
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: ivpYdoFtUe5kNDPIXq3yZRqhv+uffRP8jLomTgrGCZU=
Subject key identifier: EA:6C:1D:E6:E6:EC:A8:2F:B3:90:A3:F2:0E:AE:19:EE:DF:11:57:EA
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 01A0E43F29C6871CD2D20BFDBE4F68034C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1A7B
Signing time: Sun 27 Sep 2026 19:02:19 +0000
Manifest this update: Sun 27 Sep 2026 19:02:19 +0000
Manifest next update: Mon 28 Sep 2026 19:02:19 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: X6fc7FnRFHXAAsZFZOnViWFzCWbBxS+VTVzL3DfNQOA=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:29:c6:87:1c:d2:d2:0b:fd:be:4f:68:03:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Sep 27 19:02:19 2026 GMT
Not After : Sep 28 19:02:19 2026 GMT
Subject: CN=ea6c1de6e6eca82fb390a3f20eae19eedf1157ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:db:12:dc:95:47:bb:df:9d:bb:d4:0b:11:
48:da:58:4a:24:60:f9:f1:a2:4d:6b:9c:04:da:01:
b0:89:62:88:bb:ac:51:55:73:33:dd:2f:fa:9d:03:
c3:2a:b5:f7:2f:97:1a:3f:29:29:e9:8f:04:f3:19:
ac:d4:9f:98:43:a3:7c:a1:35:66:5a:1b:ba:39:96:
3e:8e:6c:02:50:bf:d5:b4:e1:83:b2:e5:0b:eb:21:
ec:07:bb:f8:66:45:e3:20:d9:76:59:80:29:f6:87:
a7:a4:87:0b:5a:3a:ac:0f:75:78:90:64:e5:ec:04:
98:69:b5:be:6d:28:3d:84:e7:34:52:cb:c9:bf:37:
d3:6c:f7:26:a0:76:32:1e:e3:14:30:b7:3d:16:20:
8c:65:7b:b1:ce:d2:de:2b:0d:f8:53:9a:4c:95:b1:
ff:c3:0c:4d:42:2e:82:f5:9c:22:52:62:78:bb:0b:
bd:94:d6:4e:1f:68:1b:9e:75:3c:0f:e3:c7:e4:af:
c3:fd:06:5d:e4:d5:8c:fd:4f:e1:06:ee:08:45:52:
37:97:48:38:09:1d:9f:19:cc:67:7c:f1:af:34:6f:
c9:7d:70:19:78:1b:15:c3:5d:77:cf:f0:d0:db:4e:
fc:5a:30:77:90:5e:77:62:ae:0e:8f:f6:7b:f1:64:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:1D:E6:E6:EC:A8:2F:B3:90:A3:F2:0E:AE:19:EE:DF:11:57:EA
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:80:2a:e2:35:66:12:18:1b:4b:2c:24:31:c0:8e:4d:e6:
74:db:d7:5d:4b:3f:34:9f:dd:9a:33:93:3e:49:a6:89:bd:ee:
07:37:24:14:42:c2:78:fd:9f:08:d7:21:1b:4f:6a:1e:21:c0:
71:2d:e2:bc:42:2b:43:a0:1a:de:b7:a8:2a:47:51:94:57:87:
b0:20:15:96:76:f8:b8:b8:0a:21:ef:5f:a6:82:3d:2a:5b:19:
69:92:43:17:d5:f1:f8:69:41:08:87:11:8a:f8:fe:34:7f:37:
6d:87:76:6f:7e:26:2a:e1:70:88:38:32:bb:d8:76:82:91:15:
48:02:4d:7f:41:9d:b1:be:e5:73:37:e6:36:43:5e:99:8b:01:
18:14:38:25:d8:c4:fd:55:1f:dc:fb:9b:f5:f4:54:e5:cb:ca:
ab:d6:24:ec:39:c6:33:1e:51:ff:d8:6c:0d:1e:27:6c:82:81:
79:2a:29:f7:78:3a:7b:72:9f:8a:4b:66:13:8a:2a:09:3b:06:
45:f7:53:72:e3:09:9b:77:5b:3b:79:0e:1d:c3:d8:16:89:a4:
02:e3:af:2d:c1:f3:f4:5f:b4:ee:f8:d4:ae:80:6e:63:2b:26:
3e:cb:6e:3f:58:8e:5c:a4:cb:2f:e8:9e:18:21:49:a6:ac:d5:
16:42:c6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPynGhxzS0gv9vk9oA0yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk
ZTUzYWYwHhcNMjYwOTI3MTkwMjE5WhcNMjYwOTI4MTkwMjE5WjAzMTEwLwYDVQQD
EyhlYTZjMWRlNmU2ZWNhODJmYjM5MGEzZjIwZWFlMTllZWRmMTE1N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDnbEtyVR7vfnbvUCxFI2lhKJGD5
8aJNa5wE2gGwiWKIu6xRVXMz3S/6nQPDKrX3L5caPykp6Y8E8xms1J+YQ6N8oTVm
Whu6OZY+jmwCUL/VtOGDsuUL6yHsB7v4ZkXjINl2WYAp9oenpIcLWjqsD3V4kGTl
7ASYabW+bSg9hOc0UsvJvzfTbPcmoHYyHuMUMLc9FiCMZXuxztLeKw34U5pMlbH/
wwxNQi6C9ZwiUmJ4uwu9lNZOH2gbnnU8D+PH5K/D/QZd5NWM/U/hBu4IRVI3l0g4
CR2fGcxnfPGvNG/JfXAZeBsVw113z/DQ2078WjB3kF53Yq4Oj/Z78WQERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpsHebm7Kgvs5Cj8g6uGe7fEVfqMB8GA1UdIwQY
MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt
MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5
LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcCAKuI1
ZhIYG0ssJDHAjk3mdNvXXUs/NJ/dmjOTPkmmib3uBzckFELCeP2fCNchG09qHiHA
cS3ivEIrQ6Aa3reoKkdRlFeHsCAVlnb4uLgKIe9fpoI9KlsZaZJDF9Xx+GlBCIcR
ivj+NH83bYd2b34mKuFwiDgyu9h2gpEVSAJNf0Gdsb7lczfmNkNemYsBGBQ4JdjE
/VUf3Pub9fRU5cvKq9Yk7DnGMx5R/9hsDR4nbIKBeSop93g6e3KfiktmE4oqCTsG
RfdTcuMJm3dbO3kOHcPYFomkAuOvLcHz9F+07vjUroBuYysmPstuP1iOXKTLL+ie
GCFJpqzVFkLGyw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:09:15 2026 by rpki-client