Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: aKTaJ6aPh3EArLy7PAWmP7XBy+dRFnUX6ehchNG4t/E=
Subject key identifier: A8:82:CE:BF:66:6F:F4:91:AD:86:19:5D:5B:27:7B:03:C7:53:67:86
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019D26280842C124E63F6C051CB7395178FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 06AC
Signing time: Wed 25 Mar 2026 18:00:50 +0000
Manifest this update: Wed 25 Mar 2026 18:00:50 +0000
Manifest next update: Thu 26 Mar 2026 18:00:50 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: 9J9seshTWQd2ZXE2SM2zbNQneMNVKtynoVoquMx5TZY=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:08:42:c1:24:e6:3f:6c:05:1c:b7:39:51:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Mar 25 18:00:50 2026 GMT
Not After : Mar 26 18:00:50 2026 GMT
Subject: CN=a882cebf666ff491ad86195d5b277b03c7536786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:92:e1:1a:b1:1a:4f:12:4e:a3:c9:b7:bd:
a0:f2:a2:b6:ef:5b:e7:c4:6c:cc:89:d0:cc:87:c2:
03:a1:69:87:cc:60:3c:f9:28:3b:c2:26:0a:80:a1:
c2:8c:56:80:bd:a4:09:98:7f:64:c7:aa:ab:58:71:
26:fb:37:d2:87:5f:8a:85:b7:06:37:5a:79:ff:b8:
9b:53:e8:d7:e2:5e:ba:40:7f:ec:e4:b5:60:a9:c4:
84:7c:c6:bf:d2:c1:ca:41:ab:db:53:1a:16:f1:8e:
1c:25:a0:9b:28:1d:95:1a:c8:17:93:23:d6:9b:33:
c1:0d:98:62:24:ce:e7:06:e2:2b:83:a9:8c:50:fd:
e6:86:d9:fb:a8:b4:67:58:52:ac:73:c2:92:29:5f:
57:fb:db:16:68:60:55:98:2d:d5:95:73:5b:cf:42:
ae:9c:19:ad:d2:53:9d:af:59:08:fa:56:f0:9e:23:
f7:e3:19:5d:be:fe:62:7c:bf:a0:99:ca:7c:86:be:
ce:2a:32:59:ec:1c:d3:f8:4b:ee:e4:05:5d:c6:92:
b3:45:f8:cd:1f:c2:bc:eb:95:3a:ee:07:c0:7c:dd:
88:e1:fb:e2:0b:4b:5c:55:0a:f1:d7:02:bf:a2:06:
b6:da:9f:65:d2:28:11:9f:53:70:0c:d8:62:7f:1d:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:CE:BF:66:6F:F4:91:AD:86:19:5D:5B:27:7B:03:C7:53:67:86
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2b:19:d9:68:c6:92:5e:7d:31:89:ca:2a:a2:d8:1a:fc:95:
03:9e:0f:bd:42:b2:f1:10:3c:a7:73:16:52:0b:a2:78:87:f2:
bf:4e:d5:94:3e:77:52:9c:72:90:7b:c4:f8:71:1f:e0:33:f2:
2d:e6:d3:61:5a:74:9d:82:ed:d9:ea:c1:51:15:de:15:24:21:
a4:ca:c8:87:34:42:9d:67:d3:3d:87:ed:b8:57:58:0e:fe:fb:
17:d4:2d:7d:9a:76:00:89:85:94:c5:ba:81:5e:20:ae:69:80:
60:ec:36:db:c6:8d:fd:4f:a5:52:60:a5:69:fc:0b:64:68:63:
f7:90:ac:43:f4:d6:15:6c:bd:f4:54:bd:58:d2:a8:4b:90:82:
ed:c8:59:09:83:f8:41:21:a0:de:72:12:31:b4:86:5a:c7:59:
0d:01:32:79:e0:de:cf:c9:58:d0:c3:35:ec:0d:95:05:d8:c7:
84:34:65:5c:72:01:5b:e7:d6:b9:4f:ab:a9:94:3c:6f:48:06:
b6:46:38:e5:d3:ea:58:0d:8c:1c:6a:f5:70:ec:d1:02:e7:d1:
a8:54:90:f5:dd:9c:de:d1:de:5f:5b:03:85:a8:7a:4d:69:aa:
65:d7:6d:ac:55:75:8b:0b:c0:8e:9e:2f:f4:91:c7:4a:c5:8e:
d2:b5:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:34:11 2026 by rpki-client