Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: QYPwHTQg9Gtzcf2QWmeLB+rn5FvsoZ9vffXg6xzcncA=
Subject key identifier: 49:08:9F:B9:26:DE:5A:3C:DB:CF:D8:E6:C0:3E:CB:DC:CD:2C:72:8E
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019F8FB53D5E5891CE8DDF1FDB48C2A5CE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 16:00:47 +0000
Manifest this update: Thu 23 Jul 2026 16:00:47 +0000
Manifest next update: Fri 24 Jul 2026 16:00:47 +0000
Files and hashes: 1: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (hash: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=)
2: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (hash: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=)
3: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: 6exxH3aMD0v5E8hVeGb4lvQ1yqXb20qL5dPs96faAMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3d:5e:58:91:ce:8d:df:1f:db:48:c2:a5:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jul 23 16:00:47 2026 GMT
Not After : Jul 24 16:00:47 2026 GMT
Subject: CN=49089fb926de5a3cdbcfd8e6c03ecbdccd2c728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:01:83:0c:72:f8:99:51:b7:06:0a:23:48:
d9:5e:a4:e9:d9:36:69:48:4e:dd:66:ec:98:a5:e8:
37:95:90:6d:f9:a4:17:ea:bf:ae:2b:d6:22:c7:88:
da:35:83:aa:3d:c9:68:a2:8c:7e:03:6e:21:c2:cf:
28:13:b6:2d:95:0e:65:b2:de:78:8e:c1:06:23:b6:
d2:27:ef:6f:df:26:c1:82:b1:5a:9a:08:f3:b1:6b:
66:27:85:54:fe:03:05:fb:4b:18:5a:4a:07:8d:f4:
bc:94:28:12:a0:af:c1:f7:ad:0c:5e:e4:c6:27:47:
b8:70:da:d3:20:7b:db:d9:3a:ec:18:0c:55:05:88:
8b:d7:57:8d:3c:86:5d:13:fe:bb:69:d0:d5:b9:4c:
b3:4e:e6:02:87:db:36:bf:fd:93:16:f3:15:65:43:
fa:04:3a:1c:e2:a8:a9:7e:88:11:4f:8e:9c:76:c2:
ee:2d:57:46:89:de:42:e2:c9:67:9a:c3:02:f7:8e:
94:c6:31:a5:07:bd:a5:1b:09:c1:0a:f3:b8:46:a9:
b6:37:95:4c:e3:ff:73:69:58:33:da:74:64:ae:1c:
88:a8:66:63:a5:df:29:8b:78:b2:12:e7:ef:8e:f1:
59:a8:fe:b4:f7:24:27:b2:a6:19:a9:9f:3f:d9:fb:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:9F:B9:26:DE:5A:3C:DB:CF:D8:E6:C0:3E:CB:DC:CD:2C:72:8E
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e7:e0:f3:09:23:93:85:21:51:b2:06:04:72:8c:18:ca:f3:
2f:84:87:7d:2e:79:f6:97:b0:05:73:97:2b:ab:c2:d0:7a:72:
fe:2a:26:51:10:a8:13:4a:2d:19:96:cf:34:4d:d1:1d:0f:32:
48:95:c0:89:2f:39:98:74:c0:c9:55:e9:8d:ca:de:2b:ce:1a:
8e:b1:9d:db:56:3d:d0:0d:0c:66:10:fc:ad:7c:4e:a8:70:46:
ce:0e:71:79:68:8f:e9:38:14:65:e3:27:76:a9:e8:17:04:29:
ad:62:e2:65:33:24:4a:29:4f:29:41:74:72:a7:e3:b4:38:00:
32:0c:5a:19:a0:c4:5b:3d:11:9d:63:77:0f:cd:9b:c1:78:96:
03:40:75:02:1c:d7:08:b9:99:ff:d4:df:ed:4f:0f:53:58:58:
df:f6:15:c4:49:dd:cb:9c:f9:bb:66:94:10:ba:5f:20:09:51:
f1:74:2e:a4:63:23:2d:7f:71:41:59:05:1a:1b:80:5d:7f:4c:
1e:09:73:a7:bc:65:d0:5d:18:69:b5:6e:72:a2:81:c6:28:b7:
87:01:39:6b:db:e5:3b:96:53:34:8b:74:10:72:81:cf:52:b3:
e1:cb:4e:99:de:3b:99:56:55:cd:b1:59:e1:8b:2b:d3:d3:6c:
98:04:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:41 2026 by rpki-client