Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
File: ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft (raw, json)
Hash identifier: aESjKqXUeEUpa6GwvTN/6yJeOOHm8WvGIMEcswHmf3k=
Subject key identifier: 70:FB:3B:92:93:B4:CB:4F:B8:DE:BF:89:C6:B2:7F:B2:31:3B:E3:17
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Certificate issuer: /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial: 019F36AAB5A8F5FF9F36ABBFFF91A5C720F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:03:04 +0000
Manifest this update: Mon 06 Jul 2026 09:03:04 +0000
Manifest next update: Tue 07 Jul 2026 09:03:04 +0000
Files and hashes: 1: 1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa (hash: 9d+iz6B4Z4xX5mHQ4/EpfJi09w1cOsmeX27jGLacUQg=)
2: ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl (hash: 2hGmb9Al3Nzpqe1cGEacOEZjen+vGi/0YT8LcUxFlNs=)
3: JgyHfDa-F26mJBen_nZoWt6VcN0.roa (hash: ka95gjqbnp5vTxYoWFPFDU7HoiwfqxAnl9QDgNI170A=)
4: KaDCW-vC8OxSYgmvnlwc2RGGcso.roa (hash: Gw4saiquCFr7/vJ07qJKsW4oGWHTcwpcNkMJOpqv4XE=)
5: L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa (hash: 7Al0u5Q3YV7dlLeAcQ+RUgnxhwI9m0WFEsG/SLzqm0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:b5:a8:f5:ff:9f:36:ab:bf:ff:91:a5:c7:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
Validity
Not Before: Jul 6 09:03:04 2026 GMT
Not After : Jul 7 09:03:04 2026 GMT
Subject: CN=70fb3b9293b4cb4fb8debf89c6b27fb2313be317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:0f:9d:e1:81:32:2d:8c:70:6e:6a:dd:9b:
86:e9:a2:e7:20:24:c0:3f:6a:c4:df:a9:aa:91:36:
48:f3:f5:e8:0d:c3:38:1b:5c:4c:ea:5c:ee:5a:91:
5e:e4:9c:e6:48:2a:a4:0a:0c:20:cb:06:73:43:1a:
d5:0d:c4:87:88:c1:45:b8:7d:30:d8:5b:e7:d6:5e:
a1:38:f2:86:75:45:76:5d:c6:f1:9a:7b:a3:5e:6e:
84:5b:a4:33:aa:1e:07:19:97:43:f5:ef:a8:30:8e:
b2:3e:0f:69:c7:51:6c:00:b6:34:2e:de:b5:e3:81:
af:c7:0f:74:9b:6f:c8:ba:7b:76:01:73:73:79:77:
7d:1a:83:67:6b:18:65:86:cb:d3:b3:f0:e7:19:5d:
ad:58:4e:59:9b:55:45:b9:74:04:f9:41:42:c3:11:
53:46:19:17:71:02:8b:33:bf:b5:b8:ad:a3:4c:7e:
7a:10:4f:b8:08:32:fa:4f:43:0d:33:cf:27:5c:15:
b3:63:6d:ea:df:8c:45:5d:ad:87:4e:a5:27:42:d0:
39:81:22:ca:22:24:41:0d:c1:cd:b7:5d:8c:2c:64:
ef:c9:f1:81:e9:bf:63:8b:6b:9e:4f:c5:08:31:eb:
2f:fe:cc:17:4e:81:be:d7:31:75:dd:4f:32:90:06:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:3B:92:93:B4:CB:4F:B8:DE:BF:89:C6:B2:7F:B2:31:3B:E3:17
X509v3 Authority Key Identifier:
keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:01:f0:38:69:0a:78:60:3d:57:13:f1:d5:55:1d:fd:bc:82:
63:7c:d2:79:19:60:b2:1b:73:e0:0e:f6:be:04:69:5f:d5:98:
4a:95:f2:77:cb:f6:ad:65:f3:0b:05:7d:b1:b4:ce:26:cd:23:
06:44:94:26:cc:2d:7b:08:b8:ca:19:e2:df:cc:3e:2e:4a:3d:
a6:63:5a:29:fb:c7:1d:a6:ea:2c:41:59:48:f9:17:a1:ba:2b:
fe:38:c6:d5:2c:43:c9:09:43:dd:7c:1b:48:27:58:6d:01:88:
aa:06:d1:4c:29:57:96:0b:32:d8:c2:85:fc:1f:51:1d:a5:e5:
52:0f:6b:64:3e:67:8c:5d:f0:0d:40:38:a4:c1:b4:d3:33:5c:
76:f0:62:50:a0:dd:7f:ac:bc:22:68:30:a6:1d:3b:aa:c9:c4:
05:fe:1f:68:50:e3:b4:80:a3:00:7f:44:c8:ff:d8:e3:6a:d8:
17:69:6a:6f:8d:17:01:05:f0:0b:7c:fa:79:c5:92:14:52:f9:
47:ec:2a:56:45:5d:92:38:c7:da:ff:c2:ea:9b:db:b2:de:1d:
d0:0d:15:cd:1f:4c:9d:df:50:ad:a9:8f:3e:c2:d9:8d:1f:14:
bb:80:40:15:11:10:d4:af:43:06:9f:9a:2a:3e:ab:b0:81:e3:
d7:4c:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:38 2026 by rpki-client