Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: vlt+cXOG5XCVdfZ1algXe/XkuGOFDaht2B3/coUVfIg=
Subject key identifier: 1A:B2:83:9F:0A:3F:5E:F3:5D:92:9B:66:72:14:8C:8F:6D:AB:F5:44
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 01A0C2FAF134C35C6386593E988C04BCAC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 133D
Signing time: Mon 21 Sep 2026 08:00:20 +0000
Manifest this update: Mon 21 Sep 2026 08:00:20 +0000
Manifest next update: Tue 22 Sep 2026 08:00:20 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: 8I+X4YLjkbNopZyUFdG0Xuz+0n8YaNKk14Cz+ed46rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:f1:34:c3:5c:63:86:59:3e:98:8c:04:bc:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Sep 21 08:00:20 2026 GMT
Not After : Sep 22 08:00:20 2026 GMT
Subject: CN=1ab2839f0a3f5ef35d929b6672148c8f6dabf544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:ef:e3:b2:cd:c1:ac:b2:b6:ee:64:ce:a8:
2e:23:a3:75:d2:d5:2e:23:13:4c:7d:66:ac:be:35:
a8:36:43:14:f2:b5:d3:ad:c4:a9:1c:d5:c8:3a:d9:
d5:6e:8a:f9:94:84:aa:44:35:3b:33:c2:07:c8:22:
bf:27:3d:af:b6:85:4a:33:15:1b:3e:e7:5a:48:6e:
a7:2c:dd:89:70:89:1f:d4:48:e4:da:09:ca:b3:7a:
2d:b0:cd:c6:53:eb:cb:43:a8:2f:28:ab:b5:7f:14:
ea:00:92:e9:24:05:e4:e5:56:cf:95:ef:a6:76:19:
96:25:9f:aa:f6:a4:31:a3:7e:1e:32:2a:3f:2a:86:
64:bf:c8:56:1c:f0:b6:df:2f:d5:d8:f1:3f:bb:08:
6c:8f:6d:6e:31:ae:72:06:c0:57:a9:46:52:91:87:
37:27:9f:9c:f5:f3:e3:bc:d6:1e:11:f2:c8:01:ea:
01:07:f9:c9:96:b7:30:12:c8:4a:fc:4a:c5:9c:ec:
26:2f:96:e0:cf:16:1b:88:27:4f:99:29:02:97:43:
b3:2b:12:8c:36:48:af:ea:90:14:2d:ee:a8:4a:c3:
16:00:d6:f3:ae:7e:98:e8:4c:05:a5:41:42:eb:ec:
3a:06:dc:a3:d7:83:08:e6:87:c4:0b:7c:c0:8e:ac:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:83:9F:0A:3F:5E:F3:5D:92:9B:66:72:14:8C:8F:6D:AB:F5:44
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:06:12:e7:b2:39:c1:82:9f:9f:53:80:fc:0c:63:31:90:
d9:f7:34:45:d0:22:20:0a:77:28:24:86:a6:c1:25:45:ea:41:
99:a9:94:36:84:d2:a9:99:64:7f:89:cb:b2:8e:9e:1c:cc:5f:
0e:8c:2a:89:ee:78:0f:f7:cb:e0:0d:23:9f:aa:7a:d3:0b:e1:
de:19:11:fe:fe:2d:bd:68:29:fa:09:d9:ef:6b:8f:af:9e:32:
b4:4f:2c:b3:d2:e7:07:d3:46:90:7c:b0:c1:56:18:46:f9:4b:
84:81:e6:7d:50:73:34:1f:1d:75:8d:84:cd:c7:d2:dd:77:4c:
bc:80:00:4c:82:6f:8c:f3:30:a2:15:69:38:1c:ac:8e:b6:6c:
60:84:ed:9e:0d:2a:b2:c6:90:1a:65:57:5a:65:a2:b2:f1:42:
23:d8:2d:6c:9a:a2:04:b4:dc:73:9f:9e:dc:67:ea:5a:07:5b:
90:7e:92:5c:8e:90:fa:cc:b1:b5:65:ad:f5:42:12:b8:59:45:
b3:3d:9f:e9:64:95:9a:d1:42:8b:4a:13:4d:28:34:47:b3:a2:
f9:ec:02:54:7b:a7:1b:72:dd:d8:b7:b2:69:62:17:b5:b6:13:
13:16:58:50:b3:e2:51:66:d6:82:92:e9:d3:f4:24:aa:6a:9d:
fb:d9:ad:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+vE0w1xjhlk+mIwEvKwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYmE5ZGIyNjc0ZjczNDU2NWYwOTUzMzkzZjBhNTY5NjFj
YTU3YzgwHhcNMjYwOTIxMDgwMDIwWhcNMjYwOTIyMDgwMDIwWjAzMTEwLwYDVQQD
EygxYWIyODM5ZjBhM2Y1ZWYzNWQ5MjliNjY3MjE0OGM4ZjZkYWJmNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Njv47LNwayytu5kzqguI6N10tUu
IxNMfWasvjWoNkMU8rXTrcSpHNXIOtnVbor5lISqRDU7M8IHyCK/Jz2vtoVKMxUb
PudaSG6nLN2JcIkf1Ejk2gnKs3otsM3GU+vLQ6gvKKu1fxTqAJLpJAXk5VbPle+m
dhmWJZ+q9qQxo34eMio/KoZkv8hWHPC23y/V2PE/uwhsj21uMa5yBsBXqUZSkYc3
J5+c9fPjvNYeEfLIAeoBB/nJlrcwEshK/ErFnOwmL5bgzxYbiCdPmSkCl0OzKxKM
Nkiv6pAULe6oSsMWANbzrn6Y6EwFpUFC6+w6Btyj14MI5ofEC3zAjqzy/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqyg58KP17zXZKbZnIUjI9tq/VEMB8GA1UdIwQY
MBaAFAK6nbJnT3NFZfCVM5PwpWlhylfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgt
ZmY4NjE0NmY4Y2M4LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzVkYWItZTAxZS00NTQ2LThjMzgtZmY4NjE0NmY4Y2M4
LzEvQXJxZHNtZFBjMFZsOEpVemtfQ2xhV0hLVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApwGEuey
OcGCn59TgPwMYzGQ2fc0RdAiIAp3KCSGpsElRepBmamUNoTSqZlkf4nLso6eHMxf
Dowqie54D/fL4A0jn6p60wvh3hkR/v4tvWgp+gnZ72uPr54ytE8ss9LnB9NGkHyw
wVYYRvlLhIHmfVBzNB8ddY2EzcfS3XdMvIAATIJvjPMwohVpOBysjrZsYITtng0q
ssaQGmVXWmWisvFCI9gtbJqiBLTcc5+e3GfqWgdbkH6SXI6Q+syxtWWt9UISuFlF
sz2f6WSVmtFCi0oTTSg0R7Oi+ewCVHunG3Ld2LeyaWIXtbYTExZYULPiUWbWgpLp
0/Qkqmqd+9mt6Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:51 2026 by rpki-client