Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: cFqStxuCjjZ+rp6m27Ew4+s/ZVRIH5lkgPVwzRiLHCQ=
Subject key identifier: 21:6F:08:D9:AC:8E:4F:DC:17:67:4E:0E:4B:DF:B5:D6:A0:40:FA:33
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 01A13C6E44EAF96324168603FE625958600A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1A9E
Signing time: Wed 14 Oct 2026 22:00:21 +0000
Manifest this update: Wed 14 Oct 2026 22:00:21 +0000
Manifest next update: Thu 15 Oct 2026 22:00:21 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: dzMg/EyK5zwAZO0jwzgbK6COH4APop2G8Mo9hTsRhag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:44:ea:f9:63:24:16:86:03:fe:62:59:58:60:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Oct 14 22:00:21 2026 GMT
Not After : Oct 15 22:00:21 2026 GMT
Subject: CN=216f08d9ac8e4fdc17674e0e4bdfb5d6a040fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:4e:8b:b9:9e:91:75:53:c3:6e:93:f8:e1:
70:3e:45:2b:2f:5a:71:20:68:23:3e:72:ed:86:d3:
fa:c8:79:f3:82:4c:7a:ca:3f:fd:23:72:d7:bc:e2:
fd:15:b1:09:0a:b8:92:c7:a5:81:43:cc:54:83:7c:
c0:82:73:c4:88:62:bf:6e:11:b9:79:72:b2:24:3a:
c8:2c:82:46:79:e2:30:cc:77:1b:d1:d6:be:72:d4:
62:40:19:f4:1a:81:4a:2f:7b:1b:46:fe:6a:05:a0:
23:63:6b:80:ad:5a:38:df:9d:b8:26:0f:6b:f8:88:
0d:52:77:d9:f3:0c:15:01:0d:1c:73:4b:04:fb:0f:
00:fc:97:af:73:95:5a:e4:39:c0:ca:63:6f:10:c6:
3c:63:93:8d:59:30:cd:d5:48:0d:38:f7:70:b4:3b:
c1:74:42:f3:20:ca:3b:14:41:40:d0:6c:17:32:6b:
95:e0:1b:a4:9b:17:28:f5:2b:a0:6e:1c:f1:7b:7d:
c0:02:c7:3b:74:1a:70:57:4b:d1:8f:27:c0:a5:fc:
23:27:f3:f1:1a:1d:9f:23:eb:1e:94:cd:53:93:75:
d2:66:16:18:e4:58:3a:fb:ed:d9:71:d6:38:8d:f0:
f3:78:f4:ac:fb:01:9b:5a:c5:05:16:bc:63:e0:4f:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:08:D9:AC:8E:4F:DC:17:67:4E:0E:4B:DF:B5:D6:A0:40:FA:33
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:5e:f4:8e:a4:77:69:bd:6d:7c:4e:68:e8:fc:b0:44:62:
66:ce:96:22:2c:5a:61:3f:86:19:2f:9b:87:76:e9:4d:f2:ae:
15:b4:ce:83:2e:45:ad:cc:6e:23:a7:50:8d:fd:7c:b2:ed:a3:
78:fd:b7:e5:16:ff:28:c4:d8:00:f5:dc:7a:04:5f:7f:b5:28:
76:06:5d:a9:58:c7:4a:75:aa:c9:a3:1f:95:eb:43:b4:fb:ab:
41:79:b5:6a:c3:f1:62:7d:58:a5:e2:72:7d:5a:7d:92:0a:46:
df:6b:c6:3d:e2:47:59:77:03:95:94:ee:2b:7f:15:ec:49:c0:
9d:fc:72:42:35:4b:d8:7c:47:0e:52:24:b4:21:a3:40:38:d1:
60:a8:51:d9:55:cf:23:38:cd:e6:12:df:e1:87:e2:d2:b8:f7:
5c:5b:e7:b3:67:72:91:60:24:a9:08:87:36:61:5f:40:1d:4c:
dc:06:67:d3:4d:14:42:9a:d2:51:21:16:f1:f9:7e:ea:01:3e:
4c:86:51:b3:d2:b2:8b:8d:cf:b6:c1:c8:40:76:95:1b:81:8e:
42:5e:9d:ad:3a:f3:d9:be:02:78:f7:a4:92:43:bf:f8:c9:e2:
f8:9d:44:19:e0:31:6a:f4:18:f2:34:b7:01:69:6e:58:48:9a:
cb:0c:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:03 2026 by rpki-client