Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: 9jg9Tx7SbsidR98GcK4l20pl01X27840i4YaYaIEN6g=
Subject key identifier: CB:76:8A:C6:5F:06:DB:8A:FC:25:01:A6:97:49:03:89:73:BC:7A:39
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019ED386966536AB5C277DB7618D1CF71A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 03:01:13 +0000
Manifest this update: Wed 17 Jun 2026 03:01:13 +0000
Manifest next update: Thu 18 Jun 2026 03:01:13 +0000
Files and hashes: 1: WkpO27Y8ZxNKd7U3qDzWmgFGPCo.roa (hash: 8pKYcInVWQ20ee2YIPC0/BRFBVDzYLbWsfYCougTXnw=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: 2b9i9e2AgiAFxoxRm++ApSqTsXvfYcvDLdOC8DtKHDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:96:65:36:ab:5c:27:7d:b7:61:8d:1c:f7:1a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jun 17 03:01:13 2026 GMT
Not After : Jun 18 03:01:13 2026 GMT
Subject: CN=cb768ac65f06db8afc2501a69749038973bc7a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:b5:0f:fb:0a:2e:39:a6:72:cd:17:c3:e4:
bc:54:af:72:f7:36:b5:05:68:22:bb:ef:58:8d:77:
46:b8:c9:3b:53:17:fa:84:74:0a:bd:b8:04:5e:bc:
fc:98:c5:58:a9:23:ab:99:5b:df:cb:55:a2:92:95:
b1:be:05:3d:d7:d3:ec:9b:cb:ff:5e:3a:63:34:b5:
fc:5e:cb:13:cd:55:2d:bd:74:a9:c5:cb:3f:0b:c7:
3a:15:8a:90:1e:d8:65:c6:38:f3:27:2c:77:5a:d5:
bf:10:a8:d1:77:bc:65:03:0d:29:59:ee:b0:71:75:
8d:d8:3a:a6:49:e9:5f:b5:86:7c:74:f3:7c:6d:87:
5e:55:99:be:3d:67:16:62:12:ce:72:0a:e8:06:a8:
59:be:a3:a2:5b:39:3c:6e:37:a6:fb:bb:65:9e:96:
40:3b:7f:7d:2e:b9:37:8c:53:a9:ff:75:ec:96:a3:
87:3c:2d:9d:43:58:c8:97:00:bb:ea:cf:8f:43:79:
a2:70:c1:5d:f9:b5:02:9a:1d:c8:e3:15:07:d5:42:
45:aa:86:47:f4:c7:48:1d:48:ea:b6:d0:61:56:72:
4f:b0:90:ab:c6:d3:d6:d5:de:2d:71:34:93:e6:20:
9b:46:6c:ad:2e:9f:31:14:02:4a:72:17:6e:85:ac:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:8A:C6:5F:06:DB:8A:FC:25:01:A6:97:49:03:89:73:BC:7A:39
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2b:6f:90:18:89:ca:78:53:45:93:25:85:ef:96:47:7c:b5:
e7:7a:95:69:8c:c8:58:24:1f:d1:28:bf:fa:f0:fa:b2:64:83:
67:b6:d9:97:34:2e:bc:e5:fa:59:cf:8d:64:ed:7b:c4:f8:1e:
7d:b4:9a:ed:51:e2:1c:ed:6b:0d:0d:3a:9a:4f:f6:e9:e1:fc:
4d:99:88:94:f2:69:30:ae:cc:81:40:fb:1b:48:3d:02:d3:3e:
ca:eb:b7:57:5b:03:60:28:eb:46:4d:57:21:25:56:86:fc:5d:
51:5f:6f:4c:63:8e:cc:9c:ec:9e:fe:f4:19:98:cb:5d:57:8f:
70:e7:83:d5:42:b7:14:38:23:14:aa:dc:3b:99:53:23:83:27:
d0:c0:07:d0:21:1c:90:06:d1:83:74:3d:6f:7f:1b:65:22:65:
f6:d2:4f:47:7b:7f:32:40:63:ba:82:e8:a7:d8:ab:37:63:aa:
a6:8b:5d:10:ad:6f:af:1a:1a:f3:d1:f6:88:0f:f8:9e:01:f8:
e2:6d:4d:41:e3:7f:99:70:cd:cc:56:5f:08:e9:9e:31:41:86:
01:dc:cb:af:4f:7f:ab:21:c8:5e:c7:75:b1:01:10:e8:c9:07:
22:c9:d8:96:dc:ae:b4:9d:fd:15:9a:37:df:d3:4b:41:6c:06:
73:c3:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:37 2026 by rpki-client