Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: ex6XTEPk2qp350nrp/ufZD4u27jJsg8/azbiANyoD5g=
Subject key identifier: F3:DC:F8:DE:15:5D:B4:D2:B4:FA:2F:92:48:BF:78:60:40:3F:05:79
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 01A0C2FAFB0E6C9990709F718B7BCB5428DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 1356
Signing time: Mon 21 Sep 2026 08:00:23 +0000
Manifest this update: Mon 21 Sep 2026 08:00:23 +0000
Manifest next update: Tue 22 Sep 2026 08:00:23 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: rKCs8P3cz5nFhDjyrEg1/iWoY1HJ4EtRZWagE8/e8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:fb:0e:6c:99:90:70:9f:71:8b:7b:cb:54:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Sep 21 08:00:23 2026 GMT
Not After : Sep 22 08:00:23 2026 GMT
Subject: CN=f3dcf8de155db4d2b4fa2f9248bf7860403f0579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:1a:d9:4c:29:bb:95:5f:01:4a:b3:5a:4a:
83:f5:61:78:68:3c:87:1c:0a:91:ad:89:de:6d:ce:
f4:7a:08:14:0c:5c:c2:11:33:ef:fb:56:58:98:be:
cb:78:73:f6:42:72:8c:b3:39:a2:68:32:69:9f:c5:
45:25:e9:9b:b6:c7:7c:aa:b4:82:4c:38:0f:27:68:
0c:f5:07:09:24:b0:e0:dc:9b:a9:52:ac:fd:be:60:
d5:33:b0:92:9e:ca:c9:f9:12:36:8e:1e:e0:ed:52:
ab:24:90:0b:e5:9a:12:1e:a2:c2:a7:60:69:03:4f:
83:4a:c8:81:cd:6d:00:d3:8c:7d:cc:0e:7e:d9:3d:
ac:d3:34:55:dd:69:c6:93:ef:c9:0e:9d:9a:b2:a5:
62:12:7a:a2:d2:5a:df:be:6d:2e:2b:b3:75:52:ba:
8d:5e:e0:95:b2:94:ff:e6:78:35:eb:6f:8c:da:b0:
30:16:b9:8b:69:f3:77:a1:a0:cc:ac:c1:fc:41:a1:
eb:fb:e4:c9:b5:03:a3:48:4d:c1:3e:3d:fe:16:ff:
61:b5:b9:d1:32:3b:3d:ee:69:39:a2:8b:00:5f:94:
24:3f:d0:27:7d:ac:52:f5:f5:82:b2:c2:96:6e:ba:
41:51:3e:f5:78:c5:50:08:b9:4b:6c:dc:63:df:5f:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:F8:DE:15:5D:B4:D2:B4:FA:2F:92:48:BF:78:60:40:3F:05:79
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:d4:a4:3a:c2:58:32:af:44:ca:00:b6:0a:3e:15:ce:d6:
8a:d2:ce:e0:ba:46:7b:3a:2d:24:e3:26:b9:3a:1d:45:a7:b6:
ab:43:4d:58:80:0c:60:4d:ba:59:c5:ca:a3:56:ae:de:8d:2d:
01:2d:ec:0c:d8:cb:c8:91:1d:3e:85:3f:4f:24:56:21:5d:39:
bc:b3:20:42:28:51:b0:98:0c:45:c6:d2:60:71:93:ed:56:12:
71:b0:e6:5e:e0:8d:09:96:75:f0:eb:7f:7e:ab:70:ec:84:0c:
e6:7a:eb:b4:3e:35:a7:0b:fe:df:1d:38:49:7a:6e:e1:0e:19:
d8:e5:f7:7e:59:b2:86:4e:ee:71:c5:03:ba:47:26:31:50:1a:
22:ca:5b:25:4c:45:85:7e:aa:76:7f:47:0f:1c:19:30:29:62:
82:82:c9:94:c0:e8:c9:43:52:05:7b:21:d4:92:62:83:9e:cb:
b8:e2:63:6e:9b:37:9a:0e:68:67:1a:7e:7c:0a:a7:e4:28:d1:
34:a5:d4:81:8a:d3:8c:d6:26:dc:93:20:37:23:84:a2:36:49:
3f:ff:5a:51:9b:f7:17:53:e3:f7:c3:bb:8c:17:16:ee:7b:d8:
a9:0d:37:b4:9a:25:03:35:70:63:80:c8:43:bd:43:09:35:37:
be:20:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:29:13 2026 by rpki-client