Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: /YVIVz4I9xljSbp2kfgZ/OQx+0KEd0iSbck9neAlWXk=
Subject key identifier: C2:FD:1E:B4:83:D8:7B:35:6C:DE:61:77:79:99:27:BD:86:E0:9B:07
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 019D389BCE5C22310D308F667FDCD51D9A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 07A7
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: tCmIb1BlFcFvUBUjDqfjE0wVY88ou3o+KSx5g9p3AUk=)
2: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (hash: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ce:5c:22:31:0d:30:8f:66:7f:dc:d5:1d:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=c2fd1eb483d87b356cde6177799927bd86e09b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:e5:4e:5e:c9:26:cf:63:b3:2c:aa:a0:64:
40:72:4a:98:64:b6:75:25:7f:b1:c7:98:99:8c:3b:
b0:47:5b:89:47:39:5e:55:71:63:94:9e:b7:18:f9:
33:d1:f5:41:2c:87:29:d6:ab:42:50:06:8b:d9:c5:
05:f7:b1:b1:51:c7:a5:83:a3:7d:df:db:96:e8:23:
64:f3:08:4f:aa:f5:c8:cb:64:0e:2a:5f:37:36:70:
a3:c4:cc:85:47:84:05:8f:d7:d9:d2:dc:01:de:db:
e8:7e:f5:db:83:23:79:9b:cc:d0:01:98:43:66:0b:
ab:28:d9:71:e6:45:cd:24:7e:19:51:5c:cd:62:7e:
66:f2:6d:18:78:ed:25:cf:92:fa:0e:93:a5:94:e9:
cf:59:a7:a6:6c:1c:b2:3b:4e:8e:be:0b:98:ca:04:
5c:ed:0f:48:62:45:bb:59:bb:0c:77:70:57:9d:5f:
b1:77:7d:e1:53:20:a3:40:c6:5f:55:e2:8e:e4:3b:
6f:44:ae:93:81:40:d6:e5:56:dd:84:b6:b7:85:e0:
bc:f0:12:43:c8:61:bf:e8:22:26:c5:55:56:7d:53:
a8:cc:e7:a2:9a:9c:06:4d:2d:6a:39:5f:3a:4d:04:
49:cd:7e:7c:40:f5:30:33:5e:40:32:8f:cd:4b:c3:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:1E:B4:83:D8:7B:35:6C:DE:61:77:79:99:27:BD:86:E0:9B:07
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b4:97:1f:9b:ff:01:45:0d:81:8e:bb:5a:0d:bf:dd:1b:2b:
e3:2d:69:cc:05:23:28:4b:0b:6d:3a:4d:9c:35:5e:aa:4e:43:
2c:06:0a:8d:04:24:63:4e:d6:a4:ae:12:36:ae:8b:bb:26:67:
22:ed:90:e8:cc:56:8c:81:e4:07:49:7a:4f:14:ff:d6:85:c1:
d1:21:7c:4e:29:21:b1:d6:1d:65:6d:a2:c9:2c:0b:42:5d:7a:
a6:d1:00:da:8b:55:15:12:27:b1:58:fc:80:a1:8d:cd:2c:e4:
d9:2c:d9:a0:a8:aa:ea:41:de:c6:53:cb:2e:76:ed:91:1a:e7:
da:4c:29:6b:8c:38:bd:a8:62:78:33:92:21:43:5b:27:3f:ee:
90:56:3e:52:0f:33:3e:84:35:41:63:27:c5:3b:ae:d3:66:63:
2c:ac:4c:48:5b:c2:4d:29:8b:55:3b:b2:50:76:ea:01:c2:23:
22:d7:a3:fa:c2:6e:f9:b9:3b:81:28:de:50:7f:0d:4f:a2:1d:
f9:a5:a4:5a:12:41:49:fd:25:87:dc:1f:d5:ec:a1:a0:d8:7d:
12:0b:7b:61:0a:e2:16:2b:a6:be:91:63:5a:c1:c9:df:06:39:
a5:a0:97:41:5a:57:c1:d2:7e:b5:b7:6d:29:8b:1b:79:81:60:
dd:bf:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client