Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: PomcpGhxug55rOKV4kns1QIo1hkzPeFoUiV/g062yFc=
Subject key identifier: 72:03:14:C7:FF:59:06:7C:C9:7E:40:81:FC:7B:01:2E:A7:3F:DA:CE
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 01A05AB319B0835C4F06B7CDB2BFF374C977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 1A2D
Signing time: Tue 01 Sep 2026 02:01:21 +0000
Manifest this update: Tue 01 Sep 2026 02:01:21 +0000
Manifest next update: Wed 02 Sep 2026 02:01:21 +0000
Files and hashes: 1: Pwvl_Zcat1KTzpuXYTtavIgP748.roa (hash: iLZ+jEw20ZEVrfeL0bdjMhqCq56ZpvLuivOan0qgqsE=)
2: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: PEiiOnJUbEuFXaOLWDj4+bL8ssDaMEK6GW93mzrZMDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:b3:19:b0:83:5c:4f:06:b7:cd:b2:bf:f3:74:c9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Sep 1 02:01:21 2026 GMT
Not After : Sep 2 02:01:21 2026 GMT
Subject: CN=720314c7ff59067cc97e4081fc7b012ea73fdace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:65:f5:a9:d2:c1:18:10:00:23:cd:37:26:
b8:3d:32:a0:0c:b9:fb:19:ec:7f:fd:4d:fe:43:5f:
7f:e6:31:2f:5e:15:c3:cc:85:5b:ae:18:a1:56:2a:
aa:b6:41:aa:0c:17:75:62:c6:50:63:03:ef:6b:3d:
0f:f8:df:4a:45:29:c1:1a:b6:34:81:c9:c1:f5:e7:
16:42:c9:02:cc:19:5b:04:6c:55:13:ac:59:95:dc:
1f:07:12:53:eb:32:a8:fb:01:b4:9f:63:76:80:1b:
22:56:97:cc:19:64:8f:de:2e:2f:e8:98:f2:95:86:
b1:f2:42:3a:f6:bf:8c:07:ff:e4:d5:82:c1:5e:bd:
4a:f8:aa:12:0a:3a:23:d9:d3:a5:eb:d9:44:9a:aa:
63:7e:7a:f6:09:9a:92:f8:f0:8f:23:0a:0a:48:b5:
61:7e:01:27:03:01:a2:da:d8:bc:a4:fa:f4:c7:00:
0e:6d:9c:15:89:41:a0:5e:a2:46:f3:42:40:a2:70:
0a:69:f6:82:f6:6f:15:42:f4:04:f8:5c:0b:74:1c:
90:f5:cd:24:50:e4:c2:c3:9b:d7:7e:a4:37:cf:2f:
0a:b8:9f:f1:e0:56:bf:95:f2:66:33:77:9c:c9:17:
7d:81:f9:11:86:16:c9:8f:13:37:36:df:b7:63:89:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:14:C7:FF:59:06:7C:C9:7E:40:81:FC:7B:01:2E:A7:3F:DA:CE
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6d:64:02:cf:60:a2:e9:29:fb:c6:fc:3f:1e:59:e0:2b:de:
d3:7c:f3:f8:14:f2:e7:02:22:98:2e:21:be:31:a0:36:cb:cd:
c9:9e:8c:3a:f3:35:82:37:d7:0b:6c:72:51:0b:40:2b:8a:78:
e3:15:ae:8f:c0:1f:ab:36:8a:d2:3f:c3:d6:63:fd:6d:80:44:
6d:f4:a3:ab:26:1e:88:14:17:e3:d0:ef:f2:9d:04:9c:cc:01:
4d:d6:7c:b3:0b:64:13:31:31:b7:d3:f2:46:b2:ca:b3:52:46:
53:d4:37:5f:5f:30:b0:a9:d1:0f:8c:81:85:9b:c3:dd:f4:40:
c1:60:b7:ec:b5:64:87:8e:f1:f2:9d:ed:74:df:5a:dd:cf:a8:
99:69:47:59:27:31:5d:88:26:8c:7a:f4:0f:ba:92:50:36:ad:
c7:22:41:47:ff:ec:29:55:ee:6e:ef:83:3f:b0:f0:0a:0c:a7:
9d:c5:03:53:40:86:36:58:9e:89:2d:b5:d1:65:ff:48:1d:ec:
39:d9:35:cb:2a:f2:b9:56:34:cc:2a:e3:bc:04:3f:45:08:73:
3d:7d:e4:61:22:8b:4f:a1:3e:bc:6c:cd:b3:17:f3:ee:f3:77:
5f:2b:38:09:6b:24:90:24:d9:c5:6d:74:37:b8:1e:13:e1:bf:
dd:97:73:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBasxmwg1xPBrfNsr/zdMl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjlhMGE3M2UzYmE1NjkzODFkZGRhNmQ2NDcwZGM3Yzg3
M2M5NTkwHhcNMjYwOTAxMDIwMTIxWhcNMjYwOTAyMDIwMTIxWjAzMTEwLwYDVQQD
Eyg3MjAzMTRjN2ZmNTkwNjdjYzk3ZTQwODFmYzdiMDEyZWE3M2ZkYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIll9anSwRgQACPNNya4PTKgDLn7
Gex//U3+Q19/5jEvXhXDzIVbrhihViqqtkGqDBd1YsZQYwPvaz0P+N9KRSnBGrY0
gcnB9ecWQskCzBlbBGxVE6xZldwfBxJT6zKo+wG0n2N2gBsiVpfMGWSP3i4v6Jjy
lYax8kI69r+MB//k1YLBXr1K+KoSCjoj2dOl69lEmqpjfnr2CZqS+PCPIwoKSLVh
fgEnAwGi2ti8pPr0xwAObZwViUGgXqJG80JAonAKafaC9m8VQvQE+FwLdByQ9c0k
UOTCw5vXfqQ3zy8KuJ/x4Fa/lfJmM3ecyRd9gfkRhhbJjxM3Nt+3Y4kDnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIDFMf/WQZ8yX5Agfx7AS6nP9rOMB8GA1UdIwQY
MBaAFG65oKc+O6VpOB3dptZHDcfIc8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jYWE2OGUtN2E5ZS00Y2FlLThkMmEt
ZTkwMjE5YmM4ZmYxLzEvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jYWE2OGUtN2E5ZS00Y2FlLThkMmEtZTkwMjE5YmM4ZmYx
LzEvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW1kAs9g
oukp+8b8Px5Z4Cve03zz+BTy5wIimC4hvjGgNsvNyZ6MOvM1gjfXC2xyUQtAK4p4
4xWuj8AfqzaK0j/D1mP9bYBEbfSjqyYeiBQX49Dv8p0EnMwBTdZ8swtkEzExt9Py
RrLKs1JGU9Q3X18wsKnRD4yBhZvD3fRAwWC37LVkh47x8p3tdN9a3c+omWlHWScx
XYgmjHr0D7qSUDatxyJBR//sKVXubu+DP7DwCgynncUDU0CGNlieiS210WX/SB3s
Odk1yyryuVY0zCrjvAQ/RQhzPX3kYSKLT6E+vGzNsxfz7vN3Xys4CWskkCTZxW10
N7geE+G/3ZdzyQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:40:41 2026 by rpki-client