Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: AkCajiV+hSSXiW3zoZcKbPOtwychQzzHwEdf/kET0E4=
Subject key identifier: 1F:C4:63:36:CA:E9:51:00:47:63:7C:1B:A1:E3:3D:5B:8C:C0:C6:15
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019CAC7E3D093A5F51D724EE479F05325501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 066D
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: rNojSJwcel+9xCeXtEZoaw/O2qSPFsrIijEnYnCGMdk=)
2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3d:09:3a:5f:51:d7:24:ee:47:9f:05:32:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=1fc46336cae9510047637c1ba1e33d5b8cc0c615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:42:04:bb:44:fc:f0:dd:da:56:18:da:fe:
8d:fc:c4:17:a3:50:28:1f:f9:93:a0:51:8b:91:2a:
f3:f1:4c:fc:c5:64:0b:74:49:8c:30:a2:79:ea:7e:
6e:18:b5:af:b6:f8:e4:d9:4b:44:d0:ac:39:e2:fd:
d9:92:58:b3:60:f3:e3:a6:33:ae:8f:91:8f:70:01:
8c:fa:74:10:b8:b6:43:e1:59:a6:a4:eb:05:72:88:
a1:34:cc:cd:a8:7a:7a:cc:44:16:18:8b:47:ef:3a:
2d:f8:58:f7:44:0e:a0:0b:2f:54:17:2a:b7:d1:73:
17:09:3a:55:ac:d9:1c:2c:67:e1:0e:e5:f2:b5:33:
32:a2:63:59:95:6d:22:8a:07:07:02:c3:56:2f:9a:
ef:c2:6b:3d:09:5b:dd:73:d2:8c:ad:9f:28:5b:d0:
da:f8:1a:c5:26:73:b3:94:ce:8d:bb:dd:c7:cf:74:
f5:bc:27:36:77:e8:b0:c1:65:63:3f:46:4a:1f:1b:
ea:c9:00:4f:d8:73:2b:0b:59:c7:13:01:f4:45:33:
b0:b0:f9:5f:37:43:a7:41:10:be:55:86:f9:ef:9a:
34:e7:2f:6f:e2:ed:e3:55:c1:6c:fd:30:82:34:81:
53:0b:ca:7d:d0:94:5f:ff:61:3b:39:90:71:ed:6b:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:63:36:CA:E9:51:00:47:63:7C:1B:A1:E3:3D:5B:8C:C0:C6:15
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6d:d9:c2:ba:d2:9f:f0:51:f9:88:85:04:ca:e5:6a:5d:11:
b0:ed:de:bc:e8:b7:2f:3a:b3:60:61:e7:9c:65:aa:14:a1:f7:
7c:a2:0e:2b:01:fc:1a:88:00:b0:d6:d3:d5:00:8d:cc:73:9b:
14:a3:5d:44:ab:fb:9d:d6:47:8b:77:c8:dc:bf:b7:3f:e3:87:
47:45:36:45:b3:db:e3:33:79:99:d0:99:9b:6f:04:cb:f4:a9:
12:56:96:d6:93:b7:82:ed:34:3c:11:48:b8:d9:b8:dc:45:1a:
0e:99:91:b0:2a:4b:47:e8:69:65:21:ef:5c:8e:21:f4:ab:70:
60:0f:8b:91:07:c6:22:6b:9b:d8:05:7b:60:8c:e5:f5:7b:3a:
d6:08:c6:07:da:15:07:43:10:91:95:a0:79:7a:df:b2:69:4c:
9c:af:95:7b:40:90:2a:a7:bc:33:dc:be:c1:34:da:de:2b:ff:
4c:1f:62:0c:82:50:39:a1:8b:69:2c:fe:86:7a:7f:ba:b9:a1:
88:fa:2d:22:73:57:63:93:76:1a:78:3f:be:a7:2d:02:1e:cb:
a8:dd:6d:ad:9c:97:c5:80:51:58:5a:d3:e3:f2:8f:9f:6b:bb:
aa:cb:b8:1b:97:99:ed:cb:9d:b1:97:41:a7:7b:f6:2c:d2:91:
15:08:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:02 2026 by rpki-client