Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier: xWNoBGVU3LH6DAlUGCknvlePbaZi6jmUgzi0eOPeo3k=
Subject key identifier: 22:C4:76:DF:A0:C0:BA:21:F6:50:07:DF:AA:00:DD:3C:E0:D2:E0:C8
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 019CAB6ACC253D9A9872F664A3B6FBFC600A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number: 1380
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: EHly3t36y2USEPpipBypeioV+p16OhBhQNXUQy+zLVg=)
3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cc:25:3d:9a:98:72:f6:64:a3:b6:fb:fc:60:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=22c476dfa0c0ba21f65007dfaa00dd3ce0d2e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:52:3a:56:7d:48:a8:f8:60:cd:2d:85:e5:
85:3b:a6:bd:62:db:ee:55:3e:95:c3:66:8c:52:b9:
79:2f:67:9f:b3:6c:b7:38:3a:aa:37:0d:a5:2d:f5:
ab:87:33:63:97:3e:06:bb:ec:4b:b6:19:df:70:52:
6c:f2:34:a5:d5:40:cf:e0:11:cd:64:32:2d:33:7d:
5c:5f:55:90:12:f8:a2:1e:a7:19:f7:a4:2c:65:55:
02:3a:8b:05:37:fe:e0:af:47:aa:4a:0a:09:c7:8c:
89:61:b4:70:b7:53:cf:45:8a:4f:fe:f6:89:58:d2:
22:ed:7e:1d:4e:58:f1:59:29:f9:81:5b:8c:69:24:
e9:ed:81:f6:a0:b7:6b:b7:5e:4e:05:97:42:3d:6a:
75:4a:c7:9f:7c:71:9d:79:aa:e2:19:f5:7c:a9:b1:
d4:ad:42:5b:f4:06:a6:c9:06:a7:15:63:ed:07:4d:
3f:8a:01:0e:74:3e:34:da:c4:a9:37:61:fe:7a:ff:
95:6f:b7:65:1f:05:2d:cd:78:83:5d:1c:76:77:9b:
08:71:3d:30:b3:a1:74:fc:8b:46:0e:61:f2:56:d6:
5d:37:4b:94:1d:8f:e9:39:25:e5:b2:e2:43:c3:5d:
40:12:98:27:fa:f7:77:8a:f5:6b:66:22:0b:dd:30:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C4:76:DF:A0:C0:BA:21:F6:50:07:DF:AA:00:DD:3C:E0:D2:E0:C8
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d9:aa:71:8e:2a:2e:b3:36:c7:7d:78:5c:00:1f:80:90:05:
e9:26:85:2c:70:5c:09:e2:6d:3f:02:77:c4:19:f9:c3:69:cc:
0e:5e:c4:04:84:f7:71:7d:60:72:36:fc:63:f4:b3:b7:0c:e9:
9a:30:f5:61:80:09:7c:ad:9c:cf:13:31:ee:bd:91:61:95:37:
44:e3:b4:ed:43:97:9a:74:83:93:bb:ff:29:ea:d4:cd:3e:26:
8e:f8:df:05:bf:f5:e6:69:5a:2b:ce:bd:78:2f:10:bf:33:84:
a4:79:4e:fe:a0:d0:cd:bb:51:d6:92:51:d8:54:70:09:0c:73:
c1:cf:2d:5e:82:b3:3c:8d:49:25:b1:37:37:8f:9b:25:11:41:
36:7b:3f:12:aa:00:f4:12:48:27:60:77:a6:77:73:9f:9d:6b:
10:a4:3e:94:f6:ce:b3:30:b8:ae:01:27:23:8e:a3:3d:ad:33:
42:21:5f:82:c8:34:7e:39:12:50:a9:5c:e9:ed:ba:b4:ce:cf:
9a:5b:78:9f:ea:37:99:d0:c2:d8:35:eb:b1:0d:46:89:0c:2a:
7a:63:d2:3b:cd:55:b7:38:9c:9a:47:1c:97:15:5d:93:73:37:
b2:79:98:c3:5e:0b:fb:53:77:8b:a0:85:f0:c9:d7:78:3b:97:
8a:ba:e3:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraswlPZqYcvZko7b7/GAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1
YjM1ZTIwHhcNMjYwMzAxMjIwMDI4WhcNMjYwMzAyMjIwMDI4WjAzMTEwLwYDVQQD
EygyMmM0NzZkZmEwYzBiYTIxZjY1MDA3ZGZhYTAwZGQzY2UwZDJlMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3lSOlZ9SKj4YM0theWFO6a9Ytvu
VT6Vw2aMUrl5L2efs2y3ODqqNw2lLfWrhzNjlz4Gu+xLthnfcFJs8jSl1UDP4BHN
ZDItM31cX1WQEviiHqcZ96QsZVUCOosFN/7gr0eqSgoJx4yJYbRwt1PPRYpP/vaJ
WNIi7X4dTljxWSn5gVuMaSTp7YH2oLdrt15OBZdCPWp1SseffHGdeariGfV8qbHU
rUJb9AamyQanFWPtB00/igEOdD402sSpN2H+ev+Vb7dlHwUtzXiDXRx2d5sIcT0w
s6F0/ItGDmHyVtZdN0uUHY/pOSXlsuJDw11AEpgn+vd3ivVrZiIL3TCQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLEdt+gwLoh9lAH36oA3Tzg0uDIMB8GA1UdIwQY
MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt
NzBjMGE1MDZkNzk3LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3
LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdmqcY4q
LrM2x314XAAfgJAF6SaFLHBcCeJtPwJ3xBn5w2nMDl7EBIT3cX1gcjb8Y/Sztwzp
mjD1YYAJfK2czxMx7r2RYZU3ROO07UOXmnSDk7v/KerUzT4mjvjfBb/15mlaK869
eC8QvzOEpHlO/qDQzbtR1pJR2FRwCQxzwc8tXoKzPI1JJbE3N4+bJRFBNns/EqoA
9BJIJ2B3pndzn51rEKQ+lPbOszC4rgEnI46jPa0zQiFfgsg0fjkSUKlc6e26tM7P
mlt4n+o3mdDC2DXrsQ1GiQwqemPSO81VtzicmkcclxVdk3M3snmYw14L+1N3i6CF
8MnXeDuXirrjEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:09 2026 by rpki-client