:2c:56:73:b3:e5:a4:3f:42:07:15:c2:c8:47:
fd:c1:4e:e9:4b:b1:55:70:cf:24:3d:b6:9b:06:0a:bf:d5:7d:
00:57:95:a3:7d:b0:d5:4f:6f:e5:99:81:68:4b:ec:95:b7:7d:
f1:fd:fc:1d:28:43:72:b2:43:9d:bb:b6:51:69:ed:d2:02:90:
01:e2:a6:a6:09:fe:c1:7d:90:80:17:a3:40:b3:d8:8f:57:2d:
85:ae:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 17:04:15 2026 by rpki-client