Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: /R60i84lY/swTLdaXSxtSCvPRyjIzI8/Hjfo8PupciQ=
Subject key identifier: 0A:7E:F2:A5:C5:B1:EA:FD:3C:81:00:6A:5D:6F:D2:FF:27:05:2A:8D
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019EC0DAF43F8B8D62A416FB09B4EC793838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 12:00:35 +0000
Manifest this update: Sat 13 Jun 2026 12:00:35 +0000
Manifest next update: Sun 14 Jun 2026 12:00:35 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: rszo7ZF32aFoQIQuNXCStMxotoEhBaffNe3FXdDxI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:f4:3f:8b:8d:62:a4:16:fb:09:b4:ec:79:38:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Jun 13 12:00:35 2026 GMT
Not After : Jun 14 12:00:35 2026 GMT
Subject: CN=0a7ef2a5c5b1eafd3c81006a5d6fd2ff27052a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:b3:7e:29:c5:e2:2e:71:5b:5a:61:e3:8e:
9c:79:a3:d0:cd:4f:0e:67:84:f2:6f:dd:cf:cd:fe:
1f:bc:0d:c6:a5:7c:c0:fe:32:1a:cd:95:0f:b2:01:
01:df:d2:97:da:d7:5d:15:fa:6c:1f:af:da:2d:84:
9f:cb:af:a6:c5:3e:c2:f5:13:a2:84:42:c5:98:43:
f5:dd:7c:2f:22:d3:7c:e5:35:32:8a:54:e1:19:f7:
f2:28:d7:48:47:38:80:73:ca:3d:16:17:6a:f0:ae:
b9:21:35:24:b2:f5:d5:be:83:76:51:23:cc:41:1f:
17:44:05:09:50:a7:cd:2b:50:77:4c:c1:68:c8:a8:
c9:c7:f8:0e:37:03:f7:ea:ff:3c:64:a9:f8:dd:45:
c0:48:d8:db:41:fb:93:9a:50:78:99:f3:77:98:5b:
ed:69:7a:aa:e7:2a:08:f9:70:7f:bc:fd:64:3b:73:
ac:38:f2:78:a4:76:fd:8d:53:0e:94:04:9e:d4:23:
d0:d7:d9:23:de:d6:24:2d:40:93:39:bf:c8:61:d3:
8f:e2:bc:f6:25:ec:af:80:5e:61:c5:85:fe:c0:bd:
5a:47:33:ed:cf:f7:a9:96:28:82:81:06:13:6e:43:
e4:0f:51:3d:52:29:88:36:ec:85:d3:d5:af:35:22:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:F2:A5:C5:B1:EA:FD:3C:81:00:6A:5D:6F:D2:FF:27:05:2A:8D
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:2e:bf:4b:21:f5:5b:ce:90:93:58:1a:f0:34:fc:41:f3:
11:2c:3a:0d:49:8b:3b:30:84:e5:6f:ec:6c:c0:65:c6:4c:7d:
7c:b7:90:e2:2a:ca:56:45:49:84:c5:a6:47:70:62:d3:c7:8f:
47:de:b5:4e:24:6b:f3:7f:31:e2:fc:3a:57:07:4a:a0:de:97:
24:d7:26:38:0e:ac:be:3c:3d:d1:7f:07:2a:d6:71:93:a4:63:
c9:1c:cf:24:2b:ca:a7:62:6a:1d:45:a2:b5:63:a1:8c:0b:b4:
6d:db:d1:51:8e:4d:72:78:a9:25:4c:c7:3f:e3:ee:ea:5f:d9:
c3:ce:93:66:d1:7f:b7:3b:25:34:3a:6c:49:23:d6:61:cf:df:
b0:6e:cd:57:ff:c8:c1:3d:9b:b9:97:0a:f1:4a:97:7d:41:db:
33:b3:75:28:e7:40:af:31:69:f8:8e:2a:5c:18:1b:d0:24:c1:
d3:d3:47:bf:5f:ec:48:02:80:84:4e:cc:46:eb:22:aa:6a:9c:
28:a0:fb:79:4f:09:93:d6:62:7b:6a:9d:e2:bb:86:08:9a:1e:
94:60:07:3b:9b:1d:06:ba:af:4a:fc:18:7a:0f:e6:cc:54:60:
69:06:8d:9d:05:e5:35:b8:4d:58:82:f0:ea:90:8a:5c:29:7b:
a2:ba:70:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:08 2026 by rpki-client