Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: j1lhnp46lXJKYg0vB1zjlBQZMiYA4pNUTXU8YWqiFO0=
Subject key identifier: A5:8B:21:8C:C7:94:49:66:8E:45:C4:FD:5C:7E:0C:A6:7D:A3:BC:0A
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 019D28F33300C2872DD27F48C4019103711B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 096B
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: DlHMCgoQJq23tOnGoGY3f2Z8k9S0UXTzb+xbFkrjWRM=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:33:00:c2:87:2d:d2:7f:48:c4:01:91:03:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=a58b218cc79449668e45c4fd5c7e0ca67da3bc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:e3:f4:36:66:1f:5a:c0:87:9e:36:af:d3:
3f:06:60:f9:15:95:12:7a:fb:3b:dc:d7:b5:de:12:
b7:d8:ea:bb:5e:84:b5:20:78:c4:e5:80:9d:b8:c6:
7a:74:45:61:cf:99:bf:7f:47:5f:c8:d6:9d:f4:3c:
12:9f:3f:6a:69:51:7c:13:ee:4d:d6:51:ee:a9:da:
74:5f:f4:7c:73:83:52:a4:64:31:32:14:83:72:d9:
f2:0a:b7:ec:12:5c:a9:0d:7c:5f:5e:c8:88:ef:02:
c8:de:e7:64:f1:3b:55:d9:3b:10:e3:cc:5a:80:6b:
14:3d:ef:80:42:e9:ad:18:57:71:56:67:8c:a2:e0:
f1:f1:c1:1a:9b:37:6b:cf:bd:d2:c7:f0:f8:e1:4f:
d4:99:98:89:d6:4b:b4:6b:13:d0:4b:fd:0f:2a:81:
55:86:b4:1d:85:da:74:f7:de:d1:bc:bd:0a:e8:dd:
dc:70:10:97:af:6e:c4:63:83:bf:d2:65:1e:1c:be:
09:da:a4:79:78:95:d2:50:0e:2e:0d:b3:56:7c:1d:
84:6f:80:0d:32:42:47:e7:81:7b:1a:b7:0b:7f:0d:
7f:39:77:53:3d:20:3e:3a:5e:49:60:40:25:ad:fe:
ff:f5:ea:b8:a5:92:46:7a:03:12:6c:08:0b:0e:ff:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:21:8C:C7:94:49:66:8E:45:C4:FD:5C:7E:0C:A6:7D:A3:BC:0A
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:91:30:b6:24:5b:9c:e6:d5:15:88:b1:0a:0f:15:7f:0e:
8e:87:5f:87:ac:06:0d:49:9f:12:7d:15:6f:a2:cd:e3:a4:47:
b1:f6:69:5c:f4:72:48:f7:93:f3:b1:0c:d1:8d:49:83:e8:dc:
d6:fe:da:5d:e7:ed:ed:00:f6:ca:6c:38:49:91:c2:50:c2:19:
a6:3d:35:67:f3:98:25:49:52:f4:78:4d:47:70:81:a8:79:f9:
98:9a:f2:9e:68:39:cd:ed:16:6d:5f:f6:9d:93:9c:cb:8c:ff:
c0:89:fe:af:c0:9d:74:10:b2:5f:3b:16:bb:cc:d0:de:da:22:
2e:d9:a4:79:b7:f4:d6:ba:92:cb:cf:8e:3c:c7:a5:33:df:2c:
9f:ca:1c:5f:d9:2c:23:3b:60:0b:71:f5:eb:f7:3c:4d:01:df:
4a:da:59:1f:21:3a:90:21:3a:f3:a0:a5:24:fc:c9:96:ba:34:
25:09:55:f7:5f:1b:d5:9d:b7:6d:c1:73:54:f8:5f:a9:7e:9b:
29:9a:80:36:af:cf:51:6d:69:fa:ef:ad:ef:c7:91:f4:74:7f:
cc:0e:6a:ba:03:0d:db:ee:f6:17:a0:19:75:13:f9:b4:e4:b3:
3b:0e:d8:e3:dc:ed:b8:d8:20:39:23:19:91:ae:20:a8:e6:33:
37:9a:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:55 2026 by rpki-client