
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: f3DWcLOzcTOagX2dbxH6jBNZyJVk5bAMJsiCdCjHiYo=
Subject key identifier: 10:8C:E5:D4:A8:C5:BC:B8:99:5F:4C:55:2C:1C:D5:9F:52:75:A5:D1
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019D97AB07F64A91B203A081BC4AFBFE5EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 18BB
Signing time: Thu 16 Apr 2026 19:01:01 +0000
Manifest this update: Thu 16 Apr 2026 19:01:01 +0000
Manifest next update: Fri 17 Apr 2026 19:01:01 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: gxIoLNZJuvDSVNcK3YF9vSwsMvdk7LBeN4ksNgHoy1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:07:f6:4a:91:b2:03:a0:81:bc:4a:fb:fe:5e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Apr 16 19:01:01 2026 GMT
Not After : Apr 17 19:01:01 2026 GMT
Subject: CN=108ce5d4a8c5bcb8995f4c552c1cd59f5275a5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:c1:3f:ca:f9:bc:6f:78:02:35:f3:1d:3a:
0e:96:9b:91:a3:bd:58:07:35:79:ec:b1:58:0c:96:
92:46:70:db:2b:43:32:03:22:55:38:85:6e:d5:46:
a1:d1:fa:17:a7:f4:ea:a0:68:32:2d:bb:7d:cb:83:
8c:3f:4b:63:69:97:fe:a7:8c:93:3e:bb:de:27:a4:
a9:de:a7:39:4f:3c:20:a1:ac:c7:27:31:c2:9e:5e:
94:1f:6d:80:36:8e:f5:72:3d:1a:43:3d:42:32:db:
19:ff:c7:e8:5d:b9:30:67:e6:24:42:b6:66:8c:79:
bb:94:6d:75:ec:09:61:de:8f:32:d6:15:20:92:52:
13:3e:a6:2c:30:bf:77:0d:42:de:03:a8:69:4c:6f:
b1:47:58:d6:fe:47:0e:62:e3:b0:da:03:0a:fe:e9:
dd:e2:6f:ec:b6:3d:48:21:be:87:e5:0a:f1:a0:80:
6c:54:53:91:81:a4:d4:3d:dc:23:c8:07:40:4c:15:
d8:7e:e4:b9:dc:e3:b5:e5:94:88:e1:d0:f3:19:b2:
3d:35:03:65:e2:79:fd:b3:d6:be:ca:7e:95:75:fe:
6c:89:0d:de:30:b0:3a:0c:c1:06:47:8e:27:a4:58:
14:b7:c7:c4:88:24:4a:ba:74:88:a4:01:59:0f:97:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:E5:D4:A8:C5:BC:B8:99:5F:4C:55:2C:1C:D5:9F:52:75:A5:D1
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a9:0f:fe:aa:df:c6:8b:ee:e0:33:5b:18:dd:8b:ec:48:63:
b3:63:aa:e1:08:b9:bb:56:27:7c:34:1c:3c:9f:19:c2:bc:dd:
a3:96:48:45:17:85:6a:a1:ce:81:2c:ec:39:3f:36:49:7f:07:
53:74:cd:80:ae:31:d0:99:38:47:45:2e:7f:ab:d0:d2:14:04:
ac:54:2b:ba:5d:85:f1:4b:73:6c:22:95:bb:8d:e2:48:22:38:
b1:4a:2b:74:46:0a:f8:eb:7a:f6:73:65:7f:a3:79:1e:43:7c:
79:99:ed:1b:88:55:d2:d3:1a:8f:0c:7e:5c:bc:d0:47:bc:6d:
53:fe:92:8c:bc:47:06:3b:07:49:1d:5d:dd:6d:2f:8b:8e:25:
d4:f1:0d:fc:cb:eb:ec:57:76:e1:78:05:eb:54:78:f1:ee:d8:
7e:dc:56:0e:84:94:f4:94:15:76:43:2d:a4:4a:36:12:34:df:
07:69:4b:97:2e:2b:a5:f8:91:f0:91:ee:e1:2f:53:d6:3c:c5:
52:49:ea:84:84:92:5a:39:e4:9b:07:80:ff:1d:5a:e1:58:9c:
70:e3:88:70:a8:9f:51:08:6c:82:18:fd:d1:a6:3a:e9:6d:86:
2e:5a:25:45:10:9b:62:5a:b5:8d:eb:6c:19:0d:ab:4a:7d:7d:
5f:74:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:06:32 2026 by rpki-client