Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: F+nHSICyI/MQf4pj2QlImcQRG1QrYtFGZGGjKR9ruMQ=
Subject key identifier: D0:8D:58:ED:EE:8C:D0:81:88:A6:E8:00:92:BB:22:BB:0F:E4:7C:38
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019D258382CDEBA329B2981BAB8824EB355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: GBgaf2vNtOCHVdDwu5RdpY3NVaOMDgsmrq8Zyk5uMKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:82:cd:eb:a3:29:b2:98:1b:ab:88:24:eb:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=d08d58edee8cd08188a6e80092bb22bb0fe47c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:c2:37:2e:45:e8:e1:c3:41:10:d5:b6:0b:
07:80:6a:f9:47:4c:b0:0a:1d:aa:82:84:09:96:92:
5f:a3:a9:70:af:e8:57:cf:c0:c2:62:12:1e:99:76:
d0:37:30:7e:fb:7d:55:f4:3b:77:62:bd:af:0a:0f:
38:ab:74:16:a6:d9:7b:e9:a0:bc:63:28:06:35:35:
64:db:80:0d:4c:d6:b2:9f:80:f2:b6:01:a3:f4:a6:
6f:7c:ff:2e:fb:bd:b0:62:df:09:ad:00:94:8c:ff:
b1:36:18:75:8e:d0:f7:da:69:ff:ae:f3:7f:b5:ab:
90:5f:7d:21:28:41:77:6e:2a:28:5c:b6:3f:36:86:
47:9e:d6:d3:5e:00:97:7c:59:aa:5a:e7:12:49:18:
0e:71:2a:0a:0c:48:1b:44:a9:5e:27:48:78:70:11:
9b:ba:9a:31:b2:b2:94:91:69:0e:5d:25:bb:da:c5:
9b:f6:e5:2c:57:bb:51:22:f7:16:73:0c:35:a0:9b:
c6:e6:8a:b4:38:7b:48:fa:95:c7:a1:29:d9:3e:b0:
93:93:30:d4:11:0b:2f:fd:74:15:bf:e2:7b:31:76:
d8:23:fa:c4:82:f3:6b:00:09:42:64:67:88:7e:39:
12:b5:31:81:4e:4e:1a:ce:b3:62:3e:21:e0:3e:bd:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:58:ED:EE:8C:D0:81:88:A6:E8:00:92:BB:22:BB:0F:E4:7C:38
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:33:22:a8:90:13:4e:57:29:2a:56:4b:93:06:76:97:9f:
a2:bb:38:ae:b2:e3:11:9c:56:70:4e:f2:bd:09:6f:9d:fc:21:
21:35:f1:c5:fd:cf:d6:72:32:ee:12:c9:e7:53:01:da:84:e6:
92:e1:18:3f:7f:5a:dd:0a:be:5e:21:d5:fb:f5:be:2b:14:a7:
e7:b8:f1:a7:62:85:b2:61:45:2c:6b:b5:ec:a4:96:e2:34:dc:
a1:4f:de:d2:e0:9a:70:68:e8:b6:6a:12:9a:a2:b0:b8:d9:b0:
b1:59:9b:25:04:67:cb:5d:f3:e0:04:b2:9e:46:15:4f:04:75:
8c:ce:24:6e:d2:99:3f:30:98:2b:f4:ce:37:76:5a:79:b3:3d:
be:2d:59:cf:38:49:f4:3c:51:5b:b0:82:2b:94:10:55:e3:65:
d2:3e:23:06:07:9b:58:b8:b7:e9:16:82:88:3f:44:63:a2:aa:
af:eb:82:e8:5b:c1:a1:d0:a7:eb:14:e2:c8:ed:66:f6:7c:1f:
46:b6:c6:f9:67:93:08:43:21:53:6e:ce:41:3b:57:34:37:c1:
33:7e:42:00:48:b6:b8:a9:fa:d5:41:01:2c:ef:68:1a:83:75:
2b:86:48:ee:a6:99:e7:6b:9e:f4:d2:41:54:02:83:db:2d:68:
11:d8:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:33 2026 by rpki-client