Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: oKli3eI1nV+HhH6btGIhlrky0BfHEYSJbqdbGhfPA+o=
Subject key identifier: CA:56:58:C1:2D:92:76:5D:A3:F6:97:31:C5:B9:BB:DD:AE:DF:74:DF
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019D05537E988F8ECE165624DCF7F0BEB879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 069B
Signing time: Thu 19 Mar 2026 09:00:50 +0000
Manifest this update: Thu 19 Mar 2026 09:00:50 +0000
Manifest next update: Fri 20 Mar 2026 09:00:50 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: z2pmtXP3H3TY9Hxe1B+iikhruzZWSOcyDDBUXzI30Zw=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:7e:98:8f:8e:ce:16:56:24:dc:f7:f0:be:b8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Mar 19 09:00:50 2026 GMT
Not After : Mar 20 09:00:50 2026 GMT
Subject: CN=ca5658c12d92765da3f69731c5b9bbddaedf74df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:55:5a:40:d4:31:5b:aa:29:e5:63:2d:e2:
ca:a2:cc:81:41:30:c5:51:4a:67:3b:2b:75:dd:2a:
54:80:8e:93:f9:35:35:91:ca:a7:32:cd:09:c4:3a:
e1:b9:8b:89:c3:50:e3:2f:70:2f:ae:d2:10:70:52:
fc:61:b8:c2:66:2b:e6:05:0b:ef:7e:55:4f:41:ae:
fe:23:59:cc:d5:82:ee:f3:88:20:15:ef:b6:4d:27:
71:b9:b5:dd:59:b4:b7:86:90:8f:cb:77:ae:d2:8a:
d5:ea:10:ad:8b:6a:00:82:b8:64:e1:33:08:13:81:
8d:59:18:aa:b8:55:a6:84:c8:17:43:76:ca:e5:d5:
dd:fd:1e:ab:bf:00:76:55:33:2f:81:dd:b4:e7:4d:
28:6e:c1:72:c3:6b:c5:65:b9:e6:1c:c0:d1:0d:ca:
14:41:e1:c8:fd:d4:f0:53:2e:d0:a9:de:17:06:f6:
92:be:eb:3d:08:a7:9e:30:a3:49:82:b7:d1:34:c3:
ff:bf:a7:52:a1:35:2a:fe:78:5f:90:00:57:bb:16:
05:88:06:aa:bd:c6:d8:65:c2:25:bc:f8:17:ef:dd:
4c:9e:c4:d9:fb:dd:dd:0a:5d:c7:e4:6f:84:e6:93:
e9:e5:56:91:6f:55:53:e4:a5:46:e0:e6:eb:00:68:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:58:C1:2D:92:76:5D:A3:F6:97:31:C5:B9:BB:DD:AE:DF:74:DF
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9c:72:26:24:39:12:21:fd:2a:bb:a9:bc:53:f0:e6:fa:43:
8e:24:ff:4e:13:b5:34:d7:cb:8e:55:e8:ee:8f:a2:63:6c:d4:
54:56:48:fa:30:44:ed:d9:d8:d7:80:df:77:20:12:07:a6:73:
2c:1b:c1:98:72:ba:87:8e:0e:66:aa:48:dc:0f:35:e9:f3:7b:
2d:fd:d3:b1:fa:7e:41:82:65:26:b9:05:bb:5d:3c:6b:2e:86:
5b:49:ff:c5:3b:e9:37:94:e2:0c:81:27:1a:c7:c1:46:74:29:
9f:4b:7d:3f:7d:13:86:2e:b9:ec:d4:5c:c0:c8:a8:21:c2:95:
44:35:5b:54:3f:e0:bb:56:2e:a6:e9:68:a3:f5:0b:ad:ff:97:
16:fc:0c:f6:d6:8e:4c:2f:af:1d:d2:5f:c7:07:a7:27:46:22:
f6:28:3f:3b:d4:9c:da:77:19:75:30:17:f4:ac:f0:bd:f8:b4:
3d:33:62:40:e3:71:65:d6:a9:c9:9e:ab:d5:32:70:92:92:ac:
15:e4:31:4a:0b:fc:c2:dc:21:12:80:0a:13:d7:d0:96:11:e5:
f3:c1:4b:12:cd:5f:d4:e8:3d:40:fa:d1:7e:b6:da:0f:39:96:
ec:2e:b7:39:da:63:a1:77:ee:29:6a:a6:99:4b:9b:dc:b7:d8:
cd:19:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:43:55 2026 by rpki-client