Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: xNJI85kD6NEW562HwsAsf2C8EOb2AemMhBDJ33P+8do=
Subject key identifier: A7:88:6A:46:B9:77:D6:80:58:EA:25:44:9E:08:06:F5:82:B6:04:D3
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 01A020FA090AA9BB6BEC52AA8638B78D6690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 0837
Signing time: Thu 20 Aug 2026 21:00:52 +0000
Manifest this update: Thu 20 Aug 2026 21:00:52 +0000
Manifest next update: Fri 21 Aug 2026 21:00:52 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: O52ONRwlWNZKNwWbBuS9wuJO/sv+mnQioP1sHj1loWs=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:fa:09:0a:a9:bb:6b:ec:52:aa:86:38:b7:8d:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Aug 20 21:00:52 2026 GMT
Not After : Aug 21 21:00:52 2026 GMT
Subject: CN=a7886a46b977d68058ea25449e0806f582b604d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:16:1d:39:81:e4:f7:ce:8f:69:fc:2a:de:
ec:be:48:8c:a8:8b:00:a2:26:74:5c:f2:67:b5:e3:
61:1a:82:c7:fa:f9:c7:57:a2:41:ac:22:58:09:ea:
4d:25:22:ff:98:94:e6:2a:cc:f1:74:b9:dc:85:cf:
17:63:ce:bd:61:ad:18:47:f8:65:94:2c:d2:68:24:
fe:a6:93:15:7a:de:69:d9:a6:74:68:c2:a3:d0:fa:
f9:24:b3:f2:67:da:56:eb:d2:f0:13:6d:f2:b3:e1:
31:79:cb:ca:76:ee:2c:da:96:45:4d:e2:cb:45:85:
80:d4:58:6a:d0:7b:18:82:06:6c:a8:17:6d:61:06:
6d:74:4b:d2:a4:6a:3d:4c:34:23:48:7c:02:e5:f2:
f0:dc:17:57:d7:3c:9d:ac:2f:f3:ad:9f:d1:9e:33:
1f:2d:14:f7:56:6e:86:a7:0a:50:40:3c:1a:8f:e1:
dc:2c:f4:f9:82:d3:69:3f:a0:fc:0d:7e:fd:71:ac:
7e:9b:ee:17:4a:39:6e:14:cb:ec:9a:72:a1:59:6f:
ab:2f:83:a9:1f:77:cd:e7:2d:4f:b3:05:99:d0:bc:
68:f0:1a:d0:a7:73:1e:ea:19:9b:1b:56:e2:d7:6d:
ce:cb:cc:4c:91:53:c9:58:d2:1a:35:4b:0f:9a:8c:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:6A:46:B9:77:D6:80:58:EA:25:44:9E:08:06:F5:82:B6:04:D3
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6c:b1:83:ca:62:53:ac:5b:14:e4:89:f0:a2:52:c9:96:e6:
d8:a6:d7:8b:4b:c5:8f:4c:63:73:4d:98:b8:e8:8d:1a:5b:9b:
0f:23:7a:6b:af:44:5c:b2:7a:0e:e1:21:dc:32:9a:0a:a6:a3:
9a:9e:42:89:15:c2:b5:35:df:9f:5d:85:dc:ed:e5:ac:1c:47:
10:73:c7:4b:52:10:82:9a:3e:a4:13:cd:1d:35:e2:40:31:c2:
3d:4d:47:47:89:bc:af:73:3b:01:7f:24:9c:99:7d:8a:ac:ef:
23:70:31:6e:1e:21:f2:36:68:1d:47:ea:f3:dc:f7:a2:d9:7a:
ab:00:6d:7c:3d:1c:ad:4b:7f:46:60:72:64:fd:a4:38:16:56:
17:e1:65:73:11:e0:83:41:e4:b0:3d:dc:4f:a4:67:72:a4:b6:
19:ce:67:6a:09:13:1a:23:fb:85:f3:0c:e5:64:a6:be:36:07:
0f:b3:db:f0:ab:19:3c:45:e5:82:47:45:c4:fb:a7:85:8b:c1:
cf:53:87:44:f9:ee:ca:16:fe:eb:96:20:46:ff:6d:5a:98:ae:
b7:b8:24:9e:da:31:22:ed:1f:5c:d9:9d:71:45:fc:dd:c9:f6:
cf:77:ff:cc:0d:6d:34:fb:a9:a1:14:94:c4:2c:42:2c:93:0f:
33:82:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:30 2026 by rpki-client