Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
File: brITtbhEV2qLSPxcLqrVqMzdHMA.mft (raw, json)
Hash identifier: NSZWlC7P6swT7/knnzw/8TsIHDTXUi9IweE+Y6KdEUM=
Subject key identifier: AF:02:9E:1E:19:19:6E:A9:5F:63:B0:FF:F8:F9:37:22:82:61:A4:21
Authority key identifier: 6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0
Certificate issuer: /CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0
Certificate serial: 019D27DFE68A6E01BAC5A8E940F8161CF40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
Manifest number: 01C7
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: WCLNk0S6vqORmgKeJDM818dTu1M.roa (hash: HJRa6AXqmXv+IfwldfcU/sZdG7aCPiXsQWHwTHBII2s=)
2: brITtbhEV2qLSPxcLqrVqMzdHMA.crl (hash: pQQckq5MXMO/IFLxTAbz6pP63n7Y6bAu4rO39Yp8Tps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e6:8a:6e:01:ba:c5:a8:e9:40:f8:16:1c:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb213b5b844576a8b48fc5c2eaad5a8ccdd1cc0
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=af029e1e19196ea95f63b0fff8f937228261a421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:83:c1:bf:db:92:d7:dd:5f:c1:6f:60:63:
e5:b6:d2:6c:34:19:72:01:24:14:0b:39:20:a0:b0:
28:a2:55:02:71:68:1b:25:f5:19:67:43:d1:82:e1:
85:cf:ba:6b:f5:b2:6a:ae:09:19:b6:4b:71:48:28:
e1:36:69:81:99:ef:9b:90:7a:41:e8:62:19:a1:cd:
05:6d:d7:48:b6:5b:86:a9:98:bf:f5:fe:92:85:bf:
ac:30:24:26:75:d2:3b:6b:0a:d1:1c:b0:95:7c:2c:
f0:1a:ec:5b:4c:72:15:9f:cd:e4:b8:9f:d7:d7:aa:
88:39:dc:05:c2:b0:8c:ca:a9:48:27:4e:a9:03:33:
69:60:b9:c0:dc:f6:b3:1b:9f:5d:6e:a3:ce:b2:71:
d8:0c:cc:19:f2:8b:25:70:6a:03:92:6e:ff:1f:ed:
50:25:ce:63:35:80:6c:63:d6:7f:80:e7:28:f4:3b:
e1:70:a4:fc:f5:4e:71:04:54:42:d5:db:30:31:33:
86:ad:31:f8:e7:76:00:0f:fa:ab:ca:51:ff:99:a2:
51:13:7e:b2:f6:9c:df:89:47:a8:1a:05:ac:27:2c:
f5:b9:7a:c6:86:47:65:b2:8d:57:04:69:d8:ce:d6:
fc:a2:80:50:59:c6:7d:75:55:36:3f:16:55:85:7f:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:9E:1E:19:19:6E:A9:5F:63:B0:FF:F8:F9:37:22:82:61:A4:21
X509v3 Authority Key Identifier:
keyid:6E:B2:13:B5:B8:44:57:6A:8B:48:FC:5C:2E:AA:D5:A8:CC:DD:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brITtbhEV2qLSPxcLqrVqMzdHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c5ff42-bbd9-47f6-8e9e-bec2195b019d/1/brITtbhEV2qLSPxcLqrVqMzdHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:0c:90:9f:bc:14:72:51:06:f4:d4:2a:0b:65:19:ad:02:
04:94:25:b3:47:1b:77:47:44:85:a4:37:74:47:65:e8:e4:86:
a0:19:1b:95:18:77:4b:a9:b0:af:6e:d4:95:76:85:3b:fa:54:
af:1b:67:97:67:4b:c1:fe:e5:07:11:0c:8c:26:23:21:01:09:
0d:09:8b:c2:a9:a8:de:d6:28:12:a9:e5:21:3c:e1:29:aa:07:
69:c5:d6:0c:36:57:ef:f7:46:f7:12:69:bd:19:c2:50:eb:87:
b1:23:a7:3c:bb:0f:15:1f:c6:44:1c:6c:25:6f:53:6c:bd:36:
5b:94:4d:6f:f7:de:ed:a5:7b:90:5e:50:0a:a1:ee:42:b7:05:
a4:6a:d9:36:6c:ef:b4:56:a1:2b:48:88:ca:07:c5:00:1f:a2:
a2:22:e1:e7:90:ab:69:b8:ab:01:3e:e5:07:f3:5a:79:ee:c6:
72:bc:26:12:06:12:44:6f:ef:e4:83:48:8c:42:67:cc:a2:a8:
8a:90:0b:6f:5e:87:b8:64:27:19:6d:ea:83:4e:9e:04:a5:93:
e9:89:b1:42:e6:cc:03:b7:4d:ed:28:68:6a:3b:46:13:ce:73:
4f:87:41:06:51:30:91:93:f3:6d:99:52:36:9f:3e:26:2e:f6:
2d:a1:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:26 2026 by rpki-client