
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: 4mv5OesF4OjIq/0ycuNk3q6roXv6dk1fdUkdkc65dgo=
Subject key identifier: 93:17:64:BE:15:EA:D6:F5:EB:62:0D:42:8B:49:FE:45:91:EB:28:E3
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019FAC767426364A65A3D1A478E33943A292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 06:01:11 +0000
Manifest this update: Wed 29 Jul 2026 06:01:11 +0000
Manifest next update: Thu 30 Jul 2026 06:01:11 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: DuPk5XpDVSXv5rzjQz7z7NUiJziw8n5fnDd6yCwmUgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:74:26:36:4a:65:a3:d1:a4:78:e3:39:43:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Jul 29 06:01:11 2026 GMT
Not After : Jul 30 06:01:11 2026 GMT
Subject: CN=931764be15ead6f5eb620d428b49fe4591eb28e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:4c:e6:fa:be:17:91:73:14:ba:16:9f:03:
5e:21:da:c8:2f:95:8a:6b:00:1c:7d:18:b4:a9:4a:
fd:68:2a:1f:66:de:16:21:9a:35:89:80:8c:3a:af:
89:fa:9b:17:fc:3b:43:08:bb:ce:96:11:aa:88:e8:
91:67:47:40:5f:d6:80:7b:a3:6e:6c:89:0f:7c:ba:
be:bf:ac:15:71:05:05:90:0d:c2:01:d7:bb:7e:dd:
ae:4b:02:da:bc:95:d7:d6:73:65:54:36:1c:e8:11:
41:a2:31:fc:99:78:78:d2:c5:29:32:d9:d7:a5:97:
f0:a7:45:f5:f8:47:77:e7:d5:4d:a8:19:68:70:10:
db:ca:f2:3f:68:f5:fa:58:c7:02:f9:f5:0f:c3:82:
a1:6d:3c:63:52:f6:04:9e:d2:02:f6:75:28:c3:c1:
26:4a:d7:f6:0d:2a:57:db:77:ec:49:7c:ce:52:6c:
46:8a:2c:95:85:e1:68:d3:4d:ca:03:92:da:d5:90:
bd:26:c4:33:75:14:6f:99:d6:30:51:f7:f3:dc:0d:
a8:32:e1:cf:16:9d:d9:40:e5:61:02:82:d9:93:f5:
6a:ea:64:4a:30:11:d3:21:67:de:0f:89:d1:9e:5c:
d0:c0:48:bb:da:7d:51:54:79:cc:c5:75:81:25:5a:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:64:BE:15:EA:D6:F5:EB:62:0D:42:8B:49:FE:45:91:EB:28:E3
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:19:93:6a:79:6a:cf:3f:f8:23:09:96:84:a5:f6:0c:64:
50:a9:b2:98:03:f1:62:82:fb:31:dd:f6:ca:53:46:88:56:84:
aa:53:85:ef:36:5b:f2:72:fd:ff:81:13:f7:9d:08:5b:cc:ae:
8c:15:79:10:a1:28:1a:80:bf:63:e7:58:c9:9d:7b:9f:47:72:
9b:4e:73:30:57:ee:0f:51:e4:3c:02:86:cb:7c:44:81:b3:54:
14:33:01:28:d8:ec:fb:e1:8c:47:98:80:c1:e7:6e:bf:0a:ca:
e3:25:d2:15:26:d4:b4:ff:49:2d:fd:f5:71:e4:9a:89:a2:0a:
ec:cf:e3:92:cf:6f:53:29:3a:c6:2a:79:c0:56:90:2e:1f:dd:
29:65:24:e5:84:cf:94:37:ea:12:87:35:2a:99:6c:5f:e9:06:
94:86:f4:98:58:9c:2e:20:88:0a:8b:ff:6b:54:09:6b:3f:e0:
05:c1:d3:a6:43:1b:8d:70:ce:bd:4d:a0:f3:e8:81:98:a7:1a:
f7:61:d6:98:c0:69:30:26:c9:2b:b2:96:5a:c8:30:3b:d3:4b:
f6:e4:42:25:fc:5f:52:76:4f:b1:d6:18:44:aa:24:3f:57:5b:
7b:4d:57:03:48:3b:09:d5:cc:73:f4:91:4c:7a:a8:32:87:fb:
c9:91:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:18 2026 by rpki-client