Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier: TL/nMVMjnCh1CvVz17j/F2+X32e2800tcTDgGrL2Ty4=
Subject key identifier: B9:52:DD:32:47:93:A6:33:94:B9:E6:A0:AD:1D:63:68:66:C6:AC:BE
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 01A0C9D92649F9E3001938DD0D86F9127ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number: 15A2
Signing time: Tue 22 Sep 2026 16:00:46 +0000
Manifest this update: Tue 22 Sep 2026 16:00:46 +0000
Manifest next update: Wed 23 Sep 2026 16:00:46 +0000
Files and hashes: 1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: PrBwI1KimiDAZ4JcTF+97ubgbgU+E7xI7Icb+99S844=)
3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:26:49:f9:e3:00:19:38:dd:0d:86:f9:12:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Sep 22 16:00:46 2026 GMT
Not After : Sep 23 16:00:46 2026 GMT
Subject: CN=b952dd324793a63394b9e6a0ad1d636866c6acbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:a5:fd:14:aa:a1:95:b6:b7:4a:24:7b:f8:
e4:1e:17:64:98:8d:72:f7:5d:b7:2c:0b:c2:41:9d:
52:91:1b:af:33:44:b4:75:e1:d5:db:68:d2:4d:78:
79:35:81:15:d0:e6:03:49:2f:c7:db:e4:4f:e9:6c:
a0:da:85:f4:0c:0f:a0:8e:11:64:8b:aa:47:39:88:
3b:94:3e:cb:a4:ad:ba:ed:af:0c:ba:4c:d8:31:ae:
4a:5d:6c:95:25:a7:fe:e6:e5:a6:35:76:ab:f3:09:
51:58:8f:90:b0:ea:80:88:2d:01:e8:4d:2f:f7:c7:
af:00:17:fa:59:86:5e:cf:5f:a9:13:76:cc:56:25:
14:51:80:79:3f:6e:82:c0:0d:9a:2b:46:0e:8f:a6:
05:12:ca:ac:38:83:a8:ac:cb:f1:c5:5e:06:7d:50:
99:5b:57:61:f1:67:08:f7:80:82:6e:75:cd:14:cc:
c7:4a:8f:31:cb:75:ef:5f:01:43:5e:ac:5d:00:df:
06:cb:c4:64:bc:f5:a7:52:cd:58:1e:a9:54:4f:28:
58:a0:96:29:c4:bf:d9:f0:a6:7e:de:a9:9e:63:63:
aa:4e:5e:d3:a2:09:fa:a2:67:f9:3f:e7:4e:f5:fe:
cf:87:3e:da:5b:24:7c:7b:8c:ba:be:71:84:55:36:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:DD:32:47:93:A6:33:94:B9:E6:A0:AD:1D:63:68:66:C6:AC:BE
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:50:4f:5f:0f:dc:05:9f:57:0b:4b:84:6e:24:fe:3b:3e:
8c:24:a8:40:cb:b6:c4:75:c4:a4:49:81:28:70:7d:71:d7:51:
16:50:a5:3a:de:16:90:aa:83:22:da:ba:8f:27:1c:a6:21:7a:
1e:f4:64:00:e8:a2:86:a5:1e:fb:5b:38:b0:5c:1b:4e:12:13:
f6:4e:23:67:da:f2:ad:68:0f:10:94:55:43:2b:51:7d:12:6d:
bb:3b:df:80:04:24:9f:8d:95:a4:48:27:70:ff:f4:13:76:aa:
cb:3b:f9:73:d9:2d:c5:b8:a2:01:7d:84:52:4a:a3:cb:4e:5a:
03:fb:e0:3a:3f:72:76:8f:37:4e:c5:f1:8c:b9:6d:5d:b9:cb:
40:fe:5d:3a:d4:ff:da:89:12:db:a3:e0:20:6f:01:30:02:01:
36:6a:ff:0b:2e:60:30:5b:c5:95:82:7e:34:ab:98:dc:33:20:
c0:50:7c:83:5b:ac:30:44:a5:5c:23:4a:d2:e1:87:d6:d9:f0:
db:33:5d:75:0f:7d:df:b0:1f:ce:01:4f:c0:01:bd:95:75:63:
73:2e:3c:88:dd:c4:05:b1:c9:3f:55:d5:bd:16:f0:32:b0:91:
f9:59:87:ee:90:28:cc:14:00:df:f7:9f:22:c1:c9:23:c2:ec:
ac:3f:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:27:10 2026 by rpki-client