Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: nF5p5IvmvSOw5lScTRH0N/it6ORGEfa+96EmouYNI38=
Subject key identifier: CF:AD:8F:33:13:55:D7:37:B0:D8:99:C7:73:C5:FD:8B:94:5E:2F:23
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 019D992BBBF6F76D2C0AD7C3125EC058EEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 07D9
Signing time: Fri 17 Apr 2026 02:01:13 +0000
Manifest this update: Fri 17 Apr 2026 02:01:13 +0000
Manifest next update: Sat 18 Apr 2026 02:01:13 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: RwfMJRTa9Tvgfb0O37YLz17zMNKeHR3iE4TJnBdlyjg=)
2: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (hash: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:bb:f6:f7:6d:2c:0a:d7:c3:12:5e:c0:58:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Apr 17 02:01:13 2026 GMT
Not After : Apr 18 02:01:13 2026 GMT
Subject: CN=cfad8f331355d737b0d899c773c5fd8b945e2f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:f5:fc:95:ff:26:8e:a3:d3:1a:95:4e:bf:
65:16:cc:f9:87:75:d3:3a:c1:98:1c:67:24:52:fa:
e3:ba:c9:0a:16:2d:22:ed:31:70:ea:05:93:b8:70:
fe:e4:f7:b7:b3:65:b8:0e:d0:0b:ba:1b:2d:b2:b0:
76:2c:0d:f0:56:5b:9c:08:fd:4d:1b:20:45:b6:c5:
51:c1:9c:84:9c:62:6d:f3:ba:6f:e8:c9:48:bd:e2:
14:c7:cd:d6:5c:c9:40:80:8e:b3:6e:02:46:6b:cc:
04:b5:c0:64:fc:d3:42:86:08:ee:10:f5:4f:f1:1f:
2b:93:8e:c7:05:89:21:48:c8:01:40:d7:5c:1c:6c:
48:23:bd:31:d4:35:a0:ec:fe:d1:79:43:0d:b3:da:
4e:06:53:32:6f:e2:57:8f:6b:bb:cd:0c:22:d3:ba:
1e:6e:0b:7d:2b:b7:e4:33:f8:b3:2f:17:8c:b8:a7:
1e:97:24:2e:43:42:33:bb:4d:46:2c:b3:59:54:ea:
ca:45:8a:af:08:24:99:b2:3b:76:e7:1f:1f:8f:04:
82:ec:5d:a1:f4:1f:c7:c2:16:4f:d7:4c:d3:89:78:
eb:bb:1f:80:c2:45:21:79:a7:79:60:4d:d3:83:85:
b2:85:23:6c:1a:e0:0d:1f:44:c1:cb:43:7a:8e:83:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:8F:33:13:55:D7:37:B0:D8:99:C7:73:C5:FD:8B:94:5E:2F:23
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:22:09:29:db:4a:f3:4b:73:2a:ea:a7:20:98:61:31:a2:
a5:a1:65:42:8c:be:88:37:03:26:bb:81:21:cb:28:75:a3:3e:
3f:df:65:6b:bc:16:b2:11:f3:20:bd:9d:60:63:68:26:e4:56:
da:a5:d1:b3:8e:f6:40:90:3c:51:bb:f0:dc:20:29:51:46:9a:
e6:fa:fd:0f:6e:cb:53:87:40:bf:90:ff:aa:06:b2:36:eb:86:
31:6b:c9:7f:0d:d3:bd:d3:b1:7a:da:cd:16:11:93:8d:8b:00:
92:88:f8:b1:cf:c2:0b:f8:8e:ef:41:49:c5:10:57:43:e6:38:
c6:9b:3f:48:1a:c4:f0:6d:8f:11:eb:83:ff:85:c0:e1:ac:f6:
7e:8e:fd:63:a5:60:d1:47:ed:c8:c8:51:3f:ef:05:c5:0e:be:
46:c0:08:82:3d:c0:79:f5:e5:7c:a8:f3:ef:e9:bd:9c:b5:18:
0e:ff:6a:2a:4c:b1:78:dc:44:a9:6c:58:2e:93:eb:a5:7f:f1:
5c:31:e9:1c:9b:83:d9:61:35:a3:59:77:e4:6e:67:d8:6a:66:
a9:65:20:dd:16:5d:e6:6f:e3:00:81:9b:50:34:8d:d0:a7:31:
69:0d:06:6b:31:d4:73:4c:19:05:ea:d3:c6:4c:54:06:fb:e2:
86:7d:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:44 2026 by rpki-client