Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: keF2GDNXdLeqt/jrZqgKZY5WBSZrhPysCIXj0ZCFwmA=
Subject key identifier: E9:21:52:68:1C:F6:91:86:18:F7:C0:24:5D:36:6D:F0:28:0C:D1:C5
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019FAB2C6AE6A307B48742F3AA187409229F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 07FA
Signing time: Wed 29 Jul 2026 00:00:42 +0000
Manifest this update: Wed 29 Jul 2026 00:00:42 +0000
Manifest next update: Thu 30 Jul 2026 00:00:42 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: 44J8yyTUkX1jR/Al59o+4zPFJx1vR1shDFRojzoFIjE=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:6a:e6:a3:07:b4:87:42:f3:aa:18:74:09:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jul 29 00:00:42 2026 GMT
Not After : Jul 30 00:00:42 2026 GMT
Subject: CN=e92152681cf6918618f7c0245d366df0280cd1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:c7:11:82:bb:4a:32:1d:f1:23:31:82:aa:
d0:4f:a6:0f:8c:15:c9:77:ef:08:39:76:de:4c:23:
18:e1:a4:07:87:c8:8c:42:a1:c7:c3:0e:a1:72:e4:
79:8b:42:a1:66:aa:f9:96:ff:4c:17:15:00:b7:ad:
01:07:83:2c:fc:31:97:48:a4:4b:9a:4b:79:f3:ac:
74:3b:14:ff:d9:55:ba:c3:c0:2a:07:82:a8:da:a2:
87:84:8d:2e:eb:9a:f9:1e:66:a9:47:f7:c4:f0:5d:
4d:e0:77:c2:a8:45:ac:d1:eb:43:f6:0e:dd:a3:fb:
a7:a8:44:c4:ef:dc:d7:ac:8f:79:42:72:98:28:7c:
79:0f:e6:bf:eb:f5:22:3a:ee:a0:4b:e4:4f:39:e1:
dd:af:51:85:f8:8e:9d:b1:68:e4:85:13:34:53:cb:
53:31:69:71:d9:24:0d:a7:1e:4c:07:78:16:d2:54:
b9:24:df:3a:eb:64:63:b3:79:18:27:ad:0f:ba:be:
ab:80:33:61:7a:3b:09:23:e8:e8:b0:c7:b1:ab:b0:
82:5b:22:65:42:16:84:1c:5a:30:98:08:bf:ca:34:
08:cf:4c:d6:c1:54:c5:5f:be:2a:e8:c2:ba:72:a6:
f3:c4:0f:ef:03:3d:fb:57:54:af:8b:54:89:7f:83:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:52:68:1C:F6:91:86:18:F7:C0:24:5D:36:6D:F0:28:0C:D1:C5
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:a4:86:f8:19:af:a0:1e:c8:b7:4b:6c:a2:72:ec:13:e8:
df:17:3f:6f:56:00:14:67:0b:b6:f3:7c:e5:78:d3:35:86:e9:
fb:e0:6d:c0:76:5a:36:a2:a0:1b:91:e6:91:b2:81:92:69:41:
d4:0b:10:d7:16:4f:6a:8b:a7:6d:8f:75:45:ba:7a:20:83:97:
3e:5d:ba:79:89:38:95:8a:49:2f:13:94:42:11:87:73:ac:59:
c5:8d:6c:40:d5:77:35:45:80:b8:74:a6:39:1e:1a:54:ea:aa:
b9:d3:51:53:04:33:63:09:47:25:cb:35:2b:64:8e:f3:12:05:
fd:f3:61:eb:47:1a:28:e4:40:46:29:ea:95:10:05:1a:c8:49:
21:3d:9e:6d:15:5f:e8:6c:f0:27:71:9b:81:50:38:a2:39:0e:
53:22:48:92:21:13:75:3f:36:9c:e9:f7:b3:5c:a3:60:06:9a:
de:15:d6:00:14:0d:48:d1:fd:12:32:dc:81:b8:5d:99:7a:2d:
e8:3f:14:0e:e6:12:cf:76:99:df:e9:62:bb:20:27:b4:06:95:
54:43:83:67:99:6b:06:2b:20:da:03:5d:b1:6c:92:88:4e:fc:
eb:00:80:8b:ba:08:21:18:13:88:25:9b:26:be:c7:9f:9a:8a:
91:77:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:40:27 2026 by rpki-client