
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: tB9unTURsNdrybpg4aRqAM4TuY0XkUvpQBieEkreflU=
Subject key identifier: 35:FF:A1:92:EF:41:88:C8:40:CA:9C:D2:88:90:18:78:07:21:9F:01
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019F17F956637A3C99B4F34558BFA7F7CA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1982
Signing time: Tue 30 Jun 2026 10:00:44 +0000
Manifest this update: Tue 30 Jun 2026 10:00:44 +0000
Manifest next update: Wed 01 Jul 2026 10:00:44 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: T73ekCyL/VMbBsPyEDO7bipXLhSH9DJu+QbeBHL3+cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:56:63:7a:3c:99:b4:f3:45:58:bf:a7:f7:ca:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Jun 30 10:00:44 2026 GMT
Not After : Jul 1 10:00:44 2026 GMT
Subject: CN=35ffa192ef4188c840ca9cd28890187807219f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:45:af:43:dc:78:bd:ae:35:de:9b:7f:a6:
9b:d9:a9:fd:5c:a3:af:1e:2c:2e:8f:d1:3e:e3:e3:
03:31:16:ba:97:c4:57:06:fa:e2:77:18:c8:e8:d8:
d2:62:76:85:77:b1:98:3d:12:dd:14:01:ae:1c:6b:
19:2e:95:ea:60:c9:7f:5e:8d:f4:24:6b:92:9f:51:
4e:85:fc:7c:d8:9c:9f:a0:36:14:48:2e:39:4d:b3:
61:6a:97:84:8d:05:24:49:9d:f9:bc:c3:95:6c:91:
dc:35:54:17:b8:d3:a0:49:15:59:c9:68:8b:bb:b6:
35:a6:f0:f6:0e:3c:ee:13:84:f8:7e:80:5b:2f:18:
b7:5e:c3:13:1a:7d:b0:b3:4c:41:7b:4b:ac:09:15:
d3:71:1e:19:4b:a9:e3:c9:40:20:ca:57:ba:5d:4d:
79:f1:21:42:15:e4:d2:fa:4d:6d:92:0f:a1:b8:c2:
95:e9:c8:76:6e:0a:7c:e0:4b:7b:6c:5b:b6:66:11:
97:97:c9:7b:36:d1:c4:ac:6b:f0:68:9e:45:2a:96:
e2:e9:ea:b8:d4:94:7d:6e:c5:82:d2:aa:db:0d:b2:
ea:28:d9:91:ed:ea:49:ce:31:a2:69:d6:75:d3:1f:
89:43:db:3e:8f:d5:6b:17:a9:1d:0d:d5:3e:1a:6e:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:A1:92:EF:41:88:C8:40:CA:9C:D2:88:90:18:78:07:21:9F:01
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ec:6a:4f:96:c4:7d:03:a9:1a:f1:e1:c1:89:51:36:5d:7a:
f2:62:fe:77:b8:a3:e3:c3:e2:e2:74:fc:50:2f:23:86:c6:c7:
14:0c:30:e1:ff:e0:95:47:91:b1:a6:c7:88:56:69:dd:ee:f8:
3c:8e:99:ed:c8:a8:fe:50:cd:f4:a8:57:13:fe:38:49:29:ad:
a8:8c:82:75:c0:43:f2:94:df:03:62:6b:8f:74:20:44:91:21:
58:9b:f5:73:3e:84:0e:e9:37:70:35:af:a7:dd:43:40:0b:ab:
5b:f2:52:7b:5b:18:cf:65:74:e8:1f:ca:ce:0c:4d:8f:af:95:
ae:88:34:17:5a:76:a6:97:3b:1c:df:fb:a6:82:c0:34:37:c5:
b3:e2:f2:15:8a:e4:fc:4d:42:06:a0:86:cd:7a:8e:35:70:de:
4d:32:85:1e:42:56:be:30:f0:1d:d6:a3:84:f9:72:1d:a6:3e:
9f:26:f6:e1:0a:3f:71:53:81:c5:fc:e7:ba:cc:fa:43:9c:57:
da:e8:ae:af:4e:60:e0:d8:89:bd:4a:d5:e9:d8:77:f6:19:0c:
32:c1:01:e2:2e:2f:df:e0:ca:5a:cb:b2:35:78:a7:ac:25:30:
5d:99:c0:af:83:a7:c5:8f:7b:81:13:66:ad:dd:c0:b4:27:4e:
02:5a:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:05 2026 by rpki-client