Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: o2uiSwqNGH3Riuy05HvFjCIezmbLEWMWIAT+9TkRzfA=
Subject key identifier: 52:34:3F:18:E6:73:B1:A3:27:64:C5:8B:52:1E:16:95:8E:B4:74:78
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019D98F501412EF3D361A3BDC520629CCC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: ofPAWZGFObs0dvmbEwwkhT2gdX8mEMJNMrPXwty6SC4=)
3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:01:41:2e:f3:d3:61:a3:bd:c5:20:62:9c:cc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=52343f18e673b1a32764c58b521e16958eb47478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:4d:5a:04:08:58:ab:bf:f7:c5:1d:03:2e:
1d:d4:bd:81:23:33:39:5d:dd:bb:5a:47:b9:74:1d:
df:b6:de:cc:a1:81:0f:77:34:4f:c8:97:e1:8b:06:
5d:98:86:9d:73:ba:40:93:3a:e0:79:c6:79:e0:b7:
6a:33:95:5b:3d:4e:84:f0:43:74:0d:ab:34:0e:61:
43:e7:b3:c8:48:e0:5a:9b:b7:29:55:dd:21:76:8f:
61:3c:b5:9d:93:a8:ee:8a:89:b9:d4:04:cb:ff:a1:
04:96:4c:8c:1b:14:5c:05:8c:9a:0d:ff:b6:d1:71:
e3:3a:a4:76:01:8d:e6:a6:8e:1b:c6:e3:aa:40:dc:
4f:68:de:b1:6d:99:13:a6:b1:7e:7b:98:a3:f7:b2:
40:21:06:bb:e7:98:e1:11:58:6d:76:59:38:b7:4e:
51:08:dd:c6:67:79:b9:f8:44:af:d4:26:8c:62:a1:
69:36:f9:c8:00:fa:3a:02:ca:4e:5c:a7:f9:bd:f7:
bb:3c:bf:5f:34:6e:6f:ed:b6:6e:0b:32:00:c6:bd:
01:a0:aa:9a:6b:b4:74:cc:2d:e8:1b:2b:b6:7a:52:
bf:e9:8d:86:f7:f8:f5:38:88:e5:ff:e5:90:7a:e1:
3b:b3:72:06:78:15:b6:c7:73:df:2e:61:6f:8e:a9:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:3F:18:E6:73:B1:A3:27:64:C5:8B:52:1E:16:95:8E:B4:74:78
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:98:15:55:ca:71:53:cf:b8:ab:cc:32:f6:44:63:e8:2e:
f1:89:ee:d3:bc:6f:69:65:5c:bd:fc:b6:f7:6c:aa:15:da:79:
5a:08:cd:8d:e2:85:d5:12:33:73:a3:a3:64:6c:84:07:72:62:
34:5f:49:d6:26:67:36:5b:1a:b7:39:8e:f6:7a:7b:51:80:68:
90:bd:30:a0:6f:92:0c:9e:c5:a7:60:28:08:67:55:50:93:0e:
d4:71:02:5d:be:fb:00:a0:e2:f4:29:da:e8:25:53:52:13:97:
ed:15:0d:f5:81:67:f2:dc:33:b0:41:bc:a5:9d:3b:03:6c:86:
f4:83:3e:f6:97:e5:30:cb:6a:64:81:24:04:7f:b4:42:85:95:
4e:79:fe:5c:27:93:35:94:a4:ae:4b:dc:66:1f:82:07:40:fa:
db:f4:0f:71:15:e6:d3:3a:b9:68:76:e4:52:a1:15:83:bc:e7:
13:46:ee:c6:d0:f2:10:94:41:38:22:da:4c:8b:41:e1:eb:f2:
ca:0f:40:31:3b:42:41:ab:97:6e:f0:a6:51:19:d2:eb:c5:e4:
a5:be:ce:1a:e6:d6:ed:f3:03:77:32:e2:30:bc:a8:d2:97:c9:
5d:0f:20:9b:cf:e1:4b:53:b7:d2:3f:d6:b8:df:dc:8c:d3:d2:
45:25:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:35 2026 by rpki-client