Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: /ruedzl1TA56T5hp7KbUKCy40xfqMhGdmK7rw+DGgiA=
Subject key identifier: AE:35:7C:27:EF:43:85:9F:84:C8:E6:A1:B8:2C:E7:CF:92:0E:A6:84
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 01A0CE5A413841EB923E4ECCCF18F1320C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1A65
Signing time: Wed 23 Sep 2026 13:00:16 +0000
Manifest this update: Wed 23 Sep 2026 13:00:16 +0000
Manifest next update: Thu 24 Sep 2026 13:00:16 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: EGs+zdc/kzJEKEfa8TJsqPDJCFZJ1uESZSLSoZyrSY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:41:38:41:eb:92:3e:4e:cc:cf:18:f1:32:0c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Sep 23 13:00:16 2026 GMT
Not After : Sep 24 13:00:16 2026 GMT
Subject: CN=ae357c27ef43859f84c8e6a1b82ce7cf920ea684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:29:bc:f8:3a:67:19:f4:fa:c5:0d:e4:e0:
af:71:f5:20:2c:67:fa:d2:ef:49:d8:2f:dc:74:44:
72:a0:05:e5:72:5b:7c:9e:be:8a:40:f2:d5:79:ac:
aa:10:35:0e:9e:8a:0d:df:8c:a1:9a:06:22:2a:96:
4c:41:34:18:9d:3c:a2:e0:67:22:54:d5:6e:db:5c:
0f:de:7c:ca:a2:5a:39:a8:0e:d7:2d:e6:57:ac:5e:
41:ec:70:a9:c2:7c:c3:fa:00:ca:be:d8:18:a5:82:
32:bc:20:61:a2:ef:1c:87:21:0b:f5:70:16:74:44:
c0:0c:10:05:d5:9e:a1:78:b3:e0:0a:80:74:1c:88:
6c:7a:08:61:37:86:ba:09:22:14:f6:8f:25:45:ce:
0d:ed:c9:ad:c0:47:ef:cb:71:8a:1e:93:f3:44:93:
aa:b3:9b:00:e0:fc:f2:0d:65:6c:22:91:63:82:85:
e1:60:dd:ff:06:f8:64:34:1b:91:a0:37:51:81:b7:
26:ea:90:58:a2:34:06:67:57:e8:de:8c:73:f3:9b:
6d:7e:bf:e6:9a:31:59:51:a0:1d:86:68:87:80:23:
0e:61:5f:cf:04:5e:7e:2e:e1:70:f4:3e:29:ff:56:
d7:29:85:e9:d6:0e:e8:f5:06:9b:bc:94:e3:53:f9:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:7C:27:EF:43:85:9F:84:C8:E6:A1:B8:2C:E7:CF:92:0E:A6:84
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:9d:ba:d8:0c:52:7d:79:a9:1e:eb:51:87:cd:9d:2a:e5:
85:10:20:32:f9:a8:29:da:f9:47:8f:46:50:c2:97:65:e3:d4:
7d:08:7c:9e:d1:5a:bd:44:dc:96:59:cc:55:be:d4:9c:f1:76:
65:95:77:80:8e:92:7e:e1:9d:74:20:c4:f8:17:af:94:27:65:
d0:74:57:dc:46:0b:40:6b:63:ea:9f:88:eb:ea:66:c6:08:de:
af:f3:50:46:95:82:43:17:f2:e6:c7:a2:03:ff:4a:a4:b2:7c:
f2:c6:ef:84:83:04:48:c2:69:c3:14:4e:aa:6c:a9:f2:65:f7:
de:f0:62:26:9a:fb:70:45:16:22:35:7f:ce:66:aa:c3:96:a0:
a5:05:5c:e8:f0:5c:dd:b4:24:e3:19:37:5c:bb:16:c1:ae:c3:
b0:e0:e6:05:79:65:9f:ee:70:b0:4f:17:f9:ef:40:e3:64:45:
a2:b1:12:e9:81:b6:f5:24:c8:81:c8:7a:30:da:5f:84:4a:76:
39:a6:f2:bc:b6:2d:85:30:b9:a2:58:05:b3:ab:58:7e:a6:a0:
aa:ae:c6:b1:2c:8d:51:28:38:be:f0:12:1f:08:3a:95:ec:83:
d3:9b:10:f6:a9:c5:03:f6:85:c5:71:2b:96:1a:9e:f0:6c:93:
c9:c8:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:11:40 2026 by rpki-client