Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: vFbK2IOhbVA7qBcfmnwTcSgNSiJa6DTNFELRWSLHsKs=
Subject key identifier: 2E:9B:61:C8:B0:D5:A8:72:B9:8D:FC:2E:8D:5D:75:D1:18:90:FE:4E
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019D26CD63EAF78217EA496FCF7E76BCDFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: WkpO27Y8ZxNKd7U3qDzWmgFGPCo.roa (hash: 8pKYcInVWQ20ee2YIPC0/BRFBVDzYLbWsfYCougTXnw=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: 4uAVGahC/WbF1h4GJgr8Abad9nuzXjt60+wqo9RlT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:63:ea:f7:82:17:ea:49:6f:cf:7e:76:bc:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=2e9b61c8b0d5a872b98dfc2e8d5d75d11890fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:34:03:95:d4:ed:6e:91:d0:37:5f:9a:d2:
00:7d:51:8b:50:fd:76:eb:76:91:0c:58:52:bd:c4:
f2:48:c1:8d:14:71:3a:a3:15:b2:c2:1a:90:51:78:
c9:9b:2c:85:6a:c0:1c:ef:18:de:95:86:98:ee:7d:
d4:3a:59:7e:73:bf:a4:24:77:43:e3:84:08:2f:bb:
6e:7b:70:d0:1e:ae:c2:61:be:5f:3a:c5:4f:bb:99:
67:38:2f:45:27:3f:51:46:4c:86:fd:14:a4:90:1b:
9d:c7:85:54:c9:3d:4e:ed:3a:85:c9:3d:a8:0a:98:
a0:de:59:c9:a2:3f:0b:d1:00:f4:98:eb:d2:80:cb:
3d:d1:eb:88:35:ba:fb:6f:c9:a2:49:dd:a2:38:48:
e8:f9:88:69:94:1f:63:77:e9:e6:b7:4f:10:0f:e1:
05:97:4c:d4:e9:e5:94:88:69:14:09:ff:a3:b5:91:
75:b3:d8:f3:dd:82:4c:f9:9f:66:06:5f:5b:40:82:
b9:1e:52:21:63:e2:f0:e9:5d:3e:03:af:4e:58:ff:
24:66:0a:78:18:58:6e:25:4e:a1:96:00:fa:7d:7d:
4d:79:4f:31:00:bc:83:02:e7:04:79:06:cc:31:cd:
68:9e:a7:fb:42:d0:84:4d:05:0b:66:25:bc:da:6b:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9B:61:C8:B0:D5:A8:72:B9:8D:FC:2E:8D:5D:75:D1:18:90:FE:4E
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:95:72:53:cb:68:25:55:58:25:21:bd:55:21:f0:09:f5:6c:
de:b3:20:5d:dd:7b:3e:fb:5f:d1:77:88:4b:a5:c5:e8:e4:7b:
ce:f6:09:97:f4:fb:87:78:c8:84:8a:c6:c3:44:14:32:59:35:
e1:b5:80:46:40:57:ea:13:ec:f9:88:ea:92:8b:bf:e7:f0:65:
c3:95:44:bb:e9:e7:61:a8:04:06:6b:97:73:d2:cc:ae:55:c9:
a2:9f:65:f0:4e:d4:b9:d0:4f:b6:9e:31:9f:63:81:a1:6e:30:
8e:a0:c3:b8:63:0a:40:ce:e4:94:a9:49:83:a7:72:61:d8:0e:
54:8b:93:1f:69:15:59:70:16:9b:51:e9:15:21:46:74:d4:23:
ef:b0:df:e5:00:34:bb:70:0e:83:d5:88:e3:af:93:2b:49:c9:
2a:03:e2:55:36:eb:94:d6:83:f3:0c:c6:85:bd:b6:7d:e8:00:
af:be:59:8f:48:e0:2e:d0:7a:b7:8f:49:aa:27:0a:be:7e:bc:
c6:ad:65:90:e5:f6:b6:a8:fe:12:f8:18:d4:0c:16:39:fe:fa:
51:76:2b:5f:2a:9f:e5:5d:6c:d4:73:91:e6:df:c3:b6:99:5c:
4c:b9:00:bd:3a:90:2f:f1:b7:6d:70:4b:83:db:49:ed:c9:33:
4a:8b:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:38 2026 by rpki-client