
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: bAu0PclcisifWNxjt3L+JtBd7wSPTKdGFjJbKWGWyLc=
Subject key identifier: 16:DB:FB:6B:F0:30:2E:D4:CD:16:43:C8:FD:B0:E8:D3:49:BE:32:CA
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 01A0C8C6F9569A88E84798A06ACEC91BCB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 1340
Signing time: Tue 22 Sep 2026 11:01:18 +0000
Manifest this update: Tue 22 Sep 2026 11:01:18 +0000
Manifest next update: Wed 23 Sep 2026 11:01:18 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: 61gYqyNk7PL+wM2eCd26kX7oToxtUiUcRFYogJIXbFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:f9:56:9a:88:e8:47:98:a0:6a:ce:c9:1b:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Sep 22 11:01:18 2026 GMT
Not After : Sep 23 11:01:18 2026 GMT
Subject: CN=16dbfb6bf0302ed4cd1643c8fdb0e8d349be32ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:3d:69:dd:9d:f2:e0:8d:a1:36:fa:63:e8:
c1:61:5b:86:c8:25:49:cb:fe:3f:67:37:88:52:3d:
3e:84:de:f6:81:b9:0f:ff:a1:ce:fa:07:13:65:fe:
00:ea:e8:6f:9c:52:7d:1e:16:90:55:ef:62:bd:5d:
11:cb:a8:12:1c:3e:ac:7e:62:69:d5:e0:09:15:15:
5b:fc:9b:38:c6:36:eb:50:49:4f:18:e2:5f:83:da:
99:cc:94:1f:47:f7:10:80:e5:61:08:38:22:52:9b:
92:5f:f9:04:2f:4d:42:fa:a7:3e:f4:94:47:ba:ef:
85:32:2b:5a:ab:a8:d0:0e:b7:30:91:10:7d:fc:4b:
c2:12:d2:d4:4e:1a:b2:7f:b6:82:24:6f:e1:a5:26:
18:0e:57:d2:a0:74:54:a8:1c:54:64:e6:5e:d3:cb:
aa:ef:bd:48:90:44:45:0d:87:9b:fe:24:3e:20:2d:
97:24:c6:4c:2e:02:12:5c:bb:93:5f:72:3f:da:99:
e7:9e:4e:d0:08:64:18:3c:ea:39:ed:36:c8:82:75:
01:58:0f:cf:43:21:2c:e4:bb:ca:0f:60:90:c2:c9:
06:76:aa:29:06:82:14:c9:10:5a:14:f5:65:ea:aa:
8d:a8:fc:ce:22:15:8b:1b:a4:30:58:55:6a:e8:ac:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:FB:6B:F0:30:2E:D4:CD:16:43:C8:FD:B0:E8:D3:49:BE:32:CA
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9c:76:34:e4:38:ed:e0:59:32:9e:b0:31:a9:44:07:b3:fd:
0b:51:ad:22:56:77:2d:64:36:b1:94:fc:b8:a1:ef:4c:44:cb:
ef:9f:07:01:82:2e:06:4a:56:b6:b2:6f:61:ad:69:08:af:4a:
8c:f8:ea:c6:73:50:66:4d:8d:f3:6f:07:d5:a4:c4:fa:5f:36:
5a:5c:f3:a2:23:3e:fc:d7:b9:e9:30:e0:34:f1:31:d4:12:21:
ca:52:ae:3f:d4:42:7b:2f:19:ee:27:67:0b:93:c7:82:dc:06:
4b:d6:fb:8c:09:1d:4f:c0:c3:e5:21:38:3b:2c:27:92:56:54:
c6:23:cb:36:d4:67:07:9f:06:f5:32:0b:0c:91:f7:37:1f:42:
1f:d0:ff:43:6a:5d:f0:4b:ec:43:e3:1e:98:28:26:d5:b8:a8:
11:29:bf:77:96:ee:c3:93:84:97:d0:08:ea:24:88:3a:3e:08:
f3:18:dd:ea:68:35:30:1c:3a:8a:7b:15:fa:9a:19:13:3a:be:
c3:6f:c9:d2:f5:79:e2:99:c0:b2:9c:2d:4b:46:8d:fa:f7:e1:
dd:73:9c:c5:a6:04:66:dd:ad:db:16:47:60:49:56:7e:f1:4e:
89:59:cd:62:c7:52:f1:38:3a:ef:55:d3:a9:20:2d:bf:80:ee:
ff:9e:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:44 2026 by rpki-client