Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: JocbZxJB2uo1JZiOQgSZ1xjE1WvJIow7TNioW16/na8=
Subject key identifier: 3E:EC:ED:C9:B6:47:E4:51:84:F7:9A:55:5A:09:4E:6F:18:A6:73:80
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 01A0CC6C6E58D00C2E561FEF2DE17DEE1A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 04:00:53 +0000
Manifest this update: Wed 23 Sep 2026 04:00:53 +0000
Manifest next update: Thu 24 Sep 2026 04:00:53 +0000
Files and hashes: 1: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (hash: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=)
2: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (hash: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=)
3: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: iMpU6R0si5X2z0wp+hn8MsDCPqqfHXE1NCyAuUsZK+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:6e:58:d0:0c:2e:56:1f:ef:2d:e1:7d:ee:1a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Sep 23 04:00:53 2026 GMT
Not After : Sep 24 04:00:53 2026 GMT
Subject: CN=3eecedc9b647e45184f79a555a094e6f18a67380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:c8:aa:cf:12:89:65:61:5f:10:06:93:e9:
42:a1:0d:da:bc:ba:dd:c0:a2:a9:54:d0:e0:db:99:
a2:3c:36:97:cd:a4:0c:47:1a:3d:b7:b4:3c:9c:c4:
6f:c4:02:c4:51:98:5c:b6:73:0f:b6:76:85:ba:dd:
f3:2e:f6:51:38:04:df:4b:f5:8d:10:3a:d5:06:1a:
92:31:50:05:bb:72:8c:6e:e5:4e:00:95:69:36:d5:
21:91:c7:f7:63:19:5c:63:3e:37:cf:1d:fe:62:4a:
01:13:7c:bf:e9:39:54:65:63:36:b7:9b:74:c3:28:
a4:d1:86:4f:06:9f:55:bd:44:5a:81:92:5f:35:82:
49:31:8d:32:e0:0a:69:40:71:32:59:17:22:b9:6b:
87:3b:e4:86:f3:43:be:02:13:42:52:16:ba:ce:c2:
ed:d1:e4:b4:ec:2c:88:b1:f8:8f:4f:a7:7c:70:01:
5c:61:21:0e:7c:67:6c:14:aa:81:76:17:b3:71:f7:
5d:ed:5b:b1:37:5d:fc:5b:14:6a:a7:b5:79:2a:74:
6e:a7:22:f1:a9:be:86:a4:2f:35:93:97:c4:33:1b:
d0:6f:82:bf:85:45:8a:58:fa:7d:6a:8b:d4:c8:67:
a0:a8:0d:ed:c7:af:d2:91:d7:4b:ad:df:5e:5e:ec:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:ED:C9:B6:47:E4:51:84:F7:9A:55:5A:09:4E:6F:18:A6:73:80
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c4:45:85:a5:50:cb:d8:3e:54:0f:d4:25:01:de:33:7e:f3:
42:93:35:0c:3b:eb:46:f8:01:23:5a:73:aa:f0:18:4b:4f:33:
99:e4:48:9d:e8:da:9d:82:c8:c5:1d:51:d0:51:7e:59:08:2f:
83:92:be:48:52:25:87:ec:47:dc:ca:fa:1a:1b:96:4e:bc:46:
78:7f:b0:54:be:94:e8:1f:e8:8e:53:e3:8e:d3:f2:a0:15:21:
e6:bb:bc:ff:0c:61:7d:d2:ea:c3:df:95:5b:c8:53:e4:d3:76:
b3:c1:1f:e8:c2:e8:95:4f:3f:1b:39:fc:a4:af:40:d4:c9:8d:
b3:b8:f4:c9:ed:d3:6a:db:44:05:09:8f:b3:4e:f3:a1:15:36:
a8:40:d1:2e:37:5b:c6:72:38:38:1d:83:0c:73:8a:88:e6:04:
c9:98:9b:1a:c1:df:1f:48:20:e3:b2:93:17:3d:03:53:a0:0d:
19:97:3b:da:85:f7:d9:e1:51:1a:a2:9c:7d:6b:3a:8f:5c:48:
a6:d1:91:e2:25:da:a3:1a:97:16:69:ea:c0:d9:b6:fc:bf:69:
e2:56:ba:7e:13:5b:3e:d7:43:0f:bd:8b:c8:1f:e3:cf:14:3d:
e5:24:0b:12:1d:9d:66:3c:02:76:26:b3:fa:64:80:6a:8a:99:
ba:6b:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:17:26 2026 by rpki-client