Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: eAHtF3FXzzTZ+Wggp74ok0zJGhZIV0zSHv/CL4fru9I=
Subject key identifier: 50:8B:EC:60:9A:2C:F8:3F:7D:5E:9C:3A:1D:B8:A9:7B:78:7B:DC:A7
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 019D26963DDC8BA68B24933A30F35CF564E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 11BA
Signing time: Wed 25 Mar 2026 20:01:13 +0000
Manifest this update: Wed 25 Mar 2026 20:01:13 +0000
Manifest next update: Thu 26 Mar 2026 20:01:13 +0000
Files and hashes: 1: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: OoqQ+8fYnpLu14hJWuaHR0UN8XsFL8e35gdZyFgQOIs=)
2: ro3FcV_gSDQj6aKpD7QqUfZTKo4.roa (hash: ifg6Pv5RJOrKerf3tvB3sx7q9buzQmUPSyqAwJuLAQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3d:dc:8b:a6:8b:24:93:3a:30:f3:5c:f5:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Mar 25 20:01:13 2026 GMT
Not After : Mar 26 20:01:13 2026 GMT
Subject: CN=508bec609a2cf83f7d5e9c3a1db8a97b787bdca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:91:cc:62:b2:54:cc:42:10:d8:59:e8:a3:
2b:0d:69:41:ef:54:12:24:29:60:49:f0:59:f5:6d:
95:e5:d5:e4:5e:89:40:72:0f:da:68:14:6b:2b:21:
3d:e3:b4:43:cd:25:ff:f2:40:fa:22:e9:32:d0:3c:
7a:76:9c:7f:47:6f:4a:16:80:c5:34:35:26:ad:54:
1b:f9:0b:0d:45:0d:72:1b:ef:57:08:74:02:57:1b:
a8:99:2c:91:16:49:02:d5:bb:43:33:c9:2e:ec:0f:
07:f8:3f:c7:bb:c9:54:ba:42:a8:df:b7:1e:47:d8:
80:51:94:54:76:5d:fc:a3:4e:c8:3a:bd:47:8d:19:
9d:91:82:a1:bc:06:6a:a8:0c:9f:62:cc:94:34:d9:
60:13:54:74:40:51:5d:1f:a0:4e:f7:ae:98:d7:82:
03:15:65:e7:bd:d8:02:69:e2:0a:01:7f:62:1e:4f:
db:8f:23:b9:90:b8:5f:26:a3:01:28:17:59:65:22:
36:27:fb:60:f3:0e:04:dc:da:96:bc:00:f1:3e:7d:
1d:99:d9:74:92:32:5b:e6:0e:37:03:52:23:63:4f:
e7:60:d9:69:d3:4e:ff:cd:f1:40:10:84:16:1d:cc:
e2:5f:65:70:d7:d3:8a:3b:6b:19:42:48:f4:a4:3a:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:EC:60:9A:2C:F8:3F:7D:5E:9C:3A:1D:B8:A9:7B:78:7B:DC:A7
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:63:62:ca:26:78:e9:b4:bb:3e:3c:43:8c:d8:0f:7c:2f:51:
11:f9:43:8f:48:a0:2e:6b:be:3f:bf:99:5b:b9:75:e5:19:79:
df:ac:12:03:3b:c2:e8:f8:f7:b7:4e:c1:fc:ce:d5:98:77:1d:
2e:c1:58:7b:61:e5:48:47:79:22:5e:bd:c4:6b:82:42:2e:9f:
d5:9c:55:08:9e:7f:7f:13:8c:1d:bf:3c:9e:38:53:83:c6:0e:
91:a5:97:af:f6:63:18:85:7d:8f:af:53:7d:65:fb:1f:9f:fe:
2d:62:fc:9b:23:fa:97:7e:8f:cf:9c:f9:15:7a:2a:cf:4b:db:
30:a0:ec:b9:e9:24:67:a0:6a:a8:9c:0c:44:20:0e:b7:ba:a2:
bf:4a:90:8b:89:6a:cc:30:8a:32:bc:2f:1b:d7:97:ed:fe:8b:
24:c5:cf:92:15:db:80:82:0b:be:57:52:0d:86:85:b0:34:ee:
52:14:64:a8:ad:18:61:fa:27:7b:f4:4b:40:e4:8c:f8:99:6a:
23:99:25:a5:e0:3c:c1:55:5d:2b:5a:52:e6:50:fe:97:1c:50:
dd:77:17:8b:70:da:37:0c:9f:e3:a5:88:d9:28:95:b1:95:20:
f7:4d:6a:23:25:b7:f3:fa:cc:80:47:06:21:06:d8:c4:b5:26:
69:e5:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:21 2026 by rpki-client