Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: 4TPv3mf1K69vJvmUxIbbKyeAA5mqxC53rRshSc8XvTQ=
Subject key identifier: 9A:06:E6:3E:5A:4F:36:25:DA:7E:4B:B0:C0:58:BC:63:47:F4:72:F0
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 019E1D2315E4FB8E245C2B6288F75FCFB5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 11F7
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (hash: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54=)
2: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (hash: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM=)
3: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: xKt6AarSxNHXyb3O7LwK9jxfgdtjUYLhGABMk7HXlk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:15:e4:fb:8e:24:5c:2b:62:88:f7:5f:cf:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=9a06e63e5a4f3625da7e4bb0c058bc6347f472f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:6a:80:23:26:80:a1:cf:ea:37:d7:cf:19:
d2:97:dd:f3:f1:5f:e2:39:ca:43:ec:a4:ce:d2:d3:
df:43:ba:c1:20:d4:7a:ed:5b:3b:96:27:fe:ec:03:
25:5c:06:95:12:53:76:8a:dc:33:4f:d9:d2:41:20:
1b:24:36:12:d8:57:03:7d:08:d9:84:b0:c4:b5:9a:
e6:8a:35:3d:fa:f7:1d:f6:9d:6c:e1:96:7e:87:f1:
72:f7:52:4a:80:1c:27:ce:c5:4b:de:19:c5:34:92:
37:ff:27:d2:fc:b0:a6:8d:09:b7:3a:a5:5d:bd:b1:
12:48:ec:c1:98:eb:2d:a4:07:bc:f7:95:92:10:12:
de:36:49:64:86:a4:2d:7c:24:9e:51:0f:d7:37:4f:
25:e2:07:38:34:44:2b:a8:2d:6e:50:0e:22:a8:60:
f7:7d:9f:91:a7:bf:8d:15:0f:ab:e1:31:c9:59:9a:
d1:9f:52:d9:5e:09:b1:d6:f1:da:d7:b5:13:85:41:
da:cb:a4:02:4b:dc:18:45:d4:22:51:28:f9:a8:48:
5c:bf:30:9a:6e:9d:d7:da:fb:b1:ef:3e:d7:6f:0c:
91:01:02:3f:ea:6d:1f:2e:38:e4:4d:a1:4c:5f:9e:
cd:21:a1:91:70:ed:26:3d:aa:8e:c2:8b:2f:d1:7e:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:06:E6:3E:5A:4F:36:25:DA:7E:4B:B0:C0:58:BC:63:47:F4:72:F0
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d7:af:12:77:e2:60:68:97:4f:ca:78:b5:4d:17:48:db:37:
88:9a:e2:03:ee:4f:b5:cb:d3:28:8a:4d:ac:25:98:df:d4:41:
1e:72:01:53:ec:03:16:1e:53:68:be:78:94:9f:0c:77:38:6d:
74:4a:fb:82:f2:ad:c4:84:80:c9:4d:3d:64:4d:74:ed:36:ca:
cd:c6:72:53:c8:f4:25:81:c0:47:c8:f0:e5:74:d8:61:2c:12:
95:c9:a1:de:bd:c9:ae:5e:ca:88:dc:c8:ee:5e:13:7e:7c:63:
3d:b4:da:cb:32:fa:60:21:4d:20:79:21:6e:77:96:d2:28:6d:
c4:57:f0:65:12:68:f3:f7:15:c3:d5:26:2d:b8:2c:68:31:cc:
e7:c1:f0:c8:e9:f6:bd:30:82:57:80:1f:a5:77:fd:76:32:a1:
02:45:cc:93:6d:4a:16:4c:48:4e:3c:50:0e:14:52:cf:b5:19:
8a:9f:47:79:de:bf:02:89:18:d5:44:e2:85:72:d9:33:f9:1e:
82:c6:f0:7e:a4:f8:50:06:1b:10:99:4d:78:31:5e:9b:e2:de:
21:25:1d:0e:f2:9a:91:73:6e:6c:03:c1:97:f0:06:f0:4b:71:
f8:ea:5a:80:37:21:52:03:f9:47:26:02:7f:a8:e9:6c:cb:f8:
ea:8f:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:58 2026 by rpki-client