Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: Myy7pRsKdSN6vPwQwYX3io5gVk4qNi2BZf/0n9mdit0=
Subject key identifier: B6:56:72:97:9B:D6:0E:58:B2:29:E1:52:0B:5F:08:DF:38:23:A4:CB
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 01A102ED82EC9D8EDAE1592C88F23F61BA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 08AC
Signing time: Sat 03 Oct 2026 18:01:22 +0000
Manifest this update: Sat 03 Oct 2026 18:01:22 +0000
Manifest next update: Sun 04 Oct 2026 18:01:22 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: AMssULvqQlfwqOlD3oTCYt1c4s6sTkS9nvxyu+RzsuM=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:82:ec:9d:8e:da:e1:59:2c:88:f2:3f:61:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Oct 3 18:01:22 2026 GMT
Not After : Oct 4 18:01:22 2026 GMT
Subject: CN=b65672979bd60e58b229e1520b5f08df3823a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:70:06:c0:7f:99:6e:91:44:03:40:89:ad:
b6:76:40:6b:0d:59:d2:c5:28:6d:c8:b8:2f:6e:85:
61:14:68:c9:7e:64:31:06:8e:63:93:69:6b:af:d3:
2e:fc:af:1c:37:fa:5a:b9:30:89:3a:47:41:bd:86:
03:10:9f:44:b4:d8:b9:cc:06:f7:35:fe:93:34:c0:
c7:95:e4:d5:5f:16:28:3c:ed:c9:fb:24:b0:fb:c5:
73:27:23:03:d1:c3:b9:73:07:8b:ce:97:89:ec:ca:
65:4c:ce:9f:c7:73:33:54:da:75:f0:0c:89:7a:23:
be:90:56:fb:0a:de:07:eb:99:73:0a:30:90:21:cb:
08:39:8d:38:c5:78:2d:fb:69:a6:49:c4:cf:44:09:
93:57:d3:99:90:85:44:75:79:8d:f4:0b:db:6f:70:
dc:2a:22:c4:1c:0e:c0:6b:56:e5:58:10:c4:68:55:
3e:12:75:66:d8:1c:43:f6:25:6c:86:f8:40:bb:03:
61:08:59:7c:e9:9e:be:1f:af:72:a0:96:be:e5:e9:
cc:64:fc:13:ea:9f:42:db:23:c8:77:92:97:b9:ec:
ab:9f:e2:e4:f6:0a:47:6b:03:ea:4c:33:a9:4c:56:
16:d6:d3:08:63:1b:16:dd:dc:d5:86:78:e7:aa:e8:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:56:72:97:9B:D6:0E:58:B2:29:E1:52:0B:5F:08:DF:38:23:A4:CB
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:ab:6d:c0:c0:76:49:f1:83:87:58:d4:c9:4b:0a:a8:4f:
63:50:3f:1f:76:8a:db:11:65:1d:fd:c8:dd:96:fe:6c:d1:79:
a3:76:21:56:eb:bb:d5:4a:40:43:0c:1f:50:21:3c:73:88:89:
1f:4b:f5:a3:9b:08:49:90:1b:89:e1:ec:02:74:88:7c:21:40:
4d:9c:9b:30:ab:b7:cd:a2:a0:e3:ec:24:74:63:90:3d:ac:fe:
f1:df:b4:e6:3e:b6:9c:4a:07:99:cf:3a:32:ae:06:55:19:1f:
a8:81:e3:10:29:a7:c9:04:3c:6f:55:4b:6a:46:af:71:64:ff:
d0:12:b5:97:ff:04:b4:90:e2:0f:50:7d:c5:20:ac:17:de:ea:
9a:b9:d5:07:13:1d:31:9f:c3:72:30:0e:9c:63:14:9b:51:de:
09:83:d3:18:7d:6d:f1:47:da:ce:84:ff:76:86:58:26:58:ba:
fb:69:8a:ae:a3:4b:4b:3e:c0:6d:2f:d2:45:51:74:8e:50:e4:
7a:8d:6c:b8:c7:7d:43:c1:77:83:41:3d:51:77:dc:3a:bc:46:
fb:77:3a:26:48:51:73:d0:2a:29:64:07:95:94:3e:db:2b:a8:
d6:da:0a:49:d9:59:65:58:73:3e:bc:07:b1:7c:43:b5:6e:1f:
26:b4:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:27:37 2026 by rpki-client