Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: YotUu9UugbC+BWbaLfK+3aL41MBTXQNzqAyQsZsppq4=
Subject key identifier: A3:A1:89:D0:57:92:38:C2:D5:54:62:9B:CD:73:DA:EF:DE:5E:75:82
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019E31F32AEC8F3E675775E29164129AFDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 18:01:20 +0000
Manifest this update: Sat 16 May 2026 18:01:20 +0000
Manifest next update: Sun 17 May 2026 18:01:20 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: sWlIdLqcrhizOu5smJcSiyNqvO4kUGM21cDj5+4+FAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:2a:ec:8f:3e:67:57:75:e2:91:64:12:9a:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: May 16 18:01:20 2026 GMT
Not After : May 17 18:01:20 2026 GMT
Subject: CN=a3a189d0579238c2d554629bcd73daefde5e7582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:0f:e4:31:f6:f0:f5:99:f2:e9:ef:8d:8c:
27:41:a9:15:f4:f0:84:27:0c:f2:00:da:e0:86:94:
a9:e8:31:5d:a5:ae:6c:44:92:82:86:22:f9:b0:e1:
7e:20:3f:59:2e:e9:35:eb:99:39:64:67:43:5c:68:
a9:e1:8c:4a:2b:13:7e:43:94:ec:7b:70:9b:6e:dc:
ee:f7:e8:01:44:b7:b9:4d:24:d7:aa:6c:ca:e0:76:
01:38:1f:38:ae:0a:f3:ed:45:d5:8f:aa:be:a4:20:
17:8e:12:42:c4:7d:6a:d5:ed:5d:54:7c:c0:3a:94:
13:61:e9:fa:57:37:2b:d3:13:85:d9:85:86:71:d3:
57:19:8d:30:c0:9d:ca:00:af:c4:91:3e:fe:b4:5a:
0e:ec:ba:47:af:0a:32:54:50:76:b0:85:c9:65:90:
84:7d:50:7e:fa:6a:75:0e:36:91:68:67:4e:3c:80:
19:90:60:8c:5d:83:a7:56:1d:62:25:1f:58:73:a9:
a4:c0:a6:53:e0:84:5f:de:d1:f0:84:0f:b0:29:d2:
6b:3d:46:0f:0a:57:ea:42:8f:6c:c4:77:15:50:88:
17:c6:73:d4:00:2c:2b:e5:fe:5a:0e:fe:3f:b8:e0:
3a:a6:ec:e0:40:77:c3:5d:8f:c7:80:93:c0:80:1c:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:89:D0:57:92:38:C2:D5:54:62:9B:CD:73:DA:EF:DE:5E:75:82
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8a:16:49:6c:73:7a:14:62:0d:d9:be:bd:4a:aa:83:27:c5:
da:e2:ad:a7:47:3d:aa:47:09:84:33:54:a1:f5:21:de:e4:50:
0e:2f:d6:db:f3:04:4a:45:d1:79:c8:28:9c:d7:18:f6:0c:96:
17:b6:a7:e4:f7:db:ed:f4:67:c6:58:a6:6e:24:28:74:e4:cf:
6a:0a:a4:69:21:84:dc:6f:49:cf:c8:43:49:f1:0e:77:16:fd:
6a:69:62:7f:b2:39:ba:b8:30:cb:07:99:26:ef:78:48:6f:ab:
ef:93:19:32:81:08:89:32:b2:76:d4:b5:c4:ef:a5:ed:cf:ba:
b3:fd:c5:63:7d:af:06:da:a0:1d:f2:b9:7b:46:42:bb:3c:0f:
15:55:eb:9e:61:63:7c:73:6d:df:cd:2b:7b:52:cb:3a:00:61:
09:39:92:ee:da:bd:ff:45:04:87:14:e6:66:5d:8d:09:80:a9:
f2:85:77:3f:42:17:98:b0:28:13:98:10:69:18:09:83:f7:fd:
86:d0:65:da:36:a3:86:b8:04:fb:56:0c:50:87:c9:66:1f:c2:
f0:ce:ea:b1:bd:39:7f:45:aa:2a:4c:4a:64:11:01:7b:77:d9:
68:af:22:e2:87:5a:17:c6:17:76:4f:a6:c4:e9:cd:b2:b0:5a:
5e:6c:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:07:05 2026 by rpki-client