Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: mdKXKNd7m+S2KVPZZEJqW3JV8DNYFwLrhc07AskU5vA=
Subject key identifier: AA:8E:B5:CF:BD:DE:9A:8D:A3:FC:1D:33:BF:F5:AA:77:B9:A0:00:FD
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 019EBEB5BC552BF98A322C83CE4458732BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 0871
Signing time: Sat 13 Jun 2026 02:00:41 +0000
Manifest this update: Sat 13 Jun 2026 02:00:41 +0000
Manifest next update: Sun 14 Jun 2026 02:00:41 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: 1+jowBhRpZV1vBVUR8fX3UtcNQ414x8NQ3CKr9qOVfY=)
2: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (hash: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:bc:55:2b:f9:8a:32:2c:83:ce:44:58:73:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Jun 13 02:00:41 2026 GMT
Not After : Jun 14 02:00:41 2026 GMT
Subject: CN=aa8eb5cfbdde9a8da3fc1d33bff5aa77b9a000fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:a1:99:cd:3b:1e:f3:cc:b2:a0:e2:fa:fb:
36:f6:03:16:fb:75:cf:85:de:b5:3c:4a:49:78:63:
cb:7e:b8:d5:c6:1d:1c:2e:0c:62:ac:67:58:f6:b8:
95:60:39:4a:88:1d:0b:ab:71:4a:79:d3:96:12:5c:
fe:94:03:f0:24:ca:cf:4b:84:ee:11:96:61:4e:92:
a4:40:08:17:d2:44:4d:6e:56:df:da:7a:ce:4c:b8:
e7:44:62:97:07:ce:b8:5e:7a:39:1b:e0:c6:e6:6a:
c5:f0:b5:4d:85:75:96:95:32:1d:42:b3:6e:c9:75:
71:18:5e:37:f9:40:23:8a:36:c5:3a:e4:ec:b7:53:
bf:1a:ff:f9:e0:e9:1b:9b:7e:e5:b1:c5:83:ec:20:
14:82:c4:2b:a9:30:56:14:08:aa:50:18:c6:0a:41:
eb:90:46:2f:a1:69:36:27:99:63:8f:2f:f3:53:be:
b9:97:08:fe:c9:6c:af:79:a8:d4:70:df:53:04:91:
d9:d1:a1:a1:5e:91:5a:e1:c8:af:41:7f:49:4f:91:
3d:98:26:92:d5:34:da:c8:5d:22:ae:9b:da:82:6b:
5b:89:3f:80:e9:44:45:a2:f4:70:72:f4:0e:5d:58:
85:39:40:5c:ea:d6:49:61:d5:a7:11:a1:44:89:85:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:B5:CF:BD:DE:9A:8D:A3:FC:1D:33:BF:F5:AA:77:B9:A0:00:FD
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:90:be:02:a4:a7:f3:2f:56:00:a7:de:a7:44:6a:21:34:f0:
72:78:a5:45:85:48:20:39:ad:4d:6e:c9:dc:39:76:b9:46:3c:
bf:43:58:75:0e:cb:6e:86:df:46:81:be:c4:fb:a2:a5:af:14:
8e:da:ae:24:16:50:a8:8b:04:08:2a:96:d8:ca:27:47:28:aa:
1e:1d:9c:68:a7:c0:66:46:7b:07:6d:c9:29:f6:1f:b9:40:3e:
99:3e:e3:d4:ea:1e:55:71:4f:c7:a0:f1:02:db:5f:46:2e:d5:
ff:58:83:31:9b:69:28:06:1c:a7:0b:25:c6:b3:ee:b0:d9:3e:
39:0f:23:b4:7f:ed:66:18:6c:5a:51:76:a5:b8:91:76:91:2f:
ac:1c:a4:44:a1:ba:4c:05:02:92:a7:22:4d:d7:f2:c0:2f:2b:
9f:72:de:06:13:4b:6f:21:16:5d:8a:cf:1d:72:6b:d5:df:b8:
06:03:2c:57:eb:a0:7c:ed:14:c0:56:c4:1f:ea:56:c8:6e:c3:
4e:f2:e4:42:15:52:10:d8:ea:a3:13:c7:69:2d:3e:e7:50:30:
0a:ab:7a:ff:d0:a7:f1:0a:c3:9f:09:ef:85:34:90:6f:bc:ff:
d5:b5:4f:d9:77:ec:ea:99:69:67:31:cf:21:05:d2:f2:80:24:
50:0f:4e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tbxVK/mKMiyDzkRYcyvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3
N2JhYWMwHhcNMjYwNjEzMDIwMDQxWhcNMjYwNjE0MDIwMDQxWjAzMTEwLwYDVQQD
EyhhYThlYjVjZmJkZGU5YThkYTNmYzFkMzNiZmY1YWE3N2I5YTAwMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm66hmc07HvPMsqDi+vs29gMW+3XP
hd61PEpJeGPLfrjVxh0cLgxirGdY9riVYDlKiB0Lq3FKedOWElz+lAPwJMrPS4Tu
EZZhTpKkQAgX0kRNblbf2nrOTLjnRGKXB864Xno5G+DG5mrF8LVNhXWWlTIdQrNu
yXVxGF43+UAjijbFOuTst1O/Gv/54Okbm37lscWD7CAUgsQrqTBWFAiqUBjGCkHr
kEYvoWk2J5ljjy/zU765lwj+yWyveajUcN9TBJHZ0aGhXpFa4civQX9JT5E9mCaS
1TTayF0irpvagmtbiT+A6URFovRwcvQOXViFOUBc6tZJYdWnEaFEiYV5KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqOtc+93pqNo/wdM7/1qne5oAD9MB8GA1UdIwQY
MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt
M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3
LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZC+AqSn
8y9WAKfep0RqITTwcnilRYVIIDmtTW7J3Dl2uUY8v0NYdQ7LbobfRoG+xPuipa8U
jtquJBZQqIsECCqW2MonRyiqHh2caKfAZkZ7B23JKfYfuUA+mT7j1OoeVXFPx6Dx
AttfRi7V/1iDMZtpKAYcpwslxrPusNk+OQ8jtH/tZhhsWlF2pbiRdpEvrBykRKG6
TAUCkqciTdfywC8rn3LeBhNLbyEWXYrPHXJr1d+4BgMsV+ugfO0UwFbEH+pWyG7D
TvLkQhVSENjqoxPHaS0+51AwCqt6/9Cn8QrDnwnvhTSQb7z/1bVP2Xfs6plpZzHP
IQXS8oAkUA9OwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:20 2026 by rpki-client