Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: ykblW7CKlhc+LPicdPVites7N/vhyZ1Z/cxmC89GX3Y=
Subject key identifier: 80:BB:D8:88:49:97:4F:54:7F:BA:5E:ED:97:0C:C0:0F:E7:FC:DC:68
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 01A0D38372F1722D8FA95125F0879D84C1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0B51
Signing time: Thu 24 Sep 2026 13:03:22 +0000
Manifest this update: Thu 24 Sep 2026 13:03:22 +0000
Manifest next update: Fri 25 Sep 2026 13:03:22 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: GTQopxlk7FbI2OnYOOG3hfbdIkSZ2Xt7ZxrnLG6iRYg=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:72:f1:72:2d:8f:a9:51:25:f0:87:9d:84:c1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Sep 24 13:03:22 2026 GMT
Not After : Sep 25 13:03:22 2026 GMT
Subject: CN=80bbd88849974f547fba5eed970cc00fe7fcdc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:15:58:df:51:27:c2:7d:4d:72:22:3a:68:
e7:19:3a:84:23:82:49:dc:fe:54:8a:e7:15:7a:eb:
20:9f:9e:9e:a1:12:21:62:1c:2a:92:74:4c:9d:af:
7e:f0:1f:4a:a7:de:0b:d4:a6:bb:54:0f:f3:1f:7c:
c4:75:ab:14:84:2e:03:16:c4:c4:ff:b7:16:92:ac:
3d:4e:f5:c6:1f:c3:85:4b:ff:ee:2e:25:1a:a6:7e:
1e:1a:a9:6e:ee:85:e6:4c:90:61:7e:ac:63:a1:b3:
c2:08:79:3f:96:14:6c:8b:8e:e9:87:9b:19:23:88:
ac:03:79:94:0e:71:94:c7:e7:f3:e3:bd:fd:6f:ad:
0e:88:6a:29:fb:a5:65:7b:2a:a2:32:25:0b:de:e6:
59:f2:2a:59:d2:62:cb:75:b1:e4:73:36:1e:d6:66:
df:aa:3f:a7:7d:3a:b4:c6:f1:3a:a1:0f:fa:06:43:
a7:1f:fa:58:5f:84:17:14:b5:45:93:89:8c:02:70:
00:45:ce:e8:65:b9:1b:98:25:96:bd:db:05:1a:87:
d3:7a:f9:ec:bc:91:55:46:60:00:dd:ce:43:ab:e1:
9c:39:a2:8f:79:86:bd:ae:db:25:22:a9:59:67:a0:
a8:bb:a1:0b:56:07:4e:23:e0:2b:11:13:7c:e4:12:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:D8:88:49:97:4F:54:7F:BA:5E:ED:97:0C:C0:0F:E7:FC:DC:68
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ea:af:53:d6:81:57:e5:16:65:28:4c:2e:14:6f:31:68:47:
01:59:54:0a:81:fa:dc:43:4b:ae:df:b0:2f:37:09:21:80:ac:
6b:9c:c3:83:f3:a3:b0:e0:1a:1e:63:c4:7c:9f:05:f8:f7:25:
99:2b:06:8a:96:9a:5f:34:fc:d3:e1:75:fd:fb:3f:34:27:0d:
7c:d6:98:a7:e4:97:8f:99:cd:9d:cd:e2:3a:6c:bb:62:73:d9:
46:e0:08:2e:5c:12:c0:e4:6a:2b:a4:19:db:49:81:6c:b1:65:
ce:aa:c6:0f:8c:56:10:e8:92:d2:4c:cb:2e:10:2c:4c:31:32:
4f:31:69:85:2a:77:a3:70:24:e6:6b:13:c1:bd:01:3c:b1:c2:
b6:91:44:e3:e4:e6:e2:58:8c:56:39:cd:e4:05:65:fb:6c:95:
0f:01:a6:ff:a2:e0:ed:97:c4:0d:2a:9b:9a:4f:e9:b1:3f:07:
4e:ec:bc:31:f9:e2:f5:4f:18:e1:ab:b6:c9:f8:8c:e0:2f:66:
15:8d:a1:71:02:30:3b:b0:72:62:b6:31:e2:1e:3b:6f:a5:54:
6b:5b:48:90:3f:36:99:d4:13:cf:26:de:09:3f:da:3f:2a:b6:
3e:3e:0f:a0:8e:02:69:ed:8a:4f:51:9a:39:66:99:2e:e2:42:
32:74:52:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg3Lxci2PqVEl8IedhMGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjE2NDE4OWY3ZGI2MWU4YjYxZmRkYWU1NjIyYTBiMTM0
ZjVjMTYwHhcNMjYwOTI0MTMwMzIyWhcNMjYwOTI1MTMwMzIyWjAzMTEwLwYDVQQD
Eyg4MGJiZDg4ODQ5OTc0ZjU0N2ZiYTVlZWQ5NzBjYzAwZmU3ZmNkYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2wVWN9RJ8J9TXIiOmjnGTqEI4JJ
3P5UiucVeusgn56eoRIhYhwqknRMna9+8B9Kp94L1Ka7VA/zH3zEdasUhC4DFsTE
/7cWkqw9TvXGH8OFS//uLiUapn4eGqlu7oXmTJBhfqxjobPCCHk/lhRsi47ph5sZ
I4isA3mUDnGUx+fz4739b60OiGop+6VleyqiMiUL3uZZ8ipZ0mLLdbHkczYe1mbf
qj+nfTq0xvE6oQ/6BkOnH/pYX4QXFLVFk4mMAnAARc7oZbkbmCWWvdsFGofTevns
vJFVRmAA3c5Dq+GcOaKPeYa9rtslIqlZZ6Cou6ELVgdOI+ArERN85BIBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC72IhJl09Uf7pe7ZcMwA/n/NxoMB8GA1UdIwQY
MBaAFAaxZBiffbYei2H92uViKgsTT1wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYt
ZmJhNjRjMjNkM2RhLzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYtZmJhNjRjMjNkM2Rh
LzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+qvU9aB
V+UWZShMLhRvMWhHAVlUCoH63ENLrt+wLzcJIYCsa5zDg/OjsOAaHmPEfJ8F+Pcl
mSsGipaaXzT80+F1/fs/NCcNfNaYp+SXj5nNnc3iOmy7YnPZRuAILlwSwORqK6QZ
20mBbLFlzqrGD4xWEOiS0kzLLhAsTDEyTzFphSp3o3Ak5msTwb0BPLHCtpFE4+Tm
4liMVjnN5AVl+2yVDwGm/6Lg7ZfEDSqbmk/psT8HTuy8Mfni9U8Y4au2yfiM4C9m
FY2hcQIwO7ByYrYx4h47b6VUa1tIkD82mdQTzybeCT/aPyq2Pj4PoI4Cae2KT1Ga
OWaZLuJCMnRSbA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:37 2026 by rpki-client