Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: y3DyAd6LWA8Zy/4EWUk+4Mh2cy9FonVeb8nUuCfNuPs=
Subject key identifier: E5:E0:9C:D3:47:D9:FC:D0:A2:29:AE:5B:19:AC:48:94:FF:33:13:9B
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019D3752BA19CF8922741B76A33820043268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 1180
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: CwY0/JGnCwXrARqqYAls3XoQIgTePknn/6tG+3M4eTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ba:19:cf:89:22:74:1b:76:a3:38:20:04:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=e5e09cd347d9fcd0a229ae5b19ac4894ff33139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:3b:71:fd:3f:1d:63:de:25:74:e1:00:34:
09:d6:9d:66:3b:68:62:88:50:a1:69:3b:a9:d1:08:
66:d8:56:fe:5c:23:57:b8:1b:55:cf:df:d5:a5:fe:
00:85:3c:ba:1f:d0:a8:c6:17:50:cb:30:1d:a5:57:
c8:46:e9:92:fa:0e:19:e8:f4:10:5e:43:a1:be:e4:
36:87:9f:ae:5c:33:d1:bb:ef:21:18:e2:6f:3a:4c:
cf:90:cf:1c:44:65:8d:09:b6:64:86:29:05:35:be:
cf:96:e0:c6:04:36:03:dd:95:c8:97:ec:42:9d:22:
a9:38:85:48:94:aa:37:d9:39:b4:1d:0a:84:f0:23:
58:ea:94:37:72:6d:6b:0f:9c:90:16:02:53:c8:23:
4e:16:f0:fd:97:04:9d:b2:3e:64:64:c2:39:ea:fe:
16:ff:5a:36:58:d2:09:01:a7:11:45:a5:c4:4d:44:
f5:cf:9d:0f:39:d3:c3:66:cb:0b:a1:b5:74:38:e4:
da:cb:a8:b9:21:c5:7f:31:f7:a5:08:a1:34:b1:57:
26:ae:79:f9:76:9c:7e:dd:16:62:b8:b2:37:15:75:
18:f9:1e:6b:a7:74:1e:ab:b9:7e:97:80:e9:77:fd:
ac:28:34:08:32:97:58:c5:ca:ee:24:f7:78:1d:37:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:9C:D3:47:D9:FC:D0:A2:29:AE:5B:19:AC:48:94:FF:33:13:9B
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ef:39:de:c4:aa:7e:27:4f:ea:da:50:05:bb:36:2d:c4:c2:
ee:33:78:a9:47:66:e7:c3:81:b8:f5:05:50:95:b9:d7:38:83:
ea:32:87:d7:5f:67:0c:f5:a7:82:c2:3b:1a:8e:fb:3f:c3:1b:
d9:84:c7:ca:4a:90:65:8f:c5:9b:f6:b9:e1:b3:c3:b4:98:73:
48:d2:08:38:95:e8:c6:10:72:8d:71:31:04:e4:e6:db:c7:6a:
49:9c:be:e7:05:4e:00:b3:45:75:59:bf:07:47:79:c6:34:58:
56:dc:88:da:9c:26:18:fb:b1:86:d4:7a:2c:82:79:c0:4f:b3:
9f:ba:83:00:b1:13:1d:5d:b5:d4:66:a2:4d:c9:58:57:67:3c:
9f:74:6e:89:24:a5:ac:37:54:4c:ba:b4:eb:8c:64:76:d1:4c:
8e:b5:0f:04:32:35:af:df:aa:67:d9:c2:72:b7:5d:5d:9e:b5:
3f:21:f9:31:92:ba:78:a1:f9:7d:8b:a2:0d:c6:7f:78:57:91:
3b:e9:87:42:a6:d3:99:9b:98:f8:f0:9c:b3:01:d3:b4:dc:fa:
aa:5f:09:7b:f0:5a:74:98:20:57:1b:26:38:0c:ea:c8:d6:7a:
15:99:47:df:0d:7e:5c:64:15:f9:e8:4d:64:ed:c0:8b:d3:29:
95:c9:89:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:52 2026 by rpki-client