Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: MRgjpGZsziQix3YS/1lycHqdG7wV/wxfBPXRDiHbYrM=
Subject key identifier: AF:19:4A:CA:9D:AD:A7:C0:CE:44:02:71:46:99:59:4C:A7:DE:26:B6
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 01A1144EF6D183B7F2408F13B32F05F0B824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 08B5
Signing time: Wed 07 Oct 2026 03:01:21 +0000
Manifest this update: Wed 07 Oct 2026 03:01:21 +0000
Manifest next update: Thu 08 Oct 2026 03:01:21 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: cr99P1/AX8lIMPjbvzGEIfHpglnDrR0ho9iyvVHtAL4=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:f6:d1:83:b7:f2:40:8f:13:b3:2f:05:f0:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Oct 7 03:01:21 2026 GMT
Not After : Oct 8 03:01:21 2026 GMT
Subject: CN=af194aca9dada7c0ce4402714699594ca7de26b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:8d:20:30:fc:3a:3c:23:40:d2:f9:c3:65:
e0:e0:dc:f9:99:3f:23:e8:bf:d2:46:38:5e:8e:38:
e5:69:b6:32:0e:bd:c1:39:47:b1:5a:c1:07:cc:6d:
a4:50:9f:39:29:e8:df:81:b1:57:75:23:3c:0a:9b:
06:d6:42:58:14:13:ed:16:6f:e0:66:e1:0a:47:0a:
e2:0f:a3:bc:5b:7d:e2:ad:17:22:da:92:73:18:99:
ee:6b:e4:dd:56:4d:89:98:47:df:07:68:f6:dc:b4:
02:f2:a8:5b:40:b4:34:e7:f0:8a:7d:70:c8:9a:8c:
d0:3d:d6:7e:51:17:f9:b8:58:21:91:1b:a1:fd:c0:
39:a0:c7:ba:c0:48:56:fe:2f:c5:e2:c9:9c:fe:a9:
19:17:c3:73:59:12:02:e6:1c:85:cf:58:8f:4b:55:
23:93:2f:12:9f:45:e5:fd:2b:35:b7:9e:5a:f3:09:
98:db:e9:6c:d9:00:d4:2a:4e:f2:6a:36:21:21:f4:
4c:c2:1c:9e:b4:31:43:f0:cb:dc:09:de:0b:32:da:
74:f3:f4:6d:69:a8:26:39:5f:b7:d9:58:8d:c7:1c:
e6:fa:8e:69:95:f2:77:12:55:44:0c:53:d8:60:ac:
1f:65:bb:00:36:a9:69:32:57:fc:8c:c6:d5:54:8e:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:4A:CA:9D:AD:A7:C0:CE:44:02:71:46:99:59:4C:A7:DE:26:B6
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a7:4a:c4:79:22:9b:82:9f:34:01:27:e8:b7:5a:2f:ad:3e:
43:4f:e6:4c:f8:81:19:94:f3:07:0b:ff:61:36:4a:5a:4f:c5:
02:b8:58:fd:ef:72:b2:1d:2d:37:98:e5:b6:5b:09:cb:5a:bf:
f3:a7:f4:66:15:4d:ca:29:d9:f1:59:af:c2:6e:64:4c:e7:81:
e9:aa:b3:be:58:58:b3:2a:f8:2e:be:d8:f0:58:4a:80:ff:27:
09:11:0f:d9:c7:45:91:ec:ba:66:d3:05:c2:c3:f5:f9:fc:2a:
6e:21:fd:c6:3d:c5:8b:eb:86:5c:84:2a:d8:c5:76:0d:a6:1a:
44:6d:a9:4b:59:62:91:6d:ac:2a:8f:7c:8a:83:53:1a:1e:04:
c2:04:ac:f9:b9:ec:da:9b:37:33:8f:02:80:d0:91:7a:cb:2c:
59:74:0d:0e:d8:bd:3e:92:e2:23:ba:28:ae:3b:6c:9c:b9:ba:
ec:65:4d:73:1b:95:18:e4:4c:b2:74:88:2c:0a:3a:db:22:75:
41:77:16:b8:3f:d8:39:b8:13:04:20:57:64:f9:4b:54:76:90:
6c:a2:73:68:79:2a:22:b1:7d:c6:56:1f:f2:a9:30:27:1e:74:
72:21:55:e8:9f:f2:f5:8c:b4:5f:a3:43:89:d5:bf:4f:c6:8a:
9e:a9:15:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEUTvbRg7fyQI8Tsy8F8LgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj
ZGQ5ZDAwHhcNMjYxMDA3MDMwMTIxWhcNMjYxMDA4MDMwMTIxWjAzMTEwLwYDVQQD
EyhhZjE5NGFjYTlkYWRhN2MwY2U0NDAyNzE0Njk5NTk0Y2E3ZGUyNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7KNIDD8OjwjQNL5w2Xg4Nz5mT8j
6L/SRjhejjjlabYyDr3BOUexWsEHzG2kUJ85KejfgbFXdSM8CpsG1kJYFBPtFm/g
ZuEKRwriD6O8W33irRci2pJzGJnua+TdVk2JmEffB2j23LQC8qhbQLQ05/CKfXDI
mozQPdZ+URf5uFghkRuh/cA5oMe6wEhW/i/F4smc/qkZF8NzWRIC5hyFz1iPS1Uj
ky8Sn0Xl/Ss1t55a8wmY2+ls2QDUKk7yajYhIfRMwhyetDFD8MvcCd4LMtp08/Rt
aagmOV+32ViNxxzm+o5plfJ3ElVEDFPYYKwfZbsANqlpMlf8jMbVVI4hsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8ZSsqdrafAzkQCcUaZWUyn3ia2MB8GA1UdIwQY
MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt
ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2
LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKdKxHki
m4KfNAEn6LdaL60+Q0/mTPiBGZTzBwv/YTZKWk/FArhY/e9ysh0tN5jltlsJy1q/
86f0ZhVNyinZ8Vmvwm5kTOeB6aqzvlhYsyr4Lr7Y8FhKgP8nCREP2cdFkey6ZtMF
wsP1+fwqbiH9xj3Fi+uGXIQq2MV2DaYaRG2pS1likW2sKo98ioNTGh4EwgSs+bns
2ps3M48CgNCResssWXQNDti9PpLiI7oorjtsnLm67GVNcxuVGORMsnSILAo62yJ1
QXcWuD/YObgTBCBXZPlLVHaQbKJzaHkqIrF9xlYf8qkwJx50ciFV6J/y9Yy0X6ND
idW/T8aKnqkVjg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:19:50 2026 by rpki-client