Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: JejCQYrz/fYz97mKaJep09M1Kp0H2Px1g/mg7xtl+QA=
Subject key identifier: 18:54:DD:5A:9C:29:7E:A7:47:1C:AF:C5:EB:03:0E:4F:77:B6:61:A4
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 01A0C2C497B78AB41D6CE7BC01A17FD1198F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 07:00:58 +0000
Manifest this update: Mon 21 Sep 2026 07:00:58 +0000
Manifest next update: Tue 22 Sep 2026 07:00:58 +0000
Files and hashes: 1: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (hash: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=)
2: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (hash: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=)
3: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: qETOzmsId4fyQ4BgNhhYc+dnC9wXCUJhWXSb3croero=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:97:b7:8a:b4:1d:6c:e7:bc:01:a1:7f:d1:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Sep 21 07:00:58 2026 GMT
Not After : Sep 22 07:00:58 2026 GMT
Subject: CN=1854dd5a9c297ea7471cafc5eb030e4f77b661a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:21:c4:c7:59:3a:2f:41:fa:12:43:75:52:
cb:20:47:c6:ab:dc:4a:74:f6:4e:91:f9:e4:47:79:
9f:1b:06:ec:95:0d:f8:13:0b:7f:c7:8a:26:5c:e9:
e7:9a:15:10:16:fb:d7:62:f6:cc:1c:b3:cb:0e:62:
31:ae:cc:7e:b4:1f:65:e2:17:19:cb:3a:3b:e7:08:
0e:34:da:e3:c1:34:cb:46:3e:1e:8d:fd:0a:91:b9:
d3:e7:2a:4f:dc:9f:e4:59:a1:2f:9c:3d:cc:da:da:
d6:be:9c:5b:be:6f:91:a6:bb:cd:24:5f:39:8c:f1:
67:23:5d:9a:ef:3d:0e:6b:c1:e7:ef:c3:af:62:00:
84:73:be:ec:63:c5:40:07:f9:34:3a:37:73:bb:6b:
65:c3:ee:34:d9:22:1b:16:92:95:73:d4:b9:24:77:
6c:f9:35:1e:d5:90:3c:a0:a9:69:08:d7:99:c7:8b:
10:81:08:4b:91:95:30:f8:37:a4:a8:51:20:c7:73:
13:4f:a6:81:48:8f:3a:7f:ef:16:dc:b7:20:31:03:
18:a2:84:b0:53:0f:39:b2:df:c6:be:6f:ef:54:91:
82:71:a4:6e:d9:af:df:34:06:2d:fb:ab:25:4a:6b:
2c:af:9c:3f:9e:51:33:1b:50:1a:ed:b7:0e:a5:98:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:DD:5A:9C:29:7E:A7:47:1C:AF:C5:EB:03:0E:4F:77:B6:61:A4
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:8f:29:c2:ed:8d:6a:12:f2:74:48:f5:76:c0:8c:fb:75:0d:
50:20:fa:e5:6c:d8:ef:37:63:a1:db:bd:29:6f:bd:0f:d8:12:
4e:e2:c1:f8:66:6a:8b:0c:c0:b1:91:63:a5:e1:35:38:21:d1:
9e:43:aa:ed:8f:4d:3b:ac:8c:a0:87:31:49:ad:60:75:75:b3:
85:7e:55:5d:1e:f8:b7:70:6e:6e:5e:72:96:9a:ea:9a:51:dd:
d1:5c:ce:ba:f8:9d:d5:77:d3:57:99:bb:3a:0a:d5:aa:a0:ed:
1d:21:4a:8c:5d:81:b7:af:19:ce:d0:0b:f4:fc:b7:e8:ab:8f:
3e:81:2c:a0:f1:63:d4:f3:0d:1d:2a:ab:84:00:46:f7:15:7e:
b8:5d:da:49:e0:2b:85:ff:68:6a:5e:a6:fe:82:cf:76:0c:65:
7f:15:8d:cc:4c:c3:20:e8:db:91:a3:a1:18:a7:58:e2:12:aa:
e6:b9:8d:0d:3d:4b:c4:7c:43:77:76:0c:32:b4:46:d6:fc:8a:
2c:f1:d2:6b:e2:a4:d8:16:83:07:87:2a:73:bd:7d:7b:0a:53:
a9:b3:9a:c4:7a:79:19:1a:24:9b:53:a6:2b:9a:8e:01:00:40:
f2:d0:f7:bd:af:00:94:19:59:83:13:14:12:03:b5:63:0d:cd:
88:ef:4b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxJe3irQdbOe8AaF/0RmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTQ2MDU2ZjBmYmJkZTYxOGJmZjAxMWMwZjIyYmE3NGE1
ODMyYjcwHhcNMjYwOTIxMDcwMDU4WhcNMjYwOTIyMDcwMDU4WjAzMTEwLwYDVQQD
EygxODU0ZGQ1YTljMjk3ZWE3NDcxY2FmYzVlYjAzMGU0Zjc3YjY2MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotUhxMdZOi9B+hJDdVLLIEfGq9xK
dPZOkfnkR3mfGwbslQ34Ewt/x4omXOnnmhUQFvvXYvbMHLPLDmIxrsx+tB9l4hcZ
yzo75wgONNrjwTTLRj4ejf0KkbnT5ypP3J/kWaEvnD3M2trWvpxbvm+RprvNJF85
jPFnI12a7z0Oa8Hn78OvYgCEc77sY8VAB/k0Ojdzu2tlw+402SIbFpKVc9S5JHds
+TUe1ZA8oKlpCNeZx4sQgQhLkZUw+DekqFEgx3MTT6aBSI86f+8W3LcgMQMYooSw
Uw85st/Gvm/vVJGCcaRu2a/fNAYt+6slSmssr5w/nlEzG1Aa7bcOpZidiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhU3VqcKX6nRxyvxesDDk93tmGkMB8GA1UdIwQY
MBaAFG0UYFbw+73mGL/wEcDyK6dKWDK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODlkYjktZTIyYi00ZDY0LTk0YjQt
OGVjZjc1MTA1N2FjLzEvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ODlkYjktZTIyYi00ZDY0LTk0YjQtOGVjZjc1MTA1N2Fj
LzEvYlJSZ1Z2RDd2ZVlZdl9BUndQSXJwMHBZTXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Y8pwu2N
ahLydEj1dsCM+3UNUCD65WzY7zdjodu9KW+9D9gSTuLB+GZqiwzAsZFjpeE1OCHR
nkOq7Y9NO6yMoIcxSa1gdXWzhX5VXR74t3Bubl5ylprqmlHd0VzOuvid1XfTV5m7
OgrVqqDtHSFKjF2Bt68ZztAL9Py36KuPPoEsoPFj1PMNHSqrhABG9xV+uF3aSeAr
hf9oal6m/oLPdgxlfxWNzEzDIOjbkaOhGKdY4hKq5rmNDT1LxHxDd3YMMrRG1vyK
LPHSa+Kk2BaDB4cqc719ewpTqbOaxHp5GRokm1OmK5qOAQBA8tD3va8AlBlZgxMU
EgO1Yw3NiO9LVQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:22 2026 by rpki-client