Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: JXI68okUN48a6jjSI10PcoaSZXsd9+knLGMWtUnxSWs=
Subject key identifier: 51:D2:D2:7D:C9:37:76:55:AA:FC:F6:28:5F:52:80:D1:D5:66:32:65
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019CAB33DD7E8EBB4CEBDE68FD8E42DA31FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: WkpO27Y8ZxNKd7U3qDzWmgFGPCo.roa (hash: 8pKYcInVWQ20ee2YIPC0/BRFBVDzYLbWsfYCougTXnw=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: Z8lBsWE9+uz2CvloJr1WQX0eq491a1X7ILSRAaD86To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:dd:7e:8e:bb:4c:eb:de:68:fd:8e:42:da:31:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=51d2d27dc9377655aafcf6285f5280d1d5663265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:3f:77:10:ec:2e:be:4f:46:46:99:3e:ba:
f1:db:ba:c7:fa:3f:59:c6:89:b4:b6:56:ca:b6:31:
54:d6:84:24:77:0f:a1:91:84:c6:8c:ff:ac:f7:d8:
f3:db:44:3d:83:d3:23:bc:ba:ae:5b:80:93:ed:36:
98:1f:c5:ea:13:89:20:87:6d:e2:84:e4:da:73:85:
38:9d:ca:42:5e:7d:59:b0:6b:18:ec:66:9c:d2:c6:
c5:db:f9:d2:cc:43:16:cb:78:b4:1d:82:08:55:18:
06:ff:37:86:0c:0b:bb:b2:71:96:12:2e:ea:44:a0:
82:18:f7:59:4c:9e:8c:55:87:56:3e:d8:f0:97:e0:
8f:20:d5:d2:2d:a7:51:5d:92:26:67:97:25:e7:79:
a9:d2:4a:a7:9a:ea:5d:b8:bf:06:30:33:f6:b1:90:
bf:35:64:1c:c4:67:5f:37:6f:8b:9e:09:5d:3c:c0:
2b:f4:6a:6d:05:d3:5f:1a:7b:0d:3b:a3:fa:ff:8b:
63:be:e2:96:b8:27:a6:3d:b8:cb:7e:b7:0a:93:7d:
96:eb:43:0d:66:6a:c7:ce:08:12:3c:c5:6f:7d:52:
7c:e8:a9:e3:de:34:f6:b5:8b:cd:f8:93:94:fd:79:
5d:c7:57:1e:1d:46:26:3e:ea:bb:26:1e:5c:f9:a4:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:D2:7D:C9:37:76:55:AA:FC:F6:28:5F:52:80:D1:D5:66:32:65
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:21:69:62:72:ea:99:a9:30:84:df:91:d9:df:07:91:40:13:
86:26:cc:d0:53:21:39:65:60:b3:ab:aa:3c:6e:c1:d0:d8:a9:
1d:2c:a4:a8:00:91:2e:0a:e7:4f:52:b8:7d:71:cd:bb:60:18:
cb:64:9c:38:e4:d2:6e:84:77:e8:0d:dd:b1:14:98:eb:de:43:
49:94:e8:b6:db:17:82:18:db:27:e3:30:07:fb:f0:d4:3a:91:
45:ac:7d:c1:4e:97:f9:7c:e4:a4:23:f1:cb:ce:92:5f:c4:32:
0f:5f:96:d8:50:42:36:ce:ac:93:e5:10:5f:d4:41:37:19:e7:
cf:4d:09:f6:c3:d1:c4:ed:fb:a4:1c:85:bb:41:f0:fc:fd:a8:
c7:6c:da:66:bd:41:a0:dc:08:27:98:4a:60:30:1a:2b:e2:84:
9e:c9:26:04:0f:e2:2b:04:0a:25:75:1b:50:5c:78:c3:f4:15:
9f:86:2d:d6:08:ee:55:68:93:d3:f6:bc:fe:f4:09:a9:41:38:
6c:23:71:3c:78:75:d7:7b:af:30:01:f6:bc:24:9f:16:7e:e3:
d8:62:fd:a3:71:2c:65:43:87:4d:50:06:92:17:11:f4:2d:3a:
a4:00:30:fa:a5:22:6c:ba:53:e9:ba:0a:5b:1b:d7:cb:12:7f:
ec:a3:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:40 2026 by rpki-client