Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: vCIIU0mIr7HC+7Sw02KbKB/Y+frgrVidKSfLVQTmTRM=
Subject key identifier: 18:21:D3:62:4B:E2:BC:BB:8F:28:E9:8E:19:89:08:CE:41:61:D9:B4
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019D38D342F6514FB30F4C36467C7D9B2448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: 9w9iKXg0fkD0t3bPycK1azXQeM7SYKCTfs0v5UluqHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:42:f6:51:4f:b3:0f:4c:36:46:7c:7d:9b:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=1821d3624be2bcbb8f28e98e198908ce4161d9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:88:ec:99:ed:bf:3d:1d:6e:0d:a0:6e:1a:
91:64:ef:87:0e:02:32:77:5a:87:44:ee:e8:bc:65:
75:78:28:08:f2:a0:0c:ea:2d:bc:f0:a7:8d:97:80:
87:80:1c:9e:f6:83:61:b9:4f:ad:f8:b3:d4:1f:82:
4f:95:a3:0f:73:76:9e:40:fe:64:3b:c8:e8:8c:5e:
ea:1c:6e:7d:64:90:48:19:a5:1f:53:b3:26:4a:e8:
85:cd:12:32:4c:4d:7b:54:91:84:f7:26:65:67:18:
80:45:2e:d1:04:91:39:b8:25:e8:26:c4:97:af:c1:
5b:d2:7b:a3:8c:a4:d3:92:e5:5d:cc:95:2d:aa:e3:
e8:81:b9:37:d9:4f:fe:83:3e:35:1e:c9:6e:a3:38:
ce:30:ce:80:16:83:d2:f6:11:0c:dd:97:94:44:f3:
e1:90:9f:49:30:9b:99:20:07:54:b3:c5:d0:62:2d:
9d:f4:10:b5:b1:e4:8f:e9:90:8b:3a:25:c7:d1:be:
d4:a2:54:fd:49:83:64:7c:f4:86:5c:f5:66:87:76:
3c:67:06:ee:52:9b:ef:16:a3:18:ca:68:ec:7d:f8:
ff:bb:84:8d:fe:f8:23:ed:db:81:b4:1d:aa:59:c4:
91:fa:e1:0a:12:57:54:35:f8:55:04:21:f9:ee:1c:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:D3:62:4B:E2:BC:BB:8F:28:E9:8E:19:89:08:CE:41:61:D9:B4
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f1:eb:78:79:61:f5:f9:09:a6:bd:de:cb:bf:da:07:d7:82:
85:8f:d2:3d:59:a5:f1:f0:30:de:34:89:6c:32:27:5b:eb:91:
a2:80:8a:47:a4:f4:05:10:d8:89:f4:16:96:97:5e:d8:62:91:
1c:3a:43:c1:36:26:6a:05:6c:e7:2d:44:4e:17:3f:e0:59:3c:
d7:dc:38:97:90:7c:02:c7:eb:58:0e:1a:a5:87:d2:e8:cf:76:
1a:8e:ac:ef:7d:51:04:c8:ed:dd:2e:8a:3e:48:ba:de:d8:9b:
c6:34:8f:de:dc:df:71:62:94:e8:68:85:d7:dc:ce:e2:ac:12:
c0:36:02:aa:e6:ef:b7:70:c3:6d:85:c0:f2:d8:cb:95:d8:59:
86:ed:b3:c3:34:59:85:46:35:24:fa:c3:96:39:90:c1:a4:e8:
8a:5a:fb:08:4f:8d:f6:9a:1b:c4:55:cf:21:bd:3b:dc:da:85:
8a:42:ac:b2:30:84:d5:7a:e5:b1:d4:a2:8f:cb:31:fa:04:b7:
e0:5c:98:e6:05:2c:d1:47:2f:f2:55:b1:81:1b:28:b4:68:da:
53:30:bc:1c:12:d2:5b:cb:4a:2c:84:0c:7a:8e:b8:6b:79:19:
5c:48:da:85:a4:71:bc:86:f3:94:e9:37:06:79:ee:53:06:a7:
63:a1:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:39 2026 by rpki-client