Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: Xb6IyPiB9V74JAyTjR0Hc6t/FAQyoUZIQibIRj0ACpQ=
Subject key identifier: 86:C2:90:30:99:68:A1:9D:69:BD:9A:52:25:E2:11:25:EE:DC:3E:B3
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 01A11C078742AE9571BF3BFF91C3120F88EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 08B9
Signing time: Thu 08 Oct 2026 15:00:17 +0000
Manifest this update: Thu 08 Oct 2026 15:00:17 +0000
Manifest next update: Fri 09 Oct 2026 15:00:17 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: QfPyifJ4BH4el75NkYH8fdJDFMXqdzSAA8QbRAolp7w=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:87:42:ae:95:71:bf:3b:ff:91:c3:12:0f:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Oct 8 15:00:17 2026 GMT
Not After : Oct 9 15:00:17 2026 GMT
Subject: CN=86c290309968a19d69bd9a5225e21125eedc3eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:7a:f0:87:a6:34:dd:58:4b:88:1d:da:f8:
36:f7:66:35:d8:e8:29:29:8e:a9:dc:55:8b:69:2f:
f5:f2:94:bc:a9:b2:1a:1c:fb:fe:46:7f:08:46:04:
59:48:79:88:dd:b9:35:39:1c:ff:17:fc:42:6e:96:
87:71:f9:53:0f:d9:c4:3e:01:86:73:2d:1a:32:52:
55:4b:ad:da:d3:ba:37:93:dd:86:47:b1:da:ef:d2:
6a:3c:a1:f6:e9:34:e2:dc:95:22:f2:a6:35:a0:26:
a0:62:d6:1c:98:ce:07:39:bc:ef:0f:ca:93:ca:0a:
73:16:98:12:3e:54:89:7f:61:22:5e:40:16:71:a3:
7f:d1:f5:a2:eb:f2:42:b7:54:17:82:50:3d:c8:b0:
8f:97:82:bf:21:06:89:be:81:0d:ff:03:bc:a3:ea:
5d:b3:a9:58:be:15:37:73:e8:45:4e:ec:bf:17:7b:
e8:b4:aa:d5:72:ac:90:51:f2:0d:2d:78:4d:8d:f9:
d1:05:f5:7b:bc:a1:f8:5d:a2:78:11:ff:b8:c8:0b:
74:67:71:18:ce:39:18:3c:79:ba:e9:c1:73:e7:e3:
0a:0e:33:44:ea:7d:41:5c:e0:de:86:c9:ae:e1:1a:
81:3f:ee:a9:dc:82:c3:94:f3:7e:6f:88:56:27:7c:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C2:90:30:99:68:A1:9D:69:BD:9A:52:25:E2:11:25:EE:DC:3E:B3
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:b4:57:df:c9:b7:14:48:d3:45:02:e4:99:e4:1e:d8:6a:
ed:59:db:f9:0e:96:fc:52:18:11:9a:bb:c3:c0:a8:13:3a:6c:
54:19:cb:13:35:8d:13:79:3e:b1:f5:bb:ff:cf:e0:33:e2:b4:
7d:98:30:7f:57:6d:47:08:b6:b5:0e:1b:30:3c:29:d8:e8:c1:
b9:24:3f:2c:a1:52:24:cf:42:f0:bc:da:ea:98:36:fe:27:9c:
d4:da:89:ba:5f:70:33:cf:58:4b:26:35:0a:ee:28:be:d3:1f:
31:6e:31:3b:20:82:e0:a4:1e:ab:33:54:89:cb:58:9e:1f:02:
b5:04:06:8d:42:2d:d8:55:43:e7:77:59:d3:5d:bd:3b:d0:b7:
d4:23:7d:01:46:00:df:c1:11:15:34:4b:d8:13:86:99:d3:08:
9f:9e:9c:29:91:bf:da:62:21:1c:69:a2:46:6a:16:33:18:b8:
64:f1:80:93:c0:cf:02:bc:09:42:fc:a8:19:81:26:25:48:6a:
be:b1:a0:22:3e:74:c0:01:1b:99:f3:a0:20:06:ca:41:51:b8:
63:dc:47:1f:09:21:c6:cb:66:76:b2:df:fe:c8:be:ae:98:d5:
57:0d:81:7e:7d:63:44:b5:7c:4a:01:c9:d9:00:fb:52:69:e2:
21:e7:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:03:19 2026 by rpki-client