Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: KvNJ4fB/YkEj5uLhiKZ9oXXrfa1EO2i5XYQ/Rs6gA1U=
Subject key identifier: FA:34:68:D1:CE:13:33:56:2A:C3:60:8E:B9:72:2A:39:56:99:D0:93
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019E3072DD6D1886EB0A5FD3FAD56B4553EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 1201
Signing time: Sat 16 May 2026 11:01:34 +0000
Manifest this update: Sat 16 May 2026 11:01:34 +0000
Manifest next update: Sun 17 May 2026 11:01:34 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: e+vzdzv7GYnKJVW+vSeF4izO1mo6sXsAavILdXUm1j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:dd:6d:18:86:eb:0a:5f:d3:fa:d5:6b:45:53:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: May 16 11:01:34 2026 GMT
Not After : May 17 11:01:34 2026 GMT
Subject: CN=fa3468d1ce1333562ac3608eb9722a395699d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:92:a5:cd:e3:a1:f9:46:bb:46:bb:7f:f5:
ff:a8:84:c0:f6:bb:e8:fb:0f:b0:ee:0d:47:3f:eb:
af:71:44:30:6d:c9:64:9a:b8:fc:56:36:76:cf:7e:
19:b6:78:30:be:50:0f:53:b9:1c:91:4c:5e:5c:75:
49:88:b4:80:a8:cd:9f:50:77:6c:8a:2c:39:0d:a3:
c1:4a:04:07:89:98:cc:67:2d:5a:ab:6f:fc:33:e7:
04:fc:82:14:99:be:5a:88:5d:92:91:4f:a8:e2:96:
c3:c3:eb:e6:7b:1a:05:a4:83:b7:46:30:08:c3:8b:
65:47:97:65:e4:b1:12:f7:e1:b9:5e:8b:55:77:0a:
b9:c1:82:3d:40:b6:34:51:22:cf:cd:a0:ca:c7:7d:
87:49:29:ee:ca:91:f6:5b:88:12:7d:d7:f8:3d:3b:
47:be:32:1b:54:4c:ab:7b:41:48:1b:49:5e:73:5a:
21:4e:89:2c:9a:dc:81:10:b0:68:03:24:05:28:7a:
bf:19:fe:eb:3d:00:b4:40:20:d0:df:5e:6f:3d:dd:
b5:74:e1:d7:b6:58:cd:c6:95:c6:f1:72:f2:ef:06:
29:41:31:92:74:b4:9c:85:33:15:a9:f0:93:db:a3:
30:bd:39:2e:c7:cb:52:26:e9:d0:bd:e0:76:e2:12:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:34:68:D1:CE:13:33:56:2A:C3:60:8E:B9:72:2A:39:56:99:D0:93
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dc:72:ce:7d:e1:1e:45:86:81:4a:e8:05:db:ad:4c:6a:22:
e8:08:01:b8:f5:c8:24:3f:40:f1:c1:77:bd:51:76:91:f2:9c:
bf:2e:1a:5c:9d:4e:4b:b4:b3:bd:ba:ae:d7:ca:9b:06:3e:a2:
10:3f:0a:47:11:9d:eb:2a:64:a5:b1:30:eb:19:59:2f:6c:6c:
91:98:46:d8:f3:88:00:1e:50:30:37:d7:2f:20:20:32:13:9e:
c5:02:a1:79:02:d7:92:17:45:c0:42:95:79:5c:fb:e1:46:f6:
4f:04:5a:3f:6c:40:f2:b8:e0:85:dc:e6:7b:7e:ac:07:1b:00:
17:b6:0a:d5:eb:4f:92:f2:3a:34:b1:2a:56:e5:06:91:59:6f:
b8:19:38:d8:ad:7b:6d:b8:1e:34:66:94:cc:99:00:0c:66:c8:
cb:d5:80:08:d1:d8:c8:ea:a1:4b:74:80:40:34:c5:3a:b0:2c:
1f:6e:91:9d:a0:14:6a:3c:d5:26:aa:61:78:3b:55:ea:f1:40:
dc:3b:1e:ac:c6:0e:eb:25:3b:3a:9b:5b:5c:02:c6:e2:8c:34:
b6:48:44:3c:fd:df:0b:cc:29:fd:d9:d7:32:71:1b:a0:4e:0d:
cb:66:55:17:6e:c3:38:72:bb:b3:be:95:47:b8:38:1e:76:ad:
ac:01:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:24 2026 by rpki-client