Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: 7LKrwuQXwTMAgpBa/VkBlY9uYVeHfmDEjKnNkliDq08=
Subject key identifier: D0:FA:D9:9F:88:23:E3:0A:4C:D6:7E:48:87:7C:9E:C4:71:E9:E2:50
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019D9AAB7401EF37386D0B62204C1A6D9678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:20 +0000
Manifest this update: Fri 17 Apr 2026 09:00:20 +0000
Manifest next update: Sat 18 Apr 2026 09:00:20 +0000
Files and hashes: 1: WkpO27Y8ZxNKd7U3qDzWmgFGPCo.roa (hash: 8pKYcInVWQ20ee2YIPC0/BRFBVDzYLbWsfYCougTXnw=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: yYL9n1iF5/WlnSM4nnJDEty//cOV3fZktPHVCa4HDWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:74:01:ef:37:38:6d:0b:62:20:4c:1a:6d:96:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Apr 17 09:00:20 2026 GMT
Not After : Apr 18 09:00:20 2026 GMT
Subject: CN=d0fad99f8823e30a4cd67e48877c9ec471e9e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:20:2f:43:2f:2a:eb:81:c3:44:5b:2e:a4:
21:fb:39:9f:fd:4d:3c:57:2b:85:8e:28:69:98:ec:
ef:08:f8:ba:ed:38:99:43:8b:6e:c2:30:51:a8:41:
1c:fe:04:bb:a8:29:14:75:60:7c:6d:69:73:78:14:
3c:99:bc:a1:8e:a5:41:22:ab:49:b9:59:f7:d9:bd:
de:7b:89:cc:8a:e8:0c:92:d2:7e:3f:12:62:0c:22:
2a:c6:3d:b5:2e:f8:6e:22:42:17:ea:20:a7:62:37:
85:95:81:e4:f9:64:0e:5e:6b:2a:f5:e2:d7:93:df:
0b:19:8e:99:a1:14:b2:df:ef:90:82:65:7d:c0:8c:
cc:d3:a3:cd:6e:7a:40:a6:f7:ea:e3:59:2d:f6:e2:
b6:8d:11:0a:46:b3:85:08:aa:c7:51:07:ff:a7:47:
93:22:78:c1:56:4c:35:fe:ca:c2:78:88:01:aa:93:
99:44:58:88:cf:38:d0:ac:87:c0:d3:7f:61:df:7b:
2e:f4:95:df:0f:42:f3:ac:64:7f:59:68:bd:3e:fe:
35:57:dd:3e:f7:12:39:bc:b0:67:53:ad:fb:40:2f:
5d:43:90:42:cb:f8:69:ef:14:6e:9b:98:0d:94:8f:
a6:57:de:74:a2:74:99:af:0d:cb:23:17:18:4e:08:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:D9:9F:88:23:E3:0A:4C:D6:7E:48:87:7C:9E:C4:71:E9:E2:50
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9e:4d:78:1a:30:d5:dc:75:44:c4:ca:f5:23:80:a1:50:b9:
3f:dc:cf:66:53:b4:06:54:b2:34:fc:a4:dc:53:b2:03:6f:bc:
68:0e:6e:1b:74:9e:d3:dd:f2:b6:db:d8:34:59:13:57:c9:ac:
c4:1e:06:b6:72:cc:0a:09:6e:ec:a3:be:a6:44:29:bd:fe:7c:
1c:c0:e1:ee:df:28:29:9a:4a:d3:03:48:a4:e2:b6:00:a8:15:
a3:85:bf:2d:0e:49:4c:d2:bc:38:d2:bf:62:fd:10:05:05:1f:
33:1b:9f:33:70:45:5d:6f:2b:67:a2:08:4a:0a:f7:c3:51:0f:
7a:e5:42:16:2d:34:f6:f2:31:24:55:9a:b3:34:70:05:79:34:
3f:2b:14:fc:36:ea:9c:0b:e0:09:69:cd:05:0d:ba:96:5b:2c:
e6:08:e9:94:1b:0c:3d:d7:27:a9:7c:86:92:33:55:73:d9:46:
64:e1:d8:26:96:f9:24:74:4a:36:8e:e9:d3:c3:53:e9:89:fa:
c6:d7:3e:95:8a:31:12:20:8e:04:8f:77:19:47:73:87:f6:22:
24:b7:b6:2c:5b:fa:d2:93:07:ef:b3:d6:28:d5:0f:f2:68:a3:
40:05:46:ac:35:9f:9d:52:19:a0:a8:eb:7b:f0:e0:3f:7c:45:
c5:c3:92:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq3QB7zc4bQtiIEwabZZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTQ2MDU2ZjBmYmJkZTYxOGJmZjAxMWMwZjIyYmE3NGE1
ODMyYjcwHhcNMjYwNDE3MDkwMDIwWhcNMjYwNDE4MDkwMDIwWjAzMTEwLwYDVQQD
EyhkMGZhZDk5Zjg4MjNlMzBhNGNkNjdlNDg4NzdjOWVjNDcxZTllMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA110gL0MvKuuBw0RbLqQh+zmf/U08
VyuFjihpmOzvCPi67TiZQ4tuwjBRqEEc/gS7qCkUdWB8bWlzeBQ8mbyhjqVBIqtJ
uVn32b3ee4nMiugMktJ+PxJiDCIqxj21LvhuIkIX6iCnYjeFlYHk+WQOXmsq9eLX
k98LGY6ZoRSy3++QgmV9wIzM06PNbnpApvfq41kt9uK2jREKRrOFCKrHUQf/p0eT
InjBVkw1/srCeIgBqpOZRFiIzzjQrIfA039h33su9JXfD0LzrGR/WWi9Pv41V90+
9xI5vLBnU637QC9dQ5BCy/hp7xRum5gNlI+mV950onSZrw3LIxcYTgiovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND62Z+II+MKTNZ+SId8nsRx6eJQMB8GA1UdIwQY
MBaAFG0UYFbw+73mGL/wEcDyK6dKWDK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODlkYjktZTIyYi00ZDY0LTk0YjQt
OGVjZjc1MTA1N2FjLzEvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODlkYjktZTIyYi00ZDY0LTk0YjQtOGVjZjc1MTA1N2Fj
LzEvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJ5NeBow
1dx1RMTK9SOAoVC5P9zPZlO0BlSyNPyk3FOyA2+8aA5uG3Se093yttvYNFkTV8ms
xB4GtnLMCglu7KO+pkQpvf58HMDh7t8oKZpK0wNIpOK2AKgVo4W/LQ5JTNK8ONK/
Yv0QBQUfMxufM3BFXW8rZ6IISgr3w1EPeuVCFi009vIxJFWaszRwBXk0PysU/Dbq
nAvgCWnNBQ26llss5gjplBsMPdcnqXyGkjNVc9lGZOHYJpb5JHRKNo7p08NT6Yn6
xtc+lYoxEiCOBI93GUdzh/YiJLe2LFv60pMH77PWKNUP8mijQAVGrDWfnVIZoKjr
e/DgP3xFxcOSRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:40 2026 by rpki-client