
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: yCKgc+r3nFtyRs0MOM3nujWgzrTlqheTn/42TZ2pRrE=
Subject key identifier: 51:02:EB:6A:6F:EF:BB:C4:FB:CC:93:A7:10:ED:FB:01:08:A3:A6:2E
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 019E1C473332E748782F7C4377D6E91B67C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 09E9
Signing time: Tue 12 May 2026 13:01:28 +0000
Manifest this update: Tue 12 May 2026 13:01:28 +0000
Manifest next update: Wed 13 May 2026 13:01:28 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: 5kMS2Jp2/v+eRp3xU81I5s8aCwUJsjGL4toWPTEDyls=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:33:32:e7:48:78:2f:7c:43:77:d6:e9:1b:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: May 12 13:01:28 2026 GMT
Not After : May 13 13:01:28 2026 GMT
Subject: CN=5102eb6a6fefbbc4fbcc93a710edfb0108a3a62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:af:96:ac:bd:57:5c:c0:2f:23:9e:f9:ac:
8d:9e:47:69:ea:d8:d1:a5:41:e9:da:ab:06:04:72:
0d:8c:3a:ac:a5:1d:23:c0:f4:42:4c:b7:d8:ec:2a:
b4:ae:b8:76:ab:cb:56:54:3c:6d:62:a1:92:9d:0d:
8f:ee:7f:12:86:8a:29:3a:5b:ad:10:b2:22:32:a7:
8d:e5:61:bc:b9:e6:23:27:9a:0a:96:ae:17:83:23:
4e:c0:05:b4:9c:ae:86:c1:d2:9f:99:af:68:a0:98:
c0:fb:f9:8a:72:97:6a:07:f3:96:c1:f6:db:11:44:
85:57:af:bb:78:fc:d7:cd:cc:dd:93:51:db:3b:67:
e7:89:e3:e9:9b:cd:5f:c7:e0:0d:2e:89:63:9d:20:
b6:2b:a7:00:f0:bf:15:bf:84:37:a8:d5:91:00:db:
b8:3a:dc:c4:b2:53:ad:93:16:7f:ca:3a:24:82:53:
63:85:b2:6b:80:0b:7c:91:8a:d3:ee:0f:a0:04:4d:
59:eb:63:29:da:0e:3a:85:a3:f3:d8:e3:55:58:d9:
d1:b6:26:ec:db:d1:52:1a:cd:18:91:10:02:50:01:
29:7f:32:c2:0b:96:5c:ee:5c:5f:84:68:a3:ca:ae:
3f:fb:0a:d4:cf:c3:19:91:a6:36:b1:a6:93:ec:d0:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:EB:6A:6F:EF:BB:C4:FB:CC:93:A7:10:ED:FB:01:08:A3:A6:2E
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3d:df:7e:0b:6f:cc:d8:26:15:87:3c:b1:01:73:2a:65:d9:
1c:cc:96:62:52:10:2d:a1:bd:39:93:51:05:e1:0d:88:15:a7:
90:64:02:f7:36:60:9b:a2:b3:80:bf:06:87:e6:b0:67:c7:e7:
a0:9d:2c:5f:05:9b:b3:43:b7:92:68:13:82:9d:78:eb:4f:e1:
46:a5:85:82:97:bd:b6:a8:bd:3d:fe:e7:3f:81:1d:2f:c7:86:
cc:ca:62:44:6c:5a:34:bb:b7:57:a1:ac:61:ea:5f:02:2b:57:
04:2b:06:4f:e3:23:f4:1d:ab:0b:46:59:2d:31:b1:f5:4e:66:
e0:b6:01:f0:98:dc:e3:e5:7a:c1:2f:f7:0a:a7:0e:47:df:62:
2d:d9:63:34:48:a5:f4:bb:5d:7a:63:b6:8b:72:c2:57:eb:5f:
75:17:63:6a:6e:52:38:87:36:c5:ae:a4:85:4a:51:f0:0c:3d:
fa:99:60:77:8f:75:8c:96:88:38:83:dd:8b:cc:fc:f9:73:47:
7d:12:f7:88:60:f1:da:09:37:37:f0:d4:81:95:5d:5e:09:3f:
08:4d:79:7b:f8:7c:23:25:b3:72:bf:a5:1a:4d:d4:04:dc:90:
2b:e4:0b:f7:30:20:f1:75:65:63:dc:8a:11:c6:b0:39:1a:7d:
5d:7f:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:37 2026 by rpki-client