Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: 1rfWRY4RfGAhN9weiymcXFsIPxzc57AApf3YTIB9opY=
Subject key identifier: ED:4C:E9:1D:1E:F1:82:E0:08:9E:A8:75:AA:EA:74:18:6E:CC:99:D3
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019DED11D8A636A84C9200EF4CFB33DDC030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 0713
Signing time: Sun 03 May 2026 09:01:02 +0000
Manifest this update: Sun 03 May 2026 09:01:02 +0000
Manifest next update: Mon 04 May 2026 09:01:02 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: SachDp+mD/3mEj1dARchQ9bvCFPozxirus+DxlyhagA=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:11:d8:a6:36:a8:4c:92:00:ef:4c:fb:33:dd:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: May 3 09:01:02 2026 GMT
Not After : May 4 09:01:02 2026 GMT
Subject: CN=ed4ce91d1ef182e0089ea875aaea74186ecc99d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:16:1f:6a:21:2d:74:03:d2:6c:5d:65:d3:
95:8e:0d:11:a4:9a:68:0a:4d:89:16:c7:67:de:c4:
9e:39:56:ec:4e:2e:0b:fe:8a:2c:a3:3a:ba:c2:20:
fc:87:db:92:9e:cd:38:09:b1:2b:41:9e:6e:ce:12:
c6:b0:f7:7f:a3:2b:b4:d2:62:69:8d:18:79:1f:02:
56:bd:ab:74:87:14:43:62:c3:38:c2:d8:ac:f5:c4:
5d:79:7f:94:69:3c:87:cd:a2:9a:04:e3:2a:bb:9e:
13:e1:1a:bb:ec:97:d0:0c:e3:60:c1:fd:44:75:76:
84:ad:1d:b9:9a:5e:13:09:a5:f0:b9:bc:10:65:3c:
e3:f9:46:d3:92:48:b9:28:e7:27:87:81:10:71:87:
44:55:c3:7f:6a:40:4e:31:18:b6:8f:64:74:20:ce:
8c:57:00:21:b1:05:b8:13:8c:a4:e8:67:af:86:d4:
0f:e7:90:a5:8b:2b:70:3a:f6:c4:1b:d7:e2:19:37:
c0:20:25:bf:7a:6a:f1:b4:4d:54:17:fd:c8:9b:9c:
69:9e:49:c1:ae:0f:f5:5c:ee:25:f1:0c:0f:99:35:
74:af:d8:7c:95:4c:48:62:50:4d:d9:71:11:56:41:
72:1e:0b:91:ce:4f:c6:ec:d4:82:28:79:b3:76:b6:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4C:E9:1D:1E:F1:82:E0:08:9E:A8:75:AA:EA:74:18:6E:CC:99:D3
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:10:cc:01:23:7c:b3:a6:2a:48:1a:11:2e:a7:c3:65:4d:
c5:5d:4e:bb:b2:ab:b8:1a:82:89:d3:fd:5a:80:3d:4b:29:45:
f0:9e:ad:7f:f4:7e:cf:c4:04:ee:c6:81:2b:f1:9f:39:98:e7:
c7:44:0d:b5:82:97:4e:4e:4e:98:20:41:ca:02:1b:62:b6:1f:
86:c3:64:c1:d3:33:ba:c3:fd:01:1b:50:92:53:97:d3:3d:c8:
ef:a9:e8:13:3b:4c:f6:78:65:31:ab:27:1b:27:89:83:bf:34:
fa:15:03:f6:23:35:e9:5c:71:7c:e5:b3:1e:26:6e:eb:94:79:
42:e1:59:c4:1a:ea:54:3c:d0:76:a2:b4:7f:1b:84:4d:c7:a4:
e6:73:5a:e7:fa:68:ef:aa:c3:70:29:1d:42:db:23:b4:94:f7:
66:2f:a8:9b:5f:02:ee:34:79:22:30:d7:61:f9:cc:f0:f9:55:
69:51:cc:61:c1:ef:62:c8:7b:16:56:e2:5f:51:16:1b:90:3f:
b6:02:dc:27:bd:9f:1c:55:f2:31:98:82:7c:ce:25:b7:a6:c6:
e5:81:db:a1:4b:bf:56:51:7f:62:f0:6d:d7:73:58:22:64:fd:
81:e7:d2:9c:d2:df:a7:65:b9:0c:60:83:21:8a:01:f5:8f:31:
0e:f8:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:57:33 2026 by rpki-client