Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: 9wHhbcqcWmgA/+SQEwz+FqFQV4ayEhZ9PENidVnrReo=
Subject key identifier: D6:8D:13:5C:FB:DF:26:81:3A:FB:C3:B5:FE:E4:DB:5B:A5:E4:B8:0D
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019FA90742B8F002059C770B7DBA0CC753E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 12C4
Signing time: Tue 28 Jul 2026 14:00:52 +0000
Manifest this update: Tue 28 Jul 2026 14:00:52 +0000
Manifest next update: Wed 29 Jul 2026 14:00:52 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: NYVXMeEHA2tb+g5DhItsNomaXJQ/KNZhp9Q3Ogq7K4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:42:b8:f0:02:05:9c:77:0b:7d:ba:0c:c7:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Jul 28 14:00:52 2026 GMT
Not After : Jul 29 14:00:52 2026 GMT
Subject: CN=d68d135cfbdf26813afbc3b5fee4db5ba5e4b80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:4f:98:64:0f:d6:42:97:70:62:52:e5:57:
ba:79:4e:9d:a7:fd:43:c6:d5:65:5f:51:d2:ed:62:
df:f8:57:d7:1e:e4:22:0d:14:c5:84:45:54:e1:63:
d1:86:01:65:db:d7:a1:29:3a:b6:ef:34:9e:29:b0:
b4:58:81:59:2a:84:da:14:d0:11:4c:82:2c:4a:1b:
fb:97:67:6c:db:14:50:0e:64:86:b5:d8:90:14:ed:
aa:42:c7:52:1d:3c:db:fc:fe:a8:d7:0c:41:36:25:
64:4b:7f:cf:56:76:a3:0b:74:92:75:0e:32:70:bc:
f9:40:f6:7c:1a:6c:7e:44:7f:ec:19:38:a6:8d:62:
94:37:a1:a4:65:c7:25:8c:d3:4b:b9:bd:88:ef:19:
4a:57:90:d2:1c:08:a5:f4:0a:88:2b:c3:8a:ca:18:
47:52:c8:05:c9:f3:a4:12:d8:04:79:43:57:90:02:
0b:9d:a2:7a:33:59:63:d9:37:40:5a:af:19:3c:6e:
ed:da:2c:40:47:94:42:37:c8:2d:7d:e4:33:a5:b8:
0b:01:f1:20:3d:b4:7f:24:b4:1c:92:0b:c5:d1:dc:
07:75:84:cf:58:f4:fd:b6:7d:19:18:33:db:35:db:
16:32:de:d5:3e:30:1f:b3:8b:95:71:01:f0:37:b8:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:13:5C:FB:DF:26:81:3A:FB:C3:B5:FE:E4:DB:5B:A5:E4:B8:0D
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b4:fd:fd:91:f9:eb:1c:bc:88:80:2a:b8:1d:7f:f1:c3:e8:
1e:f0:b5:99:a6:f2:32:3e:62:b4:b7:39:aa:2a:36:29:4f:ea:
d9:2c:a3:fb:8a:96:cd:18:2a:6a:1b:d2:f3:28:cb:3d:65:75:
b5:22:ed:00:35:2a:37:60:4a:a3:82:2e:7a:35:3f:28:5e:73:
6c:25:d2:ba:4d:e3:ad:52:1b:df:2a:19:39:de:bd:75:3d:ce:
73:12:58:b0:d3:fe:b7:ff:9e:11:0a:5a:f0:81:4f:f1:58:06:
2c:e6:72:bf:35:4a:79:70:ef:09:e5:d5:45:00:aa:c2:c4:58:
12:79:02:e5:cc:42:74:48:66:ea:bf:b5:23:fd:b9:c8:64:ae:
22:2e:11:dc:b1:58:db:cd:37:a3:a8:3f:d9:54:a3:1d:ea:51:
a0:2a:de:44:ff:4c:14:6d:1f:5c:09:49:f0:6c:82:3b:43:89:
fa:17:a8:4e:42:e9:a2:ef:f1:0a:e8:f2:5a:ba:10:c3:29:9c:
b8:54:0d:74:c9:fc:3f:4d:0a:ff:bf:49:40:17:25:00:78:cc:
05:f0:a6:42:d4:2c:cc:96:a1:a2:8f:97:28:45:7a:f8:ed:4c:
49:87:2d:a9:48:57:05:aa:37:44:f3:d3:69:e4:03:39:e5:77:
e9:e4:94:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB0K48AIFnHcLfboMx1PgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWJmMDI5MjhjY2NiNTE2YjcxOWZlNTU4ODg0ODQyZjE5
YzA4NzcwHhcNMjYwNzI4MTQwMDUyWhcNMjYwNzI5MTQwMDUyWjAzMTEwLwYDVQQD
EyhkNjhkMTM1Y2ZiZGYyNjgxM2FmYmMzYjVmZWU0ZGI1YmE1ZTRiODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5ZPmGQP1kKXcGJS5Ve6eU6dp/1D
xtVlX1HS7WLf+FfXHuQiDRTFhEVU4WPRhgFl29ehKTq27zSeKbC0WIFZKoTaFNAR
TIIsShv7l2ds2xRQDmSGtdiQFO2qQsdSHTzb/P6o1wxBNiVkS3/PVnajC3SSdQ4y
cLz5QPZ8Gmx+RH/sGTimjWKUN6GkZccljNNLub2I7xlKV5DSHAil9AqIK8OKyhhH
UsgFyfOkEtgEeUNXkAILnaJ6M1lj2TdAWq8ZPG7t2ixAR5RCN8gtfeQzpbgLAfEg
PbR/JLQckgvF0dwHdYTPWPT9tn0ZGDPbNdsWMt7VPjAfs4uVcQHwN7gnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaNE1z73yaBOvvDtf7k21ul5LgNMB8GA1UdIwQY
MBaAFAEb8CkozMtRa3Gf5ViISELxnAh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYt
N2U5YzBiMDIyNDhlLzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYtN2U5YzBiMDIyNDhl
LzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7T9/ZH5
6xy8iIAquB1/8cPoHvC1mabyMj5itLc5qio2KU/q2Syj+4qWzRgqahvS8yjLPWV1
tSLtADUqN2BKo4IuejU/KF5zbCXSuk3jrVIb3yoZOd69dT3OcxJYsNP+t/+eEQpa
8IFP8VgGLOZyvzVKeXDvCeXVRQCqwsRYEnkC5cxCdEhm6r+1I/25yGSuIi4R3LFY
2803o6g/2VSjHepRoCreRP9MFG0fXAlJ8GyCO0OJ+heoTkLpou/xCujyWroQwymc
uFQNdMn8P00K/79JQBclAHjMBfCmQtQszJahoo+XKEV6+O1MSYctqUhXBao3RPPT
aeQDOeV36eSUSg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:23 2026 by rpki-client