Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: GVnQ7Gzva0ilEFZgjih0J9WsLJTjs7R8V1kqaxjjgA4=
Subject key identifier: FD:33:15:2D:31:15:92:5F:44:85:C4:B8:CB:0D:22:4A:D8:F0:12:66
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 01A1C58C50DEAC1E3D604BF3B654C379EBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1AE5
Signing time: Tue 10 Nov 2026 13:01:09 +0000
Manifest this update: Tue 10 Nov 2026 13:01:09 +0000
Manifest next update: Wed 11 Nov 2026 13:01:09 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: lkkY8ICEKyrmkdoIefaWPuv8wBWVjUIajZD0m7DOAQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:8c:50:de:ac:1e:3d:60:4b:f3:b6:54:c3:79:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Nov 10 13:01:09 2026 GMT
Not After : Nov 11 13:01:09 2026 GMT
Subject: CN=fd33152d3115925f4485c4b8cb0d224ad8f01266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:fd:f3:dc:b1:ee:39:e5:4a:cd:29:dc:61:
b1:85:a7:d8:82:39:be:2c:ad:0b:97:30:87:85:fd:
24:bc:3b:0c:4d:90:78:db:1b:c4:32:8e:b4:aa:c2:
db:31:79:d4:49:28:73:20:3d:49:af:31:27:dd:00:
8a:64:73:6e:4d:71:b6:ea:be:fd:12:2c:73:cd:3c:
c7:88:33:68:ca:41:68:9c:5b:ec:51:80:53:01:19:
72:c5:b8:4e:03:d3:a9:bc:c9:d4:e8:44:54:e3:8a:
c3:34:c3:af:a3:b0:9e:50:50:74:ba:d6:18:91:ea:
2d:60:68:c9:d0:65:f6:ca:83:78:aa:a9:e8:e6:d7:
5a:cc:14:96:79:73:91:5a:f4:4a:13:4f:0a:7f:9b:
5d:f4:93:69:50:06:c3:11:49:c0:b3:ae:e0:9a:b0:
32:ef:f8:bd:58:eb:02:2b:cd:c7:dd:e0:64:49:22:
ef:aa:52:8b:44:c9:bd:9c:6c:7c:b0:7f:7c:8f:5b:
af:ba:d5:23:b2:85:54:66:dd:8c:fc:9d:74:e7:a9:
87:a2:76:76:49:99:15:fd:29:64:08:0b:a5:bc:ce:
24:03:c0:ee:bb:b1:58:e3:46:38:4f:41:dc:db:a1:
2e:ab:4b:90:1c:62:97:49:6d:e1:06:05:3d:ae:8a:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:33:15:2D:31:15:92:5F:44:85:C4:B8:CB:0D:22:4A:D8:F0:12:66
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:94:38:08:00:e9:d0:0d:30:89:91:88:6d:f5:41:eb:df:
09:c9:3d:5d:a8:4d:7e:c4:c4:6f:d9:fb:e6:d2:c2:07:20:c8:
ed:df:76:d7:36:9b:4b:1b:48:86:35:d0:28:c2:b6:e0:ec:36:
dc:d9:8f:de:2e:1e:94:72:b2:77:55:a6:2c:e8:7b:b4:dc:58:
f9:4f:36:76:cd:76:40:b6:62:75:1b:f8:f8:91:9f:fe:97:18:
90:cb:d6:39:ea:39:13:a1:9c:69:f6:1e:a7:4b:8e:de:d9:93:
25:c8:20:89:47:46:e3:fd:7b:64:2a:2c:59:fe:f2:f6:0f:9c:
56:0c:de:a6:48:bc:d7:c2:e9:1a:98:85:cf:4f:3e:3c:52:92:
b7:77:6a:0d:f2:a0:ab:fa:c4:b2:30:10:3c:fd:25:54:b2:40:
07:c4:35:72:fc:58:4c:c5:71:bc:98:40:65:4e:3f:50:06:a1:
e2:08:6f:d6:79:da:93:f8:7b:03:88:a1:2d:a6:e0:1e:3b:cc:
7e:fd:44:73:7b:8a:e7:33:99:3a:7b:f8:0e:7e:97:97:ed:bf:
71:aa:38:8f:78:03:6b:dd:92:21:d8:d1:0e:5d:da:ab:d3:82:
cc:68:57:1b:d2:a0:6c:68:b8:c5:6a:f3:58:44:28:ac:aa:8d:
c7:93:ef:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHFjFDerB49YEvztlTDeevOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjcwMTQwYzAzZDkwYzkxMmRmMTFmMGZkODM3MjQ5Yjdj
YjJlMTIwHhcNMjYxMTEwMTMwMTA5WhcNMjYxMTExMTMwMTA5WjAzMTEwLwYDVQQD
EyhmZDMzMTUyZDMxMTU5MjVmNDQ4NWM0YjhjYjBkMjI0YWQ4ZjAxMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ3989yx7jnlSs0p3GGxhafYgjm+
LK0LlzCHhf0kvDsMTZB42xvEMo60qsLbMXnUSShzID1JrzEn3QCKZHNuTXG26r79
EixzzTzHiDNoykFonFvsUYBTARlyxbhOA9OpvMnU6ERU44rDNMOvo7CeUFB0utYY
keotYGjJ0GX2yoN4qqno5tdazBSWeXORWvRKE08Kf5td9JNpUAbDEUnAs67gmrAy
7/i9WOsCK83H3eBkSSLvqlKLRMm9nGx8sH98j1uvutUjsoVUZt2M/J1056mHonZ2
SZkV/SlkCAulvM4kA8Duu7FY40Y4T0Hc26Euq0uQHGKXSW3hBgU9rorEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0zFS0xFZJfRIXEuMsNIkrY8BJmMB8GA1UdIwQY
MBaAFAK3AUDAPZDJEt8R8P2Dckm3yy4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJjQlFNQTlrTWtTM3hId19ZTnlTYmZMTGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZDk5NGItOGNmNC00NTI5LWJkYmMt
YjM4ZGNmMmYwMTBjLzEvQXJjQlFNQTlrTWtTM3hId19ZTnlTYmZMTGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZDk5NGItOGNmNC00NTI5LWJkYmMtYjM4ZGNmMmYwMTBj
LzEvQXJjQlFNQTlrTWtTM3hId19ZTnlTYmZMTGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjSUOAgA
6dANMImRiG31QevfCck9XahNfsTEb9n75tLCByDI7d921zabSxtIhjXQKMK24Ow2
3NmP3i4elHKyd1WmLOh7tNxY+U82ds12QLZidRv4+JGf/pcYkMvWOeo5E6GcafYe
p0uO3tmTJcggiUdG4/17ZCosWf7y9g+cVgzepki818LpGpiFz08+PFKSt3dqDfKg
q/rEsjAQPP0lVLJAB8Q1cvxYTMVxvJhAZU4/UAah4ghv1nnak/h7A4ihLabgHjvM
fv1Ec3uK5zOZOnv4Dn6Xl+2/cao4j3gDa92SIdjRDl3aq9OCzGhXG9KgbGi4xWrz
WEQorKqNx5Pvrg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 18:14:37 2026 by rpki-client