Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json)
Hash identifier: CnmBFZE20HyK/0ICE66fSJnobL+QftbgZZbkx2+CHgM=
Subject key identifier: 02:9C:7B:D4:17:FE:C3:E2:0A:EC:AA:D8:0B:3F:B0:F7:D5:89:34:05
Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Certificate serial: 019CABA25AFBA54A179489DEC4C15FFF5BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
Manifest number: 075E
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: yT1Sdmis4f/3+pQcixljNT+FBQDEfqZpogSMSqq4hjQ=)
2: jMbUatOv3XAsr_KrVEX1mPMT9Mg.roa (hash: XrXEaVvF+zoDFjw4K3BmRj8i0r+TbNLILJR4PzBUuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5a:fb:a5:4a:17:94:89:de:c4:c1:5f:ff:5b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=029c7bd417fec3e20aecaad80b3fb0f7d5893405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:e9:2a:fa:b6:91:a3:eb:bf:e0:07:80:de:
76:ac:c7:39:24:c6:68:ba:b1:64:94:02:0f:c9:65:
21:17:f9:e4:9a:d8:04:aa:7d:3a:06:e5:eb:6f:b5:
4b:38:e8:7c:10:e7:ea:4d:2f:51:68:9e:2a:84:66:
be:85:90:2e:c1:15:ab:ab:0a:5e:4f:57:40:72:b4:
54:8e:5a:5d:c1:f3:d5:a6:b2:b1:82:cb:d0:51:8c:
ca:e6:a8:04:ef:d2:6a:56:06:71:06:92:29:05:f4:
7e:58:20:fe:13:11:fc:a3:5a:f8:57:d2:88:da:b8:
c7:b8:79:67:fd:11:19:49:2a:a4:2d:ad:0c:c5:11:
fc:18:4d:ad:63:61:d3:ad:27:4a:20:db:69:38:38:
7d:3e:6d:b9:ba:de:8b:90:6e:0a:fd:37:e6:cc:9f:
ee:c4:69:62:81:3d:c2:2e:df:5a:b9:ea:68:17:f0:
83:4f:a2:8d:81:41:d2:b2:2f:b6:ca:76:70:57:79:
6a:26:a9:e4:e7:1a:75:ec:d2:77:ab:d3:23:01:92:
47:ca:bf:de:25:b7:d8:45:f9:4e:ab:32:2d:a7:c2:
da:cd:57:b4:61:06:3d:2a:3b:20:8d:a4:5a:6b:92:
3e:b9:58:f8:f2:cf:6b:1c:00:05:e8:d9:31:60:e0:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:7B:D4:17:FE:C3:E2:0A:EC:AA:D8:0B:3F:B0:F7:D5:89:34:05
X509v3 Authority Key Identifier:
keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:35:49:e0:88:36:27:7e:c8:98:75:24:7b:7b:cc:ed:d1:
05:61:6f:e1:b3:77:34:1c:db:88:62:3c:de:dd:25:37:0b:2a:
16:f2:61:af:63:3e:e9:e9:f5:99:43:e1:91:c0:80:ae:c0:d0:
8c:ce:81:54:92:60:23:47:13:05:55:79:cf:64:ef:2c:55:94:
4e:c7:23:72:c4:55:d8:58:e0:23:24:b1:0c:2e:1d:ca:88:08:
d0:02:56:1f:dd:e8:6b:49:ef:55:54:27:55:e7:49:22:56:ac:
5b:f3:7e:d8:f8:58:c3:e6:61:ae:1d:22:12:29:7d:be:d6:0f:
5c:20:5c:b0:23:ba:e1:46:76:f8:c5:c7:61:d7:15:1f:a7:d3:
cf:c8:36:48:58:0b:79:f5:4e:2f:af:89:0a:fd:44:87:b8:85:
63:c6:2d:bf:99:5a:5f:08:bc:71:fa:55:1b:cc:4a:1e:2e:44:
36:13:84:17:18:58:25:27:ba:f2:29:c6:e2:ba:30:22:5d:95:
38:f5:08:dc:f8:30:f8:fb:b8:31:cf:f3:81:14:72:f3:59:31:
3a:ed:19:8f:5c:42:32:38:23:a9:ea:b0:6b:ad:84:73:16:9a:
f4:24:ce:85:4f:8c:c1:8c:97:fb:6b:18:66:7f:4c:ec:35:8d:
1c:e1:72:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolr7pUoXlInexMFf/1v2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3
N2JhYWMwHhcNMjYwMzAxMjMwMTA5WhcNMjYwMzAyMjMwMTA5WjAzMTEwLwYDVQQD
EygwMjljN2JkNDE3ZmVjM2UyMGFlY2FhZDgwYjNmYjBmN2Q1ODkzNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDfpKvq2kaPrv+AHgN52rMc5JMZo
urFklAIPyWUhF/nkmtgEqn06BuXrb7VLOOh8EOfqTS9RaJ4qhGa+hZAuwRWrqwpe
T1dAcrRUjlpdwfPVprKxgsvQUYzK5qgE79JqVgZxBpIpBfR+WCD+ExH8o1r4V9KI
2rjHuHln/REZSSqkLa0MxRH8GE2tY2HTrSdKINtpODh9Pm25ut6LkG4K/TfmzJ/u
xGligT3CLt9auepoF/CDT6KNgUHSsi+2ynZwV3lqJqnk5xp17NJ3q9MjAZJHyr/e
JbfYRflOqzItp8LazVe0YQY9KjsgjaRaa5I+uVj48s9rHAAF6NkxYOAW9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKce9QX/sPiCuyq2As/sPfViTQFMB8GA1UdIwQY
MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt
M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3
LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALic1SeCI
Nid+yJh1JHt7zO3RBWFv4bN3NBzbiGI83t0lNwsqFvJhr2M+6en1mUPhkcCArsDQ
jM6BVJJgI0cTBVV5z2TvLFWUTscjcsRV2FjgIySxDC4dyogI0AJWH93oa0nvVVQn
VedJIlasW/N+2PhYw+Zhrh0iEil9vtYPXCBcsCO64UZ2+MXHYdcVH6fTz8g2SFgL
efVOL6+JCv1Eh7iFY8Ytv5laXwi8cfpVG8xKHi5ENhOEFxhYJSe68inG4rowIl2V
OPUI3Pgw+Pu4Mc/zgRRy81kxOu0Zj1xCMjgjqeqwa62Ecxaa9CTOhU+MwYyX+2sY
Zn9M7DWNHOFyAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:38 2026 by rpki-client