Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: aiCU1msZ28o8luHPHuh3cav2gQKe5SB4Zh8w+nlIZDc=
Subject key identifier: CA:5A:8D:53:35:C7:EF:25:40:0C:B8:EB:0C:CC:95:15:F5:1B:32:29
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019E1EA3CCC38A079EB802D16D6C211C89B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 05D8
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: FeP/5JppnbnicfAaQvdVw/LEZ8FqHU94DxC3uDJA/LE=)
2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:cc:c3:8a:07:9e:b8:02:d1:6d:6c:21:1c:89:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=ca5a8d5335c7ef25400cb8eb0ccc9515f51b3229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:9e:d6:6c:fa:31:23:f8:e5:6a:41:ec:2c:
f2:d9:81:4a:05:62:0a:78:bb:d2:c1:66:c3:94:77:
ef:37:58:40:f6:77:bf:8e:ed:bf:15:ac:83:05:da:
6d:c6:93:e0:9c:42:5a:4d:b1:43:8b:99:d9:8e:78:
d6:0f:67:0b:aa:4e:cc:40:b6:3c:25:69:3a:47:b9:
c6:ad:76:42:bf:0b:da:f5:a2:c0:05:3b:69:3b:bc:
cb:01:86:53:7d:d3:95:84:b0:d6:53:d8:ae:01:5b:
3e:3a:e4:48:d4:1f:31:bf:de:fb:2d:74:92:f4:f0:
8e:a9:23:2f:e6:2f:ee:c3:d4:e6:1b:40:7e:8c:10:
ad:70:24:f2:7e:b5:4f:7f:51:01:e0:74:ef:4a:ec:
e7:d0:f0:50:b7:e5:45:7f:e8:ea:eb:6b:1c:af:b5:
28:27:c7:84:1e:2e:51:a0:b0:17:70:ac:2d:b2:d2:
e7:06:7b:1d:19:d4:77:5e:ee:e9:e8:3e:b3:cc:8a:
3f:05:0c:fd:1a:df:bf:42:0e:fc:d7:27:ba:52:45:
d3:16:6b:33:72:72:4e:e8:98:11:aa:96:c8:f9:2f:
56:d6:7a:a2:de:7e:a8:1a:d2:62:29:13:24:0d:61:
d3:2b:62:81:eb:17:0f:22:e0:7e:98:ec:30:bb:cc:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:8D:53:35:C7:EF:25:40:0C:B8:EB:0C:CC:95:15:F5:1B:32:29
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:90:9c:63:e7:db:85:b2:96:1f:e8:98:2b:59:a2:73:98:
f3:b8:35:91:ab:a7:18:33:b8:82:f4:12:00:02:db:ba:d4:f5:
d1:f0:e5:ca:44:8e:ab:61:cb:8f:95:af:13:97:d4:cb:14:37:
81:3d:86:32:be:e2:81:79:30:91:38:12:d9:87:f8:15:34:e2:
95:51:54:3e:ec:7d:5c:c3:91:77:66:ec:c1:8c:8d:e8:d0:7f:
7f:7a:52:12:68:5b:e7:ef:db:f0:0a:f6:2d:84:42:2b:a1:3a:
49:f5:fc:c7:cd:c8:41:cc:9d:69:bc:82:6a:3f:c1:43:ec:f5:
8f:fa:01:9e:83:a9:ec:8b:9c:dc:fd:8a:96:2a:3b:ca:c0:eb:
f1:26:04:d9:07:03:c3:93:cd:8a:8b:eb:b4:12:ca:88:3a:2c:
5a:31:f0:56:2c:07:f0:5f:7a:66:5f:4d:78:9d:4d:0a:fb:29:
18:91:a3:60:39:bc:39:4e:fe:c0:9a:51:c7:23:06:b4:3d:64:
05:5a:0c:59:8f:ab:e1:51:45:12:20:6d:0b:f3:b9:ef:27:ef:
fe:69:ef:37:2e:86:f0:3f:21:c6:c6:6d:39:2c:57:5d:92:d6:
28:d3:d5:74:c8:41:9a:2e:e7:7a:d6:46:5a:91:59:62:c7:ca:
c6:35:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:38 2026 by rpki-client