Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: kE5aBUngo3YihgaGur0EjHVWn4E5gf+Q8uXR6q/H2JE=
Subject key identifier: 2A:89:53:71:E9:CE:72:DF:03:94:CB:2D:97:88:55:21:B3:5A:D2:9D
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019E1CEBCA1BD165DA08F0064042672258BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1900
Signing time: Tue 12 May 2026 16:01:15 +0000
Manifest this update: Tue 12 May 2026 16:01:15 +0000
Manifest next update: Wed 13 May 2026 16:01:15 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: ADBX+mlq7r+B7q35lfaYX3VZ8v00UiZkH3XZupbOLq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ca:1b:d1:65:da:08:f0:06:40:42:67:22:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: May 12 16:01:15 2026 GMT
Not After : May 13 16:01:15 2026 GMT
Subject: CN=2a895371e9ce72df0394cb2d97885521b35ad29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:17:8d:72:f9:61:98:3f:90:ae:96:1a:a0:
9e:bf:2c:d8:bc:6d:0d:3a:69:96:8b:fd:79:5b:e1:
fa:ef:a9:99:92:fa:0e:b3:7a:f2:f4:d3:e4:ea:b0:
12:da:5e:05:c6:2f:48:2a:c6:1a:1f:e2:bc:37:67:
91:ac:de:ed:18:32:28:e1:e0:3d:e5:fe:d3:1e:3e:
10:aa:de:76:f3:58:9a:05:0b:a4:ca:8a:ed:27:50:
60:54:24:da:e5:3b:c8:ec:cb:8b:c9:93:f1:01:27:
ee:a8:fe:73:3c:ae:e6:d4:45:7d:5e:7e:d1:e8:93:
8b:92:d3:49:2d:9a:99:78:f0:aa:45:3c:34:98:11:
43:cd:c9:71:91:78:4d:01:6c:f0:1b:72:29:52:e8:
de:cb:af:74:82:24:a0:79:dc:a1:d0:f9:d3:70:c8:
c9:a3:49:19:87:8c:fa:56:fa:7d:96:99:a2:0a:92:
7d:b2:3e:e5:35:99:af:93:69:bd:7d:88:60:3d:43:
de:64:2c:f7:28:99:d8:3e:d1:2e:d8:f9:47:e3:7e:
37:d3:9b:26:a6:79:8d:be:98:3d:8b:f7:4d:e2:17:
ca:27:7d:d3:12:ea:62:b1:24:7e:cd:00:32:88:b1:
2c:f4:ba:71:18:c2:b6:f9:7f:76:68:8e:af:a8:64:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:89:53:71:E9:CE:72:DF:03:94:CB:2D:97:88:55:21:B3:5A:D2:9D
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:eb:9f:7e:8a:67:36:f5:74:4a:8d:65:2f:8f:d7:32:64:92:
5e:6d:35:e3:c7:fe:3d:0f:af:6c:b8:fa:3b:a3:7b:8c:71:04:
47:72:8e:d1:38:3c:99:fc:1e:29:91:69:0b:46:2f:b7:d6:05:
2d:89:6c:ff:cc:3d:65:1a:1a:e1:c8:65:b4:bc:df:a4:9f:9f:
8b:dd:9a:06:04:e3:15:98:28:4c:59:48:d8:7f:4e:8f:4c:cf:
16:34:3c:88:6a:5a:dc:77:38:1a:66:6d:45:40:90:cb:dd:a3:
5c:1d:3a:91:7b:ac:85:53:88:0f:24:05:a1:df:88:a9:fa:40:
6c:27:bb:1b:8f:01:67:27:07:58:9b:69:18:41:0f:c0:2a:5f:
5c:62:47:b9:49:35:fb:b3:02:ac:54:c8:66:6e:26:aa:c1:5f:
30:36:8c:70:d4:03:51:07:c8:24:fa:38:e7:b9:67:b0:3e:be:
06:64:bc:1e:83:81:c8:81:ff:21:e2:16:19:83:a9:b6:90:d4:
1c:c6:03:1d:50:93:c2:37:fc:97:e3:b2:c6:3c:45:b0:d1:6d:
7a:d3:46:ca:bb:b7:d2:a6:5f:f4:1f:40:5a:6f:b0:3a:be:a2:
24:e8:83:e7:cd:87:dc:8b:ad:0d:17:53:88:11:d7:d2:08:7b:
84:31:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:07:24 2026 by rpki-client