Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: mMJcg2DDa172P/LH/tTVbU7RCmpeRMHjoeHPAf17dms=
Subject key identifier: 23:0B:4B:FD:2B:2E:70:C8:5B:63:92:21:75:99:B3:30:3A:65:C3:D5
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 01A159667621525EE96DBA6EBC52ABEDCF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1AB5
Signing time: Tue 20 Oct 2026 13:00:49 +0000
Manifest this update: Tue 20 Oct 2026 13:00:49 +0000
Manifest next update: Wed 21 Oct 2026 13:00:49 +0000
Files and hashes: 1: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (hash: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=)
2: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (hash: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=)
3: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: L/Z5LIMvOvEVGBOuPr36Deh7txtvBs7ZaKB97fPnrqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:76:21:52:5e:e9:6d:ba:6e:bc:52:ab:ed:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Oct 20 13:00:49 2026 GMT
Not After : Oct 21 13:00:49 2026 GMT
Subject: CN=230b4bfd2b2e70c85b6392217599b3303a65c3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:50:b7:aa:ee:43:6a:10:89:c4:b9:eb:d3:
d6:de:42:0d:49:52:fe:bc:1d:35:f5:b4:14:dc:14:
44:6b:c0:bf:bc:65:14:f2:4d:4f:63:5f:e2:dc:44:
b3:c8:29:db:4d:ea:00:03:b7:a4:0e:b0:d4:54:5b:
64:06:93:d3:17:bb:fb:82:e3:c8:5d:7e:16:f5:c6:
60:7d:cb:35:24:f6:dc:73:df:b7:19:49:0b:9d:9b:
72:3e:2c:ff:e8:23:76:22:3f:6e:d0:bf:d6:09:bd:
6e:09:f0:ce:b8:ce:4a:08:9a:b9:b6:cf:0f:77:9f:
a6:ca:75:ce:9b:a3:ed:0a:88:15:c9:03:bf:d9:33:
be:25:03:7b:f1:1e:81:f3:3d:cb:7a:5b:e5:5b:69:
7a:50:7c:05:a3:60:81:3c:de:73:98:9d:4f:f1:c7:
ee:9c:a6:25:fb:50:5d:04:bf:2e:48:f3:20:d4:63:
b3:8b:b1:f8:de:27:22:25:37:a7:79:44:c8:94:08:
dc:9b:88:cd:4a:3c:c6:43:3f:c0:83:c1:46:f1:4a:
3a:82:a7:c7:3a:a7:b8:14:3b:87:19:6c:51:4b:39:
3e:f8:d5:93:13:b2:ba:27:f1:66:f4:85:a5:91:25:
cc:32:6e:f9:47:e7:8f:3e:31:6f:5d:70:cd:11:f0:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:4B:FD:2B:2E:70:C8:5B:63:92:21:75:99:B3:30:3A:65:C3:D5
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:b9:46:4f:32:8c:10:2b:5e:32:a3:e0:0d:cd:52:db:b8:21:
d9:3d:60:12:1f:91:13:e2:e7:f7:d3:7e:16:47:be:1a:8d:63:
27:87:0b:ee:fa:0d:37:14:25:b2:3a:34:2c:f9:97:69:38:e1:
61:a1:a9:0e:26:88:4c:4c:2d:e0:fe:b8:c1:a9:25:33:54:a2:
cf:70:e6:a0:ab:0d:e0:80:d2:05:96:db:7d:d5:06:26:a9:89:
b4:a3:9a:74:d9:df:32:9f:b1:31:9d:8e:c1:11:68:0d:f1:e8:
84:fc:3d:2e:cd:2b:75:18:fa:64:04:c5:61:85:23:ef:e8:5f:
d7:64:2a:6a:e5:ee:26:1a:59:0d:37:47:6b:1a:c7:21:fa:d3:
97:e3:9d:f9:97:b7:9c:da:a0:de:40:67:e3:ee:b4:f7:92:84:
a4:1c:02:1c:61:99:52:3a:54:48:24:ff:43:3b:42:3a:dc:54:
2d:f1:61:bc:5e:46:6c:0d:f0:4b:f6:ce:3e:47:a5:c9:23:84:
65:68:1c:fd:60:1d:23:ba:bd:cf:19:1b:70:f2:e1:9e:c1:f9:
f6:84:1d:92:26:03:51:21:f8:a4:97:f0:b3:11:a0:6e:1f:c1:
7d:f9:95:b4:7a:b3:1c:26:92:d3:2c:9b:2e:00:b6:b9:ff:e7:
06:a1:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:47:36 2026 by rpki-client