Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: D8ZO6o7WJWeD/A/PVqFmpR69X4gn6gq5FnThm8azxz0=
Subject key identifier: 89:F7:87:03:EE:08:F1:3C:4B:1F:8B:F6:11:75:01:64:A0:FA:DC:06
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 019D394165EBC8587CA89043A392B7F50408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: Pwvl_Zcat1KTzpuXYTtavIgP748.roa (hash: iLZ+jEw20ZEVrfeL0bdjMhqCq56ZpvLuivOan0qgqsE=)
2: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: +vbRQYvzIX48/dxVdDrEesYJWkpYv2+m2uWPnvsgiAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:65:eb:c8:58:7c:a8:90:43:a3:92:b7:f5:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=89f78703ee08f13c4b1f8bf611750164a0fadc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:16:52:d7:e4:f7:04:ad:08:1e:55:5a:6d:
bc:53:e9:41:94:25:b8:0b:c7:f2:79:5f:7c:ef:76:
b6:a3:e7:f6:44:69:af:65:69:6f:db:0c:0c:b3:ab:
06:a3:e1:ec:fe:c1:71:b5:c4:38:e8:3c:a4:c9:00:
c3:a9:08:53:f5:a4:91:5b:22:08:e9:74:91:34:52:
c7:f8:51:23:3a:49:81:6d:ae:f4:82:2a:81:71:0b:
a8:9a:a6:54:1e:5d:91:16:c0:64:65:b8:25:f4:26:
62:d5:34:f3:2c:f5:57:7f:10:a9:ac:0c:7b:a8:f3:
79:44:c9:51:3c:e1:9d:00:93:af:8d:87:5f:81:5b:
f7:83:79:6f:25:a6:dd:0d:07:b8:c9:88:c6:56:43:
be:c8:6d:86:f0:bd:e0:6a:03:5c:d2:ee:b4:10:84:
72:0a:7d:59:6f:7f:e2:02:25:cb:ea:ab:8e:ee:e7:
0e:ad:03:4d:ca:cf:05:54:7f:73:3c:9c:f9:f7:a8:
b2:72:31:bf:b4:24:83:cc:4e:35:f2:ad:1c:08:62:
d8:aa:7c:49:f8:1a:2e:37:7f:21:62:42:a4:a1:7c:
2c:06:a4:89:22:8b:69:e7:d9:f6:6f:4f:aa:23:2a:
65:12:4c:95:d9:24:d1:78:20:fd:84:6b:cb:b0:8e:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:87:03:EE:08:F1:3C:4B:1F:8B:F6:11:75:01:64:A0:FA:DC:06
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:6b:8d:8f:b0:97:cf:a6:d0:bf:5b:3f:72:dd:d1:21:d9:
4b:ec:c1:38:28:4e:1f:07:45:7d:2c:5d:68:77:2b:e8:30:17:
22:0a:eb:2d:19:99:7c:de:b9:d6:ea:49:58:c8:d7:75:3d:ea:
50:44:2c:b3:fa:ea:94:e1:b6:aa:58:25:e8:07:bd:c8:dd:8f:
a1:a2:86:2b:6b:82:ba:aa:b8:d5:ab:fa:b4:c3:8d:df:20:9d:
21:18:a4:e4:74:4f:33:7a:1d:6d:f0:6e:90:50:c4:3a:b4:b7:
cb:c3:06:46:fb:51:ab:1c:ee:72:53:ce:92:8b:0f:c2:0c:85:
98:93:3c:46:f9:ab:60:d9:96:32:5a:56:0e:73:1d:2c:0e:b2:
cf:6b:6b:ed:15:00:ac:81:dd:e6:02:fb:01:f7:61:4b:d7:73:
5c:94:f4:2e:fa:1a:0e:66:c7:1e:5c:2c:00:4a:03:07:36:69:
6d:80:bd:d8:2f:09:da:d2:da:35:34:48:f8:f9:69:d8:d3:02:
02:7e:c7:f4:6d:ae:38:71:19:e2:c0:ee:9e:27:8b:3a:33:2b:
97:42:f2:24:60:96:bd:29:e0:88:4d:30:0d:41:66:5b:99:46:
87:e0:bc:29:e8:87:df:71:82:e4:ca:3d:dd:2d:5a:9c:45:18:
bb:5a:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:21 2026 by rpki-client