Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: vclEBGSxvpDwhndIvT0J5fLw7npY5st8K5n3ZcpAVc8=
Subject key identifier: 7D:FD:0C:C9:17:A0:B0:9F:DF:A3:A4:B1:B7:55:A3:1F:A7:06:91:FC
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 01A0DA2876A6B9BC96E5643D1FA2C2F47271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 20:01:19 +0000
Manifest this update: Fri 25 Sep 2026 20:01:19 +0000
Manifest next update: Sat 26 Sep 2026 20:01:19 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: 850uE5qvncqzBapEoRvIsecVriUaS/ZpmscXSAktduw=)
2: RV6tXj6W0nE7aN2FDSjnLLCyX9g.roa (hash: WdrE3hN0kAlM8z4J7L3E1iNI3SXMCvpVCPSlTiuP6e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:76:a6:b9:bc:96:e5:64:3d:1f:a2:c2:f4:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Sep 25 20:01:19 2026 GMT
Not After : Sep 26 20:01:19 2026 GMT
Subject: CN=7dfd0cc917a0b09fdfa3a4b1b755a31fa70691fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:db:04:5f:51:18:23:ca:48:03:0c:3c:61:
bd:3e:3d:28:68:2e:a9:91:49:58:a0:64:0e:ea:19:
88:5e:3a:60:93:77:8c:4f:fb:d0:b7:e8:12:17:68:
80:ba:af:f0:a3:72:d7:83:9a:2f:54:ff:2d:4c:d1:
05:2e:0b:50:8b:78:2d:ca:83:6d:38:e6:5e:fb:79:
33:69:34:a9:6d:a3:54:fe:fb:b9:60:01:ff:40:29:
2d:e5:b0:18:a1:0b:83:57:2c:d5:dc:84:dd:0a:b8:
a6:5f:46:0a:fc:5e:f8:0e:05:84:b0:d2:10:9c:cd:
fe:22:c4:f3:f6:d3:1e:03:72:27:1a:63:44:5d:9d:
f0:35:e2:20:27:9c:c8:cb:98:1c:75:9b:ee:19:88:
22:86:f8:66:b1:fa:a8:8d:1d:e6:65:b1:37:fb:ee:
09:7c:61:e4:ea:9a:5e:50:3b:ac:c4:f0:52:08:1a:
73:8b:93:50:f8:a9:09:6c:b8:a1:ca:a7:05:a8:95:
4b:4e:45:65:dd:f0:ef:50:ec:ad:30:7d:7e:79:e8:
2e:56:e1:2b:97:ee:96:81:89:58:b0:d5:6c:6e:eb:
c7:e2:39:f3:df:98:dd:2d:f1:e5:f7:a4:aa:38:6f:
2a:90:ba:0e:78:c6:e4:1b:74:18:56:87:4f:82:9f:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:0C:C9:17:A0:B0:9F:DF:A3:A4:B1:B7:55:A3:1F:A7:06:91:FC
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:44:21:e6:13:25:c9:3c:07:4c:77:5b:e1:02:57:41:d5:
f1:4b:1d:8b:23:f9:1d:a8:08:00:d4:f3:f8:fb:0d:9e:fc:59:
48:d5:56:0b:d0:1b:ae:73:b9:8e:a7:fe:2a:90:85:de:5b:e1:
1d:1c:10:9d:09:d7:49:58:be:59:ce:5c:da:d5:38:de:07:7b:
f7:3f:f0:55:87:d4:21:36:3d:e4:71:7f:0d:50:a9:29:9e:88:
8e:b8:a7:17:74:b7:1f:99:95:9b:be:df:ad:0a:d7:ef:7e:ff:
ef:54:ca:af:d0:a1:f2:50:1b:60:c9:36:19:c8:2a:4f:0d:b1:
23:f6:6c:84:79:d8:f1:6b:ee:db:1c:84:74:35:16:f7:15:de:
d6:97:55:86:71:00:6a:b9:54:46:f2:32:66:dd:2b:75:76:5b:
66:90:e9:51:60:4d:5b:e1:6c:f9:09:95:01:04:08:04:ed:98:
2f:a4:e9:9d:fc:b0:b5:72:fa:a3:af:75:02:09:9b:64:ab:47:
41:7e:a3:cd:31:90:1b:f3:09:9e:b8:14:4d:86:31:50:bc:d5:
a6:69:f0:4b:4c:b8:71:25:f7:94:85:ba:69:5e:65:67:af:c0:
c1:49:23:31:f6:5d:bc:90:48:cd:8b:57:50:1b:b3:41:48:dc:
a2:0f:e0:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKHamubyW5WQ9H6LC9HJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk
YWQyYzgwHhcNMjYwOTI1MjAwMTE5WhcNMjYwOTI2MjAwMTE5WjAzMTEwLwYDVQQD
Eyg3ZGZkMGNjOTE3YTBiMDlmZGZhM2E0YjFiNzU1YTMxZmE3MDY5MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBfbBF9RGCPKSAMMPGG9Pj0oaC6p
kUlYoGQO6hmIXjpgk3eMT/vQt+gSF2iAuq/wo3LXg5ovVP8tTNEFLgtQi3gtyoNt
OOZe+3kzaTSpbaNU/vu5YAH/QCkt5bAYoQuDVyzV3ITdCrimX0YK/F74DgWEsNIQ
nM3+IsTz9tMeA3InGmNEXZ3wNeIgJ5zIy5gcdZvuGYgihvhmsfqojR3mZbE3++4J
fGHk6ppeUDusxPBSCBpzi5NQ+KkJbLihyqcFqJVLTkVl3fDvUOytMH1+eeguVuEr
l+6WgYlYsNVsbuvH4jnz35jdLfHl96SqOG8qkLoOeMbkG3QYVodPgp9Z5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH39DMkXoLCf36OksbdVox+nBpH8MB8GA1UdIwQY
MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt
ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4
LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdREIeYT
Jck8B0x3W+ECV0HV8UsdiyP5HagIANTz+PsNnvxZSNVWC9AbrnO5jqf+KpCF3lvh
HRwQnQnXSVi+Wc5c2tU43gd79z/wVYfUITY95HF/DVCpKZ6IjrinF3S3H5mVm77f
rQrX737/71TKr9Ch8lAbYMk2GcgqTw2xI/ZshHnY8Wvu2xyEdDUW9xXe1pdVhnEA
arlURvIyZt0rdXZbZpDpUWBNW+Fs+QmVAQQIBO2YL6TpnfywtXL6o691AgmbZKtH
QX6jzTGQG/MJnrgUTYYxULzVpmnwS0y4cSX3lIW6aV5lZ6/AwUkjMfZdvJBIzYtX
UBuzQUjcog/gOw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:15:56 2026 by rpki-client