Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: dEVWTRRes6eckiUEoFrOYrFcxeotc9FED2Tguu0RiDA=
Subject key identifier: 12:1F:7A:53:3B:2E:A6:75:7F:39:16:AF:79:89:0A:4B:ED:A2:F9:40
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019D371BA3752D45AF1213928DFF2C8D3C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 01:00:51 +0000
Manifest this update: Sun 29 Mar 2026 01:00:51 +0000
Manifest next update: Mon 30 Mar 2026 01:00:51 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: CoFJGXtPlP2OlrLrs0nwTVzOCZ8E9yf7xY/UIDhq/F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a3:75:2d:45:af:12:13:92:8d:ff:2c:8d:3c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Mar 29 01:00:51 2026 GMT
Not After : Mar 30 01:00:51 2026 GMT
Subject: CN=121f7a533b2ea6757f3916af79890a4beda2f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:35:74:77:15:bc:04:70:ca:15:d3:30:d9:
1b:b3:27:23:cc:fc:9c:83:29:ee:ab:91:26:99:1d:
71:10:0b:1f:a8:8f:e4:10:02:36:d8:40:23:1d:75:
70:d5:b5:f6:0f:eb:cb:86:e0:cc:d1:35:a6:f7:4c:
12:93:79:cc:ac:ae:10:85:30:13:e6:3b:6f:8f:ba:
0b:7a:16:86:cb:0f:6c:20:a3:26:9e:2c:e7:75:80:
5d:c4:73:82:67:75:21:07:da:6e:fa:e0:a1:45:75:
63:30:20:d9:a1:38:ed:2c:14:74:e2:65:1d:c6:03:
b3:02:5f:5f:bc:c0:b7:97:5c:42:c0:db:81:6a:1b:
c9:62:d7:10:60:24:f9:ee:69:0b:28:8e:28:49:06:
8f:50:6e:6b:9f:3a:62:01:39:33:27:08:d0:d0:8f:
d5:45:a2:99:22:ea:ee:83:73:f3:2a:5f:07:4f:5a:
d6:d8:d2:ca:5f:54:af:a9:15:13:29:82:d0:14:a4:
38:9d:a8:f6:5d:d3:f0:41:ee:90:74:3a:c1:aa:be:
8e:f8:25:d9:9d:46:88:a4:f4:94:d3:f5:27:cc:50:
9b:99:61:26:d2:de:09:d5:b2:81:0c:c2:b9:7f:eb:
bb:8c:96:16:0d:ac:00:dd:2b:50:06:25:6a:7c:bd:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:7A:53:3B:2E:A6:75:7F:39:16:AF:79:89:0A:4B:ED:A2:F9:40
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f7:2b:d8:2f:e5:35:a4:87:3a:78:ce:55:32:39:8b:d1:25:
78:14:a8:10:82:1b:34:97:e6:db:58:47:6d:ce:fb:8f:57:89:
fd:e9:e1:45:f4:74:a8:53:5c:0c:75:af:b4:7a:73:ad:bc:ce:
80:71:fb:16:79:3e:81:49:6b:15:a6:0b:9b:24:93:a0:2a:f9:
c9:2e:8d:0c:d4:4b:fe:ed:89:fe:f4:ae:3a:0e:a6:33:0a:66:
62:05:50:d4:56:20:34:1f:3e:de:e4:40:29:48:7d:fc:f8:e2:
05:97:7c:d8:68:25:4e:99:e8:2c:d3:d2:7e:ad:ee:cf:0a:14:
c8:de:60:d6:30:83:71:7e:ab:8a:4e:2a:18:8d:af:30:7f:7b:
0b:a9:3f:81:3d:f8:8b:d9:47:b6:ef:ca:6b:ae:a9:d6:15:8f:
01:35:6a:0c:0d:d3:82:b6:f7:86:7a:15:97:dc:3d:52:69:80:
c8:d3:3a:53:83:40:9d:ea:a2:c0:07:ea:50:fb:a2:ea:71:0d:
06:91:c4:32:44:98:47:f4:d2:07:15:62:93:2f:64:da:65:88:
98:8c:66:63:6c:4e:6f:72:f7:58:48:e5:29:f5:33:45:60:76:
49:cd:68:e5:64:b7:5e:20:64:9c:0a:17:0a:26:02:86:66:0c:
49:d8:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client