Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier: 8bo25GZjqNdTkG/wOa9UyhlS6Q52A/TOYuddd9aWYZ8=
Subject key identifier: 14:DE:9B:21:D6:90:D6:84:55:D6:7C:5B:99:06:E5:48:3D:CD:5A:88
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 019E1C47A0DC71868FD13D9D0C8E6A67EA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number: 143F
Signing time: Tue 12 May 2026 13:01:56 +0000
Manifest this update: Tue 12 May 2026 13:01:56 +0000
Manifest next update: Wed 13 May 2026 13:01:56 +0000
Files and hashes: 1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: blpaX7BDlL08hIoeqzYNduuI6vk+2ObpfO5bbqjcDQU=)
3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:a0:dc:71:86:8f:d1:3d:9d:0c:8e:6a:67:ea:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: May 12 13:01:56 2026 GMT
Not After : May 13 13:01:56 2026 GMT
Subject: CN=14de9b21d690d68455d67c5b9906e5483dcd5a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:1d:5f:8a:79:8b:1d:24:92:3d:91:43:9c:
0d:dc:4d:0d:4a:c8:d0:63:82:39:36:9d:8c:7b:80:
de:24:d9:e5:15:6a:e0:ac:80:d9:6a:19:95:40:35:
9a:29:b1:ef:a2:b7:f8:1b:c9:6a:1e:ae:a3:c0:32:
f9:77:8b:ff:f9:b9:c6:21:10:78:55:66:8b:63:0c:
fe:4e:ad:70:a7:1e:95:f9:6c:fa:9f:4d:0a:44:d6:
dd:67:99:14:c5:dc:fe:f2:54:e5:07:e1:56:ca:41:
e4:d6:71:80:0d:ac:db:fd:ae:75:d2:08:bc:b6:2e:
8d:93:e1:e4:5e:e1:63:f7:cd:78:4c:04:f5:30:80:
d5:7e:35:22:70:ef:3d:75:b6:a2:f2:a9:ad:e7:23:
fc:ed:7a:1e:b3:16:bd:fb:32:d4:93:5b:9f:9f:91:
9f:8d:b4:48:ab:56:5e:d8:35:4f:6d:5d:55:09:e2:
37:a9:6f:a7:09:ea:e2:63:31:c5:c6:e6:f5:7f:08:
1d:78:a0:75:11:5c:1c:96:ca:df:df:72:9b:3f:36:
e2:e8:fd:27:3a:31:aa:90:60:c3:c4:80:cf:52:6a:
db:0c:32:09:6c:79:1d:ff:12:ee:dc:ff:59:43:21:
e0:3a:75:bf:80:a7:4f:ab:ff:ed:0d:8c:0f:bd:a6:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:9B:21:D6:90:D6:84:55:D6:7C:5B:99:06:E5:48:3D:CD:5A:88
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1a:65:21:0c:b9:3f:a3:5a:17:d3:a2:8a:4e:83:2e:6c:d6:
e4:f5:70:d0:0d:f9:c2:d8:6c:79:86:0b:0a:71:d9:e9:0d:f5:
5b:4b:a0:a6:93:b4:8b:11:a3:57:80:ed:87:de:29:18:f9:f8:
17:7c:82:41:cf:1b:cd:d4:23:72:c6:52:f8:e2:1d:b8:97:f2:
62:c4:b9:45:42:f1:63:5e:b6:87:11:90:8c:ad:87:3c:2a:76:
af:85:60:3a:f1:c2:76:b6:6e:2e:a6:b6:c6:16:9b:36:71:e3:
93:51:7b:25:21:3d:2b:89:b9:d5:7e:ad:b7:7b:b7:8c:e5:07:
d9:25:4a:b2:28:73:b2:16:4e:40:57:3c:a3:4f:40:1c:bb:9c:
f2:e1:38:a6:a4:b7:eb:09:a0:2e:b7:65:9b:6f:b5:97:02:40:
ec:60:2e:01:4a:db:70:8d:27:e3:cb:9a:1b:29:ed:b2:cc:4f:
d5:bb:2c:8b:ce:b3:13:13:1e:f1:53:65:08:c1:50:d3:9a:8d:
fe:cf:2d:bb:b9:7f:14:53:72:e4:cf:28:70:30:1a:57:70:d3:
37:cc:94:30:4d:53:29:43:83:42:71:8b:06:bd:70:de:ba:72:
b0:79:fe:44:fc:b3:89:63:f5:6a:fc:1b:a1:e7:67:c6:6e:03:
95:a6:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:38 2026 by rpki-client