Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: WrfJa4RWSf97/qIxW4d9KI/ze8niDL8b7LT5tur91bE=
Subject key identifier: 60:EE:65:E6:07:DB:AB:0B:09:85:B6:31:23:22:FB:80:26:25:2A:BC
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019E1C7D8D557ED26794024302424043C4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 135E
Signing time: Tue 12 May 2026 14:00:50 +0000
Manifest this update: Tue 12 May 2026 14:00:50 +0000
Manifest next update: Wed 13 May 2026 14:00:50 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: T4zLTPpPIZgl4XrYtwcqU3T8hEYB+sM1qrqAXjP3MqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:8d:55:7e:d2:67:94:02:43:02:42:40:43:c4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: May 12 14:00:50 2026 GMT
Not After : May 13 14:00:50 2026 GMT
Subject: CN=60ee65e607dbab0b0985b6312322fb8026252abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:e9:bd:c2:26:2c:6b:39:4b:56:9c:a0:9a:
0f:e4:50:f4:0c:a1:58:7a:5c:a7:7a:d1:46:f6:5c:
71:f5:2a:82:11:81:c1:8d:1f:b3:52:fa:50:d1:9d:
79:ba:d7:c1:cd:8e:41:01:36:bd:9f:89:59:b4:93:
9a:cf:97:ee:70:28:1e:1b:0d:32:91:e9:fa:f4:b9:
93:be:97:50:db:a6:62:06:53:89:45:a6:22:2c:47:
69:1a:69:ba:c6:e3:08:dd:8b:80:ad:9d:61:7d:1b:
98:19:f9:eb:a5:80:b2:e8:5b:4a:53:13:eb:39:d0:
12:0d:59:0b:47:b4:e0:e3:35:84:16:27:fe:f5:1c:
70:2f:1e:d7:5b:a9:f0:3c:3f:fa:9f:06:e5:cd:81:
3b:50:69:3f:85:2a:53:c4:70:1e:8e:99:3f:b8:6b:
3f:e5:08:21:06:4f:77:fe:cf:cf:7a:38:d1:ea:16:
98:be:2c:4f:5f:05:92:ae:fe:2f:7f:07:84:a4:cc:
ea:ac:77:60:c0:47:76:a8:bd:2b:4c:71:66:b6:a0:
ba:cd:07:19:61:1b:76:5c:84:fa:23:e3:8b:64:ec:
b6:b9:49:1f:d9:8f:63:bd:a9:84:f7:3e:82:b5:32:
77:8b:2e:c1:84:1e:d7:c5:27:2d:99:3f:aa:a6:f7:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:65:E6:07:DB:AB:0B:09:85:B6:31:23:22:FB:80:26:25:2A:BC
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:10:a7:72:b7:dc:49:d6:04:83:72:21:eb:71:9a:ae:52:
14:33:41:cd:12:77:26:8b:47:19:5d:02:67:14:52:03:bf:65:
1c:00:92:c6:d9:0a:a5:63:d2:6f:18:a9:49:da:6c:68:47:be:
d6:2c:f7:a3:0d:3f:53:4a:d4:0a:aa:79:16:26:dc:82:98:0e:
b2:5d:72:fa:9a:11:a6:52:97:6a:8e:c1:df:ae:f4:65:2d:40:
76:5c:c1:37:f0:cd:da:39:07:08:ae:da:57:91:9a:33:36:b3:
14:76:d3:4a:34:23:7b:44:f6:d3:b7:b5:17:86:d6:b8:60:e1:
64:2f:12:6c:28:d2:62:31:58:49:54:55:e7:37:f9:3d:dc:51:
80:09:dd:6c:03:f3:71:fe:b5:e0:b5:3d:a9:37:d8:f9:fb:e6:
1c:80:b3:6f:d8:03:33:11:55:8f:fe:f3:4b:f1:1d:b7:17:cd:
42:68:09:bd:29:13:d3:99:44:94:98:28:86:34:2c:92:ff:0f:
2a:b7:a0:e6:a2:a9:43:1e:e0:74:2f:5c:b8:fa:c1:98:a5:86:
a9:7b:b7:fc:5c:91:04:70:77:30:db:e6:af:d5:4b:fd:e0:64:
27:25:08:93:2b:2b:21:57:77:e4:3e:b4:10:df:23:e1:05:b8:
2d:ca:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:41:02 2026 by rpki-client