Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
File: ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json)
Hash identifier: Vvs9cyCrbFU8K0Z27QAHlwagIxTGnKwIhauVpaO6KM8=
Subject key identifier: 9E:3B:67:A8:94:E5:46:2A:61:EC:3C:FC:EB:FB:1F:24:48:45:D3:AF
Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
Certificate issuer: /CN=02b916b3b2e957d185032cdb499976a00eba4975
Certificate serial: 019D2AE088FE14471005CE9DF5548E92353A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
Manifest number: 01CE
Signing time: Thu 26 Mar 2026 16:00:51 +0000
Manifest this update: Thu 26 Mar 2026 16:00:51 +0000
Manifest next update: Fri 27 Mar 2026 16:00:51 +0000
Files and hashes: 1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: O4vwEJ/9iRtuBqztllljRlm64ZnvLKyhNS5Ujf/7o/A=)
2: KFxafXhhfLaW-gpG0Qp8xa6PXxk.roa (hash: i+ofv0cbmE9Ws7/+QJMB11kRvt2A2P+Z3BL5lLoxu6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:88:fe:14:47:10:05:ce:9d:f5:54:8e:92:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975
Validity
Not Before: Mar 26 16:00:51 2026 GMT
Not After : Mar 27 16:00:51 2026 GMT
Subject: CN=9e3b67a894e5462a61ec3cfcebfb1f244845d3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:03:f0:1d:de:18:48:1b:61:42:a0:53:4b:
61:15:fc:73:13:6c:0e:ed:3c:1c:0a:7f:b5:a9:08:
b3:17:66:8d:b0:2c:19:c4:ab:93:7c:88:9c:f9:40:
bf:ff:dd:02:b0:f8:34:60:f6:9d:05:c6:10:1d:0f:
3c:c8:38:fb:81:4b:d4:46:cb:5e:b4:ab:b8:12:c5:
0c:9d:2d:05:58:35:8c:5b:03:3a:d6:f3:bf:c7:2e:
b1:8e:e7:0d:04:02:12:54:36:8b:ff:1a:61:7e:af:
a2:9e:e2:0b:bd:09:29:39:d1:fe:15:ae:f4:19:01:
e1:83:a8:3c:18:fb:6c:9a:b9:88:e9:83:0f:05:38:
64:e7:66:a9:92:40:cc:87:17:3d:77:ec:1c:84:2e:
a1:cc:9d:58:71:3d:1d:cf:d7:70:2d:28:75:2f:34:
c2:55:22:df:75:24:96:c5:d6:9e:69:06:27:12:61:
07:c1:65:06:84:75:0f:ed:df:10:27:6e:34:35:38:
b5:09:98:07:cf:6a:ba:b4:9a:7e:9f:52:e9:d9:4e:
f5:bb:3f:0c:82:c4:b0:0c:08:83:ce:ed:d3:5d:e7:
65:7e:6a:b1:48:57:d5:5d:08:61:2c:68:6f:92:86:
d1:ab:53:80:f4:5d:a2:6a:70:58:46:51:38:4c:bb:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:67:A8:94:E5:46:2A:61:EC:3C:FC:EB:FB:1F:24:48:45:D3:AF
X509v3 Authority Key Identifier:
keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b9:45:f5:1e:3a:77:28:e3:b8:0f:32:9a:cb:8f:7b:fe:a0:
9d:4a:b4:28:eb:9f:7a:eb:12:40:3b:09:86:0a:c4:a4:94:31:
45:67:07:2b:27:21:78:24:f3:dc:c1:de:ad:0b:9b:b4:fa:df:
e4:c6:95:d1:6e:6b:2d:ae:8c:2c:9b:12:b0:42:06:a3:55:8f:
23:8d:23:c7:27:96:3d:a0:2a:96:94:08:29:55:af:db:4f:de:
52:7e:fc:ad:45:58:5a:5a:bf:eb:a8:a5:e4:e2:01:22:fa:bd:
9a:6d:2c:38:b9:26:77:ec:a7:d8:ed:53:91:e1:63:a8:5f:2a:
e5:a3:a9:55:26:4a:db:2a:b3:37:2a:fc:dd:0c:48:44:0b:87:
1f:0b:17:5e:34:47:21:29:04:02:25:e8:7e:02:df:64:55:29:
98:a3:ff:3f:d2:52:10:d8:e4:e8:d8:e5:9a:b0:9c:f7:44:51:
cd:39:c7:be:46:c4:0b:e1:c2:a6:7f:bc:09:ea:ec:3d:85:87:
33:8c:44:36:ea:0c:95:5f:f9:4b:ff:b9:95:15:d7:f3:cc:8e:
5a:fb:1d:88:57:c8:b7:af:ae:93:ee:77:31:c0:68:f7:61:e0:
4c:bd:63:e8:6d:80:47:75:ee:8a:e2:e3:d3:93:2d:5f:f4:55:
86:d7:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:33 2026 by rpki-client