Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: Yom2AuHJDOOkcyE4n8CCXtQrG4IEC68JS8MZuV/EloE=
Subject key identifier: DF:F1:65:2A:87:A3:C8:77:3F:15:5E:0D:F4:49:9F:55:C8:2C:B5:10
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019CAC475CA0E864160FC079FD39AE39799D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 1138
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: 8dW6ZFnbVXnf42qoHCRZfkVOadMW0MBnPh6JExkYN4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5c:a0:e8:64:16:0f:c0:79:fd:39:ae:39:79:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=dff1652a87a3c8773f155e0df4499f55c82cb510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:1e:c0:3c:70:97:46:89:e0:da:ab:ae:2c:
72:51:38:73:86:2f:b7:76:51:08:35:ab:15:eb:48:
56:43:8b:09:7d:25:c2:ce:4d:32:8e:d1:9f:22:e5:
9c:00:7c:52:33:ec:f7:d6:7a:54:b9:95:b3:b3:b0:
c2:11:1a:b4:40:85:81:bf:8f:a7:c4:83:a0:e0:57:
1e:52:67:8e:d8:37:c2:02:fc:cc:e7:bd:81:5f:ad:
c3:be:af:eb:e0:52:fd:b8:f7:e9:25:fe:3c:47:2f:
e6:3f:5a:d5:b1:ae:06:5f:91:38:d6:fc:0c:d1:2b:
bb:54:bd:e1:3c:4f:66:54:d5:78:9b:7c:9b:cf:0a:
9f:11:65:d8:40:29:f4:59:d6:13:a5:1c:f7:27:52:
f2:5d:e3:2f:e8:13:ad:f3:0a:56:79:6a:70:7c:bf:
de:96:56:30:71:42:94:31:5e:44:f6:00:56:51:2f:
68:1f:92:88:08:17:56:05:6a:6a:47:2d:73:37:5b:
9c:ab:22:c2:4c:2f:99:71:f1:b4:1d:81:39:29:90:
1d:de:e0:1c:3a:d9:fa:57:ab:c3:c1:4e:8d:95:7a:
12:ad:2c:91:10:66:b7:db:88:ae:fb:84:4e:ac:85:
94:fd:8e:db:f9:7c:46:35:b2:83:a8:ef:2b:7c:ed:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F1:65:2A:87:A3:C8:77:3F:15:5E:0D:F4:49:9F:55:C8:2C:B5:10
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1b:a7:06:8c:77:85:b8:c3:42:8a:dc:27:dd:f0:0b:d5:0f:
dd:10:10:19:f4:2c:c6:cb:4e:c2:08:8a:ea:4b:b5:7f:12:25:
8c:5a:e6:49:76:da:a9:70:9c:69:9e:4c:61:b3:15:7e:47:a0:
b5:22:b0:8f:fc:43:3c:14:8d:24:00:d3:1d:e5:e2:b9:f7:e4:
f1:2a:ef:43:17:69:68:71:30:b4:1c:11:80:f4:da:41:13:7f:
d9:f7:b3:2b:b8:43:2a:6c:38:d5:c7:16:ba:6c:dd:80:70:da:
0e:41:a1:8e:cc:cc:c5:4d:7a:76:68:88:36:5a:bb:21:b9:cf:
a7:24:ae:e0:ec:73:6f:3e:43:12:d8:8e:cd:2a:b8:4d:e8:9d:
b3:60:0d:cb:94:16:d9:82:79:41:d4:31:c3:68:a0:b0:98:3b:
29:95:12:6a:9b:2c:47:49:d3:cf:3f:5b:b0:cb:9c:90:e5:4f:
65:4d:fb:19:76:fc:04:ec:e3:53:69:31:c1:e0:a5:1d:ed:02:
10:a6:11:6d:af:ef:1c:cd:21:f5:a9:f6:33:16:ff:bc:d3:91:
fe:0b:5c:db:0f:bf:ba:ec:cc:d8:6e:0d:e0:ca:8a:26:07:67:
b2:77:35:d3:4c:f5:9f:ba:fd:2e:5d:7d:c5:37:14:2e:77:27:
68:3f:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:01 2026 by rpki-client