Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: weFnB/UmMkrTaW1WyiQ3qg0DjJAuHuwqcIeUnhfmjyo=
Subject key identifier: 82:2F:09:08:D5:55:9F:62:59:EF:6D:66:5F:2D:EC:5F:73:DA:73:0E
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 01A0C8C70EE67FB8D90781F86406CF7DCAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 1359
Signing time: Tue 22 Sep 2026 11:01:23 +0000
Manifest this update: Tue 22 Sep 2026 11:01:23 +0000
Manifest next update: Wed 23 Sep 2026 11:01:23 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: oq11SfS9VmKxEXpoHVtgJRjCmqkdBnHZNh86Z7xU338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c7:0e:e6:7f:b8:d9:07:81:f8:64:06:cf:7d:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Sep 22 11:01:23 2026 GMT
Not After : Sep 23 11:01:23 2026 GMT
Subject: CN=822f0908d5559f6259ef6d665f2dec5f73da730e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:1e:2d:d9:ad:44:be:f6:5e:7d:dd:de:55:
5f:ea:ac:4f:14:e6:b3:a2:5f:18:ac:2b:2d:6b:ef:
ef:98:95:a5:3e:2e:41:e6:a7:db:59:55:cd:e8:2f:
a0:3d:f8:83:33:6b:e1:f0:b7:db:bf:0b:8a:5d:a2:
34:1b:0d:66:44:e5:52:7e:c3:f4:51:bf:d4:ca:a7:
7a:00:11:39:71:f6:d3:f0:fe:3d:1c:63:07:ef:21:
91:33:76:f4:13:b2:7b:b0:65:48:06:88:58:db:16:
36:c6:ba:23:e1:49:b0:1b:41:5a:f6:87:6a:b3:0b:
8f:fd:0e:5d:92:e9:94:4b:6b:6b:5a:df:34:04:a3:
1a:96:ed:61:b0:d0:09:f7:90:d0:b5:ee:88:6c:79:
9e:20:e0:e4:40:0b:7e:b2:03:1a:d6:b3:b1:11:f9:
2c:78:52:86:8b:47:35:32:62:a5:95:c9:8f:a2:f1:
cd:60:1b:cc:de:0c:06:76:8f:06:8b:65:2b:4c:aa:
65:9f:56:b0:fd:af:cb:a1:32:72:ea:e7:6d:86:2e:
fb:77:32:d8:6f:36:35:98:ec:a2:08:f9:60:d1:51:
7e:62:eb:cf:ca:bd:89:81:e6:76:ae:7b:83:ca:fe:
0b:a2:00:37:09:bc:61:ce:92:69:85:11:1e:92:df:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:09:08:D5:55:9F:62:59:EF:6D:66:5F:2D:EC:5F:73:DA:73:0E
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:78:32:b4:c5:ad:40:44:65:8c:88:75:76:b1:d5:06:80:03:
78:79:6c:61:bc:24:19:b9:9c:b1:51:35:39:69:e4:c9:b8:8d:
e0:1d:ff:14:2b:97:2f:93:75:eb:78:92:45:b7:b7:e2:f6:65:
50:73:6f:74:e3:4a:7a:ae:fd:e5:2f:14:99:94:48:d6:75:f2:
2b:df:67:57:18:72:ab:68:8e:c4:83:33:aa:02:75:44:43:7a:
ab:23:19:7c:80:ac:74:aa:05:9e:a0:ab:c8:22:df:24:08:3a:
0b:a4:f1:a0:77:f8:2a:b3:03:0c:90:e6:35:5b:c4:04:63:6c:
53:0d:9c:2f:a5:18:4d:d2:35:f9:13:71:08:05:38:d6:7c:0a:
31:1c:66:17:ce:db:fd:57:fd:04:af:05:5d:70:fe:81:40:03:
1d:dd:25:72:a8:df:bc:25:30:68:1e:c1:e5:65:da:36:fc:59:
a2:03:31:dc:15:c4:0d:3c:73:9d:27:e8:41:3b:36:8e:35:e4:
ba:0f:36:9a:06:87:36:b0:6e:9e:86:92:63:4f:75:51:2d:2d:
70:2f:08:19:97:4c:1d:02:ab:5f:bb:5d:54:a3:93:38:aa:9f:
a3:7d:43:82:31:3b:2e:93:f6:ba:99:6b:cf:0d:f9:bc:15:cf:
e0:76:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:44 2026 by rpki-client