Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier: dRn52o6XpdNrFfi815SNV2L+CUspBQvgoTiyoul1WPg=
Subject key identifier: 1E:F7:4C:AC:2C:1D:68:DB:F8:79:9B:38:A2:35:5D:1E:0F:FE:00:AC
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer: /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial: 019D390A17B5C233B5BCB65F695C6E548CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number: 0380
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: 5leedp6VlUXsLsGEDqE1rrGWd92+yj5/j3AsQiQtBh0=)
2: l8PTvEKg1q3xibFISiKYXuYoQzg.asa (hash: EW6iPD7DNIHaYH6kQZEbC7i0XvcuUJ+cnKRZbNJcwko=)
3: zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa (hash: Eq7t794MZuOUyh5WfvsvEhySf6YH7sOyOdd9K7whuQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:17:b5:c2:33:b5:bc:b6:5f:69:5c:6e:54:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=1ef74cac2c1d68dbf8799b38a2355d1e0ffe00ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:d6:c0:04:32:88:92:fe:43:07:25:3c:ce:
15:19:1b:fa:13:67:cc:24:94:f3:01:88:bf:e4:37:
8b:f0:13:a1:78:62:a8:aa:e2:d0:4d:a5:14:b9:f9:
f3:19:79:75:6d:7d:67:51:a5:b8:8e:6f:06:0f:3b:
ff:fb:db:d5:13:d1:3d:da:65:da:15:d9:a1:cd:95:
ee:db:d7:1b:6a:f0:d6:d9:23:6a:2b:8f:7f:0d:61:
5b:11:c2:42:dc:9b:6e:96:de:66:62:dc:72:19:85:
c8:70:72:31:4b:6b:88:dd:cd:90:d6:c7:bd:71:6d:
1c:d4:cf:41:c3:f1:9a:18:e5:ab:0e:f8:8b:a0:90:
98:fd:8b:52:46:9d:70:63:22:52:c3:a4:37:cb:5b:
a0:3d:3d:bc:ae:24:4d:14:99:3c:0a:6a:88:e4:6b:
13:0e:45:be:bb:f4:30:fe:6f:6d:c4:f6:6e:68:f8:
a5:10:60:ec:8f:46:39:3f:68:40:8c:b7:c0:aa:1d:
4b:f8:58:65:f6:b3:a8:c5:27:a0:ee:b8:54:f3:39:
39:fa:5c:eb:ae:64:9d:5f:a1:22:60:8a:ee:e0:a0:
67:47:2c:b7:fc:c3:c6:0a:ce:4c:44:e1:da:86:07:
48:e4:cc:22:73:e5:f1:95:f6:ba:2d:d3:df:e6:f7:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:4C:AC:2C:1D:68:DB:F8:79:9B:38:A2:35:5D:1E:0F:FE:00:AC
X509v3 Authority Key Identifier:
keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:79:90:f5:c5:79:2b:ae:c5:a8:e4:c3:37:20:2e:52:3a:
33:7b:7f:a9:20:25:60:65:44:e4:d9:5d:20:0d:a0:7d:4d:4e:
57:7d:77:99:24:f0:7a:00:db:1f:7b:46:54:5b:96:35:1d:8d:
f1:e7:53:96:2d:ec:53:be:75:09:c7:a5:ce:3e:1f:fd:30:8c:
a4:14:52:cf:8e:67:b0:97:67:5a:83:ed:96:85:cf:ac:df:38:
49:c0:83:fa:55:35:32:5b:2b:04:7f:23:0c:7b:c5:f4:6a:43:
d5:cd:04:2d:a7:db:f4:ea:b7:f1:e5:0f:38:84:9a:7f:72:93:
52:e7:59:17:b9:11:16:3a:7d:00:8b:87:fb:77:63:91:42:24:
84:49:af:11:da:56:77:62:5a:b3:8c:f0:1e:e7:66:07:01:51:
0c:97:bf:82:9b:12:bf:e9:a5:d7:ad:54:c0:7d:97:70:dc:e5:
1e:f9:2a:e0:20:80:69:34:7d:36:b8:fe:90:f0:01:a7:1a:cd:
e0:7c:24:dc:22:dd:82:35:62:46:dc:f3:56:28:50:78:63:ca:
c6:a4:dd:cf:35:fe:b5:04:94:40:df:48:b2:2c:b6:d3:93:be:
ec:ce:32:03:80:49:7b:55:87:96:75:90:f7:67:4f:c2:de:ae:
ee:0e:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:23 2026 by rpki-client