Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: 498dLF7oABsRuuwqUT8mPFZodT1PbUQuyGs7WBXe9eo=
Subject key identifier: 70:57:76:1C:03:FF:F0:AD:E5:8B:D0:AA:06:40:DE:E0:0E:63:14:BF
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 01A001DD7104167C4DE698EDF9755A6F36F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 12D9
Signing time: Fri 14 Aug 2026 20:01:24 +0000
Manifest this update: Fri 14 Aug 2026 20:01:24 +0000
Manifest next update: Sat 15 Aug 2026 20:01:24 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: nA5f4MrkcmHzc153wU4d3WimgfobnsbX1C1gN1ScDxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:71:04:16:7c:4d:e6:98:ed:f9:75:5a:6f:36:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Aug 14 20:01:24 2026 GMT
Not After : Aug 15 20:01:24 2026 GMT
Subject: CN=7057761c03fff0ade58bd0aa0640dee00e6314bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:33:84:57:08:83:60:70:86:8f:a4:72:2a:
1f:ea:28:c1:80:20:d9:71:61:15:0e:43:8f:8b:df:
a1:88:b0:ca:79:3d:36:bd:4f:d8:21:99:5a:68:58:
fd:c2:b5:00:b7:46:f8:dd:0d:85:c5:9a:9f:f7:34:
7e:e7:42:3b:10:56:b4:04:7f:51:6f:36:42:4f:1b:
ea:0d:97:cb:7f:8b:21:18:fe:dd:7e:53:4f:d2:15:
bb:72:ce:04:b5:fb:7d:37:52:44:d7:90:35:c5:1c:
03:f3:45:e8:55:88:47:6f:2f:a0:36:65:06:2a:af:
1c:55:d9:26:cb:b0:dd:f1:5f:1f:4d:87:c7:f3:28:
c0:c9:01:65:e9:e0:9d:8d:b1:f0:13:44:a3:39:e7:
a3:60:8a:37:03:b4:72:41:3c:09:32:de:22:bf:a9:
90:f2:0a:2c:5a:63:da:7c:69:5b:9a:6f:4e:01:05:
47:5d:d9:76:da:77:c8:d5:7b:8e:9b:8e:72:ad:6e:
23:54:b0:98:23:73:94:bf:3d:99:80:8e:b2:dd:2e:
1a:97:96:cf:78:24:d2:e2:2b:6d:6d:7a:67:72:33:
fb:77:ae:c1:75:10:fb:36:e0:bd:d4:d4:87:eb:da:
97:49:d6:06:91:21:53:64:3f:a4:73:c5:45:c9:33:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:76:1C:03:FF:F0:AD:E5:8B:D0:AA:06:40:DE:E0:0E:63:14:BF
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:f6:82:8f:9d:2d:aa:84:95:5a:72:0f:9d:ab:3b:1a:93:
90:eb:74:5a:b9:ca:3b:b4:ad:ae:a8:74:65:89:94:0f:de:06:
9c:5f:db:d2:d6:fd:17:94:2f:22:fd:11:27:b0:2b:54:89:d0:
90:cb:f8:e6:98:ff:b2:a2:7e:38:cb:35:d1:ef:a6:28:f8:4a:
55:75:9f:27:4a:f3:fa:a0:d4:d7:1c:f8:9d:b3:4d:26:28:f9:
32:c1:ac:10:30:a4:d2:fb:96:72:4a:e6:e8:49:e1:4f:c0:7a:
fc:14:2e:57:4f:ab:96:65:a8:15:cc:d0:2d:7b:f9:45:83:35:
90:b0:13:56:71:3c:d0:52:37:d8:84:25:49:d7:f5:d8:65:1b:
86:67:1e:10:16:49:99:79:45:bf:32:b8:f1:1b:13:5a:d2:f3:
3c:66:58:48:29:25:69:09:69:74:a9:dd:6e:a8:6d:71:32:a0:
e3:34:b9:1f:59:91:29:47:c0:ae:4d:13:17:e7:85:d1:44:bb:
d3:a0:2e:d6:26:e0:a3:cf:66:84:40:5c:e2:e6:ad:50:c4:ce:
55:3d:ff:db:71:0e:88:44:a3:ed:31:f1:2b:bd:13:ae:eb:bf:
48:b4:40:c4:bd:56:72:5b:64:cb:fa:47:dd:8a:e4:25:b7:fe:
bf:51:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:46 2026 by rpki-client