Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: 5t40Lz3V7G1n4XpjmvFHe8krIUNhMg/ZQFEsCmue1Mg=
Subject key identifier: E6:08:D0:5C:C1:9D:2C:A7:A1:9D:53:17:56:F0:2E:43:6B:42:63:F5
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 01A0DF858CAEE31ADFE13987546040D4FC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 21:01:06 +0000
Manifest this update: Sat 26 Sep 2026 21:01:06 +0000
Manifest next update: Sun 27 Sep 2026 21:01:06 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: 2qkECQ6nr/IaEo+TNrfULJaXc8pi0YCxzBp7zWID88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:8c:ae:e3:1a:df:e1:39:87:54:60:40:d4:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Sep 26 21:01:06 2026 GMT
Not After : Sep 27 21:01:06 2026 GMT
Subject: CN=e608d05cc19d2ca7a19d531756f02e436b4263f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:4b:1f:18:8e:ac:9c:b2:cf:e9:30:cd:7b:
9c:f4:9a:72:ee:65:06:09:5a:08:2f:ed:d1:fa:46:
37:f8:4b:7b:20:76:9c:f7:3d:6b:45:f8:0d:ad:3c:
25:a1:6c:d3:ae:c8:90:bd:78:e7:95:92:7a:63:7e:
5b:ca:1d:cb:9c:c7:2f:a5:a3:ab:5f:d9:93:b7:9b:
72:11:00:49:24:5e:af:0e:cc:89:7b:3c:70:07:dd:
80:64:f5:63:8e:30:c7:f0:5e:8b:51:ed:5d:bc:93:
a8:bb:7a:c2:7e:0f:ee:0e:50:a2:71:bb:fc:f8:7e:
57:f4:06:bd:72:42:de:65:c1:a6:a4:73:bd:39:91:
c5:a1:a3:de:e1:8e:36:97:8f:33:a0:b9:85:a8:12:
63:87:94:19:2a:b4:9d:6f:7e:66:40:14:21:6b:a3:
3a:cf:8a:d7:6e:3f:df:b8:ff:84:79:f5:c9:c2:2f:
52:77:7d:94:fc:84:18:d8:63:15:70:9f:69:f1:c6:
8a:c9:c5:3b:3d:c7:37:50:bd:f8:55:ad:1e:b9:cd:
da:87:e0:99:ad:fa:db:db:02:b4:d0:a6:06:4c:a9:
ab:52:21:1f:fc:54:b7:59:3d:a1:c2:65:9c:14:a5:
11:b4:5d:f2:f4:e5:93:a3:13:18:9f:52:e4:cf:47:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:D0:5C:C1:9D:2C:A7:A1:9D:53:17:56:F0:2E:43:6B:42:63:F5
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f4:82:8c:88:fc:07:9f:65:8d:27:f9:d5:b2:c2:4a:00:2e:
29:47:a4:5a:47:20:c4:65:aa:c4:62:a3:e7:50:2e:3c:4d:bc:
cf:6a:7f:51:c6:74:55:6c:a9:df:45:9a:9f:2a:4d:fd:7c:f3:
c9:29:e1:d1:0c:35:25:8b:c9:21:1b:aa:49:43:91:d6:a2:5a:
54:1e:d3:30:f3:75:98:a2:50:f3:a7:d5:3c:d1:dd:5b:64:07:
e6:c6:ae:e5:5f:48:b6:16:33:7b:19:77:36:94:d2:e6:bb:88:
71:53:ca:90:a4:fe:ce:ca:dc:37:b5:89:c2:0d:41:37:47:8e:
3d:f8:d9:cf:e1:29:7e:13:16:05:a0:c0:4d:68:ab:bd:87:ee:
9c:89:eb:19:53:3f:3d:fd:39:2e:95:a9:67:f8:aa:fa:62:5b:
5b:3f:61:bf:49:be:cc:ab:53:40:36:b4:76:e1:9d:1e:dd:98:
07:83:be:f1:df:95:c1:49:a6:7c:84:72:9b:c1:3a:34:eb:f1:
39:42:3d:d5:d5:26:09:51:90:cc:b5:dc:36:28:61:4f:63:97:
4c:d2:9d:a8:09:4d:5b:17:54:3c:bf:a2:e1:ff:7d:41:ef:b5:
23:07:10:a3:b0:dc:f4:f0:6f:8d:9f:c4:7c:42:e5:a6:41:f6:
fb:0c:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:01:51 2026 by rpki-client