Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: /OHb/PdmRuadoTbbp00xJzqO7Pdw/y6oISrN6AqcG2Y=
Subject key identifier: 21:F9:0B:50:40:49:29:37:0D:87:50:FF:EE:91:1B:26:A7:A6:3D:4A
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01A0D3B8AD715577A0DECD69F9B0851230EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 14C6
Signing time: Thu 24 Sep 2026 14:01:30 +0000
Manifest this update: Thu 24 Sep 2026 14:01:30 +0000
Manifest next update: Fri 25 Sep 2026 14:01:30 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: 7hGzF86HWIjR3yUrfv3Pr3qJuz1exlLkkvBXj6E1GYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ad:71:55:77:a0:de:cd:69:f9:b0:85:12:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Sep 24 14:01:30 2026 GMT
Not After : Sep 25 14:01:30 2026 GMT
Subject: CN=21f90b50404929370d8750ffee911b26a7a63d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:1f:7b:13:5a:37:1c:a6:0e:70:ab:28:4c:
66:64:27:0c:cd:f7:28:dd:04:e0:b5:65:21:c0:ba:
e3:fa:93:15:d2:8d:86:56:c8:08:11:9d:3e:d3:51:
10:73:76:a2:e2:17:6c:77:2c:d4:2f:7f:fb:6d:cb:
4d:bb:fb:37:95:64:72:fe:bb:46:8a:d2:a1:c6:67:
ec:33:83:16:a0:ea:8e:dd:8f:c1:15:bc:82:79:cb:
3a:f9:ee:23:ea:1a:5f:cb:ae:44:06:f1:b1:26:e9:
12:d8:ad:91:0b:61:5e:6b:f5:60:0c:38:93:a7:78:
40:fb:3e:a3:f9:c0:b8:52:a7:93:65:9c:f9:a9:6d:
e7:dd:e4:67:4c:50:27:91:c8:b7:76:f0:a8:31:58:
de:e9:6c:3e:f0:7d:58:01:fd:b9:2c:97:f7:ef:a4:
48:fb:f6:f5:c4:de:1e:37:9e:99:75:31:99:fe:cf:
e0:78:a5:10:5b:b7:6a:51:e4:d4:e3:a3:43:f5:13:
e8:c9:25:6c:4d:00:5c:ff:22:a2:e1:d1:5d:8e:e7:
d6:82:5a:dc:c6:61:34:cc:fb:c3:e8:3a:d8:48:d8:
94:17:b2:8c:7f:8f:20:76:5c:bc:a6:31:60:cb:01:
ba:05:4a:47:50:c1:09:db:87:ed:d2:44:1e:20:3a:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:0B:50:40:49:29:37:0D:87:50:FF:EE:91:1B:26:A7:A6:3D:4A
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:d8:3f:c7:cb:3e:d8:ef:a7:bd:86:d2:0e:1c:6c:70:32:
bb:9c:75:e7:84:50:63:64:6c:31:74:1b:9f:71:53:95:b9:36:
48:b0:e1:fb:de:07:90:a6:4f:4a:f5:4a:71:f7:e4:16:cf:fb:
d4:f8:39:21:d0:84:81:69:cf:30:ea:d1:fd:9a:1c:8a:d2:2c:
a5:63:08:b9:ae:a0:0c:65:d8:d8:32:bc:4b:c6:fa:4d:1c:53:
fd:94:df:06:14:6f:f0:a3:a7:c1:e6:60:d3:a1:52:f6:f5:2a:
0c:0b:ec:24:4a:c4:e0:70:22:29:b9:5b:3b:76:ed:c2:6e:a5:
42:23:ce:e3:21:f3:aa:4e:55:aa:63:2d:82:d8:6a:f1:9c:77:
4e:69:7a:ee:83:21:35:23:c0:e2:b9:eb:73:89:03:bb:e6:8a:
21:21:48:05:9c:53:5c:c5:60:8a:13:15:37:c8:fd:7d:60:77:
e2:50:01:51:c3:23:6f:12:f7:f0:47:2c:5a:1d:17:08:7b:2a:
bb:3c:6c:a5:3b:8e:41:8d:12:2b:c0:4a:9d:f7:0d:65:08:91:
08:a7:98:2e:8e:ba:20:16:76:62:7f:07:b8:85:c9:e8:38:c5:
61:e0:ee:3e:86:15:0f:82:18:37:50:66:3b:cc:5f:01:91:89:
e3:0e:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:08:55 2026 by rpki-client