Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: 1jalmT+jygR6smgSplX3vDT97aWxoxlv9ClFbVuXe4k=
Subject key identifier: 73:AE:9C:98:9B:CF:8C:63:AA:48:4F:05:DF:60:C3:7D:AA:D9:C8:4B
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 01A06DCBB2184321FCE6B4DFCF418C9C46FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 19:01:00 +0000
Manifest this update: Fri 04 Sep 2026 19:01:00 +0000
Manifest next update: Sat 05 Sep 2026 19:01:00 +0000
Files and hashes: 1: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (hash: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=)
2: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (hash: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=)
3: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: XZg2spJ3ee3aECD67BrpMrkPqe/VGpSdfXV0AB0j9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:b2:18:43:21:fc:e6:b4:df:cf:41:8c:9c:46:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Sep 4 19:01:00 2026 GMT
Not After : Sep 5 19:01:00 2026 GMT
Subject: CN=73ae9c989bcf8c63aa484f05df60c37daad9c84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:32:c4:6c:e7:9d:2f:23:f3:3f:f3:4c:c8:
69:41:8d:ea:6e:a0:1a:6b:03:37:40:6e:4f:04:64:
1e:4f:09:78:91:9d:d5:bb:a4:35:9d:98:7e:8c:68:
9e:0b:a4:49:d8:c4:73:67:c1:9c:32:b1:81:65:0d:
f8:76:6d:01:7f:78:44:f3:21:9a:19:59:0c:fa:8d:
e7:47:de:a2:9e:8b:9e:02:f0:a0:cd:dc:8c:c0:05:
cb:cd:3e:b4:7c:72:0c:c4:c1:58:8c:54:a5:e7:87:
25:5b:25:3d:12:15:37:a7:23:ac:d6:3d:6f:28:14:
b6:8d:ab:9a:5f:cb:54:bb:2d:78:8a:74:a1:53:8a:
e0:ee:4c:5c:a5:ea:77:12:be:e4:c8:c0:f9:fd:db:
e2:3e:d7:13:d7:29:f1:4f:9a:fe:e1:a4:c4:9e:06:
74:74:47:18:5e:fe:20:36:3d:ba:d8:96:46:6c:7d:
24:01:6d:96:0b:a9:d6:a6:d7:39:ea:f9:58:50:02:
8d:a1:73:62:f5:54:57:88:3d:50:ee:16:b4:af:2c:
cd:a9:71:49:75:01:a2:f5:3a:94:40:41:a1:4f:d1:
1b:9a:c7:52:fc:9d:9e:d2:c8:9c:30:e5:9b:ae:b5:
76:22:fe:66:9b:41:8a:1b:93:a5:28:08:13:9f:ce:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:9C:98:9B:CF:8C:63:AA:48:4F:05:DF:60:C3:7D:AA:D9:C8:4B
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ae:10:a5:d7:58:2b:d9:7c:c1:5b:1d:a3:3f:f5:e6:40:94:
d1:d7:f0:99:d7:91:f5:df:c9:e4:e6:04:86:97:5b:39:8a:b8:
30:8a:29:e6:a4:b7:28:84:59:f0:2f:ce:8e:0f:e7:17:61:2f:
2c:50:c7:30:6e:60:04:61:e6:b2:f4:2c:04:2e:51:85:b2:df:
0f:95:23:8f:60:90:90:d5:ae:fe:43:f6:0a:d3:9f:b4:a9:a3:
52:bd:0f:18:62:e8:c1:b1:d8:1f:a6:ff:89:25:23:53:ec:43:
83:d0:15:52:ce:0b:75:01:d2:b3:15:20:94:4a:37:50:c1:c6:
9f:b2:3a:50:6e:c3:dc:91:32:41:11:e8:c1:43:27:b8:16:11:
36:d5:cd:3f:3c:38:c5:69:0d:07:1f:01:e3:fb:97:0a:9c:5c:
0e:3f:d2:0c:96:4a:43:90:b9:b5:ff:2d:18:aa:e9:8d:b2:70:
f7:9e:87:8e:4d:37:fa:75:97:e6:ec:44:b3:26:af:2d:21:b6:
28:54:24:57:2f:01:72:45:4b:e2:47:e8:18:ef:83:32:0f:82:
7c:df:a3:dc:0a:f1:79:04:61:79:09:99:18:94:57:23:e0:36:
be:5f:5e:2b:36:ed:fd:e1:b1:c6:94:30:48:53:ac:bc:dd:de:
30:83:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:19 2026 by rpki-client