Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: 7K7FHve6KzPVBgrp83DVBcDzrSdtDgR1g2JCejIlomU=
Subject key identifier: 79:9D:94:70:23:E8:89:03:29:84:AD:66:C0:70:E2:77:68:75:01:59
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 019D2771D9E4877D60FBC4BAB99FA950F942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 17DD
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: NJmWkpvnLjr053EcyJcpZ7GQEJw.roa (hash: ilBT0fgXRzjOih9KSBqxwvMO7zW6K4l2Ts8OXGa2cVo=)
2: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: Dk8lMwR0PhMQPbRYyLir+YrQbveJh5KjJZJpdSzFcx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d9:e4:87:7d:60:fb:c4:ba:b9:9f:a9:50:f9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=799d947023e889032984ad66c070e27768750159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:47:4f:f1:66:cc:4b:69:c4:66:95:3c:1a:
05:cf:4f:ec:83:c2:86:d0:ec:21:22:bb:44:42:da:
ec:41:43:8e:0a:3d:99:66:ba:64:42:10:32:64:43:
3e:d6:84:5f:4d:09:94:e1:79:01:6e:db:68:7b:40:
66:fe:3f:ff:e9:38:55:c2:18:5d:38:0c:13:c9:d9:
dd:c9:61:e2:01:57:b2:c2:77:17:43:d8:16:08:c0:
0f:1a:14:eb:27:1f:df:4c:c1:45:f6:ea:a0:f9:90:
e9:0c:e2:f6:15:3c:7a:b9:cf:98:e4:0a:e1:eb:0b:
0d:22:5c:87:b9:ec:01:b7:94:ad:92:a3:23:f2:7b:
af:57:69:ed:9d:21:eb:a0:a4:42:c7:0a:f9:0e:d6:
e8:b7:3b:99:0f:21:98:36:aa:2d:fe:ed:ed:5e:c0:
a7:c0:d7:d6:62:0b:fd:d1:3c:55:e2:f0:da:a7:2c:
19:c8:ec:95:c4:3b:09:63:70:82:8c:2c:15:75:c9:
6f:6f:6e:d2:62:3f:54:55:5c:e4:df:d1:b7:b2:ac:
a3:86:30:19:f8:23:0c:4b:34:30:ce:be:7c:be:a6:
fb:21:68:e6:6e:d6:a9:86:7f:a6:3e:f0:39:2e:f0:
89:33:1b:f7:06:47:40:e0:73:79:79:48:bd:8a:57:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:94:70:23:E8:89:03:29:84:AD:66:C0:70:E2:77:68:75:01:59
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:9d:f1:25:d5:cd:ed:ca:1d:7b:72:4c:77:f4:a4:b4:cd:
61:13:de:ba:8f:64:f8:9e:72:cb:e5:eb:26:61:6d:4f:62:5b:
48:7f:22:4a:4c:d2:70:0b:fb:b7:dd:9e:bb:86:e3:18:26:c1:
e1:a0:ca:44:cf:67:af:e3:c4:53:0f:90:b2:fa:49:58:56:d4:
be:3b:0e:bb:cd:9e:b7:c3:73:3e:0b:47:21:10:93:a1:80:6f:
e9:e4:33:9a:42:cc:89:60:04:72:83:7a:d8:ab:aa:cb:ed:cb:
58:04:ef:40:8d:2b:37:e4:26:f5:5b:eb:8b:24:3b:8a:68:0e:
ac:33:a0:1f:bf:df:43:c9:21:dc:28:83:0d:9e:de:9c:11:70:
3a:fe:98:ca:49:19:68:a3:8f:7f:4a:7a:9b:5d:bb:80:e4:20:
75:13:22:70:8e:c8:bf:dd:55:44:ca:f1:8f:4b:54:fe:cb:d5:
ac:19:64:1e:73:7a:6c:34:f7:60:50:b7:24:d1:ca:c9:97:66:
48:87:46:76:50:a5:81:e2:bd:5d:29:43:3a:1e:ce:0a:67:f8:
8f:ea:12:ae:fc:cf:3c:b6:51:02:26:c5:71:e9:7c:9c:4f:21:
63:f2:72:67:1c:69:bd:f6:73:50:77:92:08:54:c1:e4:a1:29:
b5:22:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:49 2026 by rpki-client