Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: YFSp6NnQ4N6nyNQ/kN3z22055d+3yAP7ya4f9aBHVl4=
Subject key identifier: 14:9B:80:92:EF:09:1E:51:BC:97:76:15:1C:2B:53:EC:39:D3:67:2E
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 01A1DE7150475B21B0DD0E5FF9EF014F0E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 07C9
Signing time: Sun 15 Nov 2026 09:02:10 +0000
Manifest this update: Sun 15 Nov 2026 09:02:10 +0000
Manifest next update: Mon 16 Nov 2026 09:02:10 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: HC1iZxT7yMYcAMenEi9+8gmuHfNWuYc0o/kwCnHLvG8=)
2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:50:47:5b:21:b0:dd:0e:5f:f9:ef:01:4f:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Nov 15 09:02:10 2026 GMT
Not After : Nov 16 09:02:10 2026 GMT
Subject: CN=149b8092ef091e51bc9776151c2b53ec39d3672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:b2:37:a9:b7:b4:2a:2c:8e:1e:50:18:f7:
e4:f3:53:7d:51:85:84:8f:54:0b:bf:0a:05:c1:27:
40:76:73:3c:51:b1:a9:44:9b:d5:fd:4f:71:ea:9a:
10:f9:c6:40:f8:69:42:44:0f:3c:87:c1:6a:a3:30:
b9:cd:03:76:0a:72:58:02:54:cf:73:14:38:a9:a2:
08:92:92:8b:d8:b5:e1:41:ff:b0:0c:30:83:cb:96:
65:0d:57:77:99:1e:11:7a:77:01:3a:22:e5:5f:de:
61:96:10:7b:0a:4f:27:a9:53:93:05:6d:b7:e3:53:
52:b2:53:d5:e3:78:22:a9:e5:c9:07:d8:e1:8f:38:
f7:cd:d1:24:af:b0:2e:8e:54:eb:39:7b:eb:4f:92:
4c:a4:de:24:2a:13:4e:9b:91:aa:67:c0:ad:fe:a4:
00:a9:e6:be:97:b4:f6:4b:d4:60:80:48:b3:a3:c8:
df:04:dd:71:ac:91:f3:a5:53:43:e4:bb:5e:63:87:
dd:85:38:1c:22:a5:15:e1:f0:76:7b:16:59:5d:61:
41:ad:6d:f6:84:f7:2c:2a:74:46:ef:a7:3b:7c:d3:
e3:e2:a2:90:78:97:56:33:b6:dc:1e:98:ae:7f:f4:
d3:1c:23:0a:a2:a5:b5:93:7e:1c:14:d2:8e:c4:a9:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:80:92:EF:09:1E:51:BC:97:76:15:1C:2B:53:EC:39:D3:67:2E
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:56:48:6b:7d:41:b8:3d:cf:52:49:31:df:9c:b0:b1:7f:33:
f8:90:6d:39:8f:9c:51:76:0d:bd:2f:70:4b:1c:a0:7c:fa:aa:
6f:e5:22:9c:20:e7:dd:3a:81:f8:5c:b7:4c:8f:e4:d1:d7:24:
18:51:69:c6:4a:41:87:b5:e1:68:07:c6:da:51:da:fe:fa:e1:
60:1f:99:44:1e:c7:1a:e8:82:a7:08:82:7c:aa:67:c3:8a:75:
4b:18:47:84:a8:72:f5:2f:a1:34:03:38:60:e8:8b:97:4e:3a:
60:0f:ed:55:73:f8:6b:a9:86:0a:3b:8d:8e:98:f2:9f:cc:da:
bc:22:06:66:e0:db:56:19:5d:57:be:d5:31:f3:e6:28:35:57:
b9:b3:48:a2:8e:53:f5:96:81:84:f5:09:07:5b:4f:11:28:80:
67:52:a8:cf:c9:53:20:94:0b:e8:18:38:cd:cf:2f:24:b3:ad:
ef:64:7d:b0:9b:29:8a:33:1d:2f:d3:89:b0:9a:4f:78:97:ac:
23:00:23:84:28:b2:1b:12:19:86:29:ee:3b:05:fe:9d:f9:66:
73:75:41:db:5c:e2:38:e9:c4:0b:71:f9:7a:45:c7:b0:62:ff:
06:c4:63:d4:e2:a5:b9:c6:7f:c7:07:a1:2f:1e:c1:b7:f6:25:
75:e5:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:11:45 2026 by rpki-client