Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: jPD033e22Q6/z8mdetdR+iZSpfTjUSyPS2wD0gBvbmg=
Subject key identifier: CC:3E:02:AC:50:58:18:07:48:6C:AE:2A:BD:09:29:FA:9A:1A:D3:F4
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 01A0D237615AF2B20F4B348A236FB74EABC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 07:00:39 +0000
Manifest this update: Thu 24 Sep 2026 07:00:39 +0000
Manifest next update: Fri 25 Sep 2026 07:00:39 +0000
Files and hashes: 1: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (hash: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=)
2: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (hash: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=)
3: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: UUUadF9waS4XsZj6t+j2jXxNL3Vr1yUGyDb2KFRUd5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:61:5a:f2:b2:0f:4b:34:8a:23:6f:b7:4e:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Sep 24 07:00:39 2026 GMT
Not After : Sep 25 07:00:39 2026 GMT
Subject: CN=cc3e02ac50581807486cae2abd0929fa9a1ad3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:65:5a:a0:2c:62:73:f6:fb:66:e5:6e:24:
20:e0:0d:f4:87:46:b7:47:a6:6f:07:f2:25:66:3c:
a0:e1:c5:2b:60:7c:22:14:5c:e0:70:6a:1d:e8:8c:
5e:95:78:c9:01:80:f7:c6:35:01:91:c2:44:e5:98:
81:b6:45:97:e4:91:44:34:4d:a0:bd:28:4f:66:5a:
84:ad:ff:c2:2e:29:7a:58:6c:f1:be:53:06:41:eb:
bb:78:19:2e:29:19:f8:2c:42:49:0f:1a:5a:7c:43:
0b:80:8d:95:90:d6:dd:01:44:be:d4:ee:27:ad:a2:
6d:ff:31:60:29:1c:1c:2b:f5:db:29:cf:d7:48:39:
97:86:dc:e2:af:60:50:27:6b:94:c4:8c:96:f6:51:
47:b7:4b:21:36:0d:6d:09:48:4b:30:f1:15:6b:bf:
5f:a9:9a:9a:fa:30:c5:9a:57:bf:5b:6a:d0:c2:8c:
d8:a3:bd:20:96:c5:5b:fd:0b:37:e8:7d:84:40:cb:
a5:93:9d:01:58:b8:d6:5d:00:f7:40:7c:f2:08:14:
f9:4f:0b:ae:0b:0c:75:df:1c:3d:53:22:3e:3c:5b:
c6:b2:f4:f6:2b:3d:ac:fe:cb:4a:80:f7:41:46:93:
e6:5a:1b:80:93:41:76:ab:7d:2e:dd:b3:aa:99:e2:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:02:AC:50:58:18:07:48:6C:AE:2A:BD:09:29:FA:9A:1A:D3:F4
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:9a:06:6e:47:2c:eb:3a:23:da:7e:6f:04:8b:0a:f4:fa:
5c:b8:3e:e6:ff:0e:40:8c:11:ca:a0:40:1b:7d:90:22:30:9d:
60:9c:09:d6:7c:88:c4:48:14:57:eb:d0:16:82:e9:14:4c:88:
2f:3d:8f:42:93:9b:b7:61:01:86:e7:36:79:ed:37:b6:52:86:
e5:30:fb:9d:52:bd:3b:42:fb:d1:36:c9:24:79:87:66:f6:1d:
10:42:5e:97:04:ed:b4:12:c7:b3:11:ab:1e:9f:60:6e:09:dc:
01:16:0b:49:c9:15:1e:b6:dd:94:a7:1b:75:d5:52:c1:5f:1a:
4d:f0:0c:0d:ca:36:bf:d3:9f:22:46:f7:68:59:1e:16:62:8e:
70:fe:c6:7e:54:24:14:80:4e:e5:4b:63:a2:e0:11:10:b5:cf:
e0:6d:e2:c7:60:6b:7b:20:e7:42:90:ef:25:8d:b7:9d:59:f2:
43:d7:51:bf:ac:fc:77:fc:8d:b2:27:12:ce:f6:32:ec:45:8c:
d0:e6:99:cb:8e:21:c5:2a:9a:8e:b8:71:8d:4e:17:e7:0c:4d:
ba:a7:e8:0d:5a:13:6f:d0:54:74:e7:93:ed:a5:a6:98:1f:69:
8f:57:44:c3:71:2f:79:b2:14:d8:2c:20:5c:11:15:c6:7b:38:
0d:5c:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:17:05 2026 by rpki-client