Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: dmlcEC6BTnQqaFxPoVxariLCVzvJzhVFMtgNMwG0VQI=
Subject key identifier: 6B:A1:B6:A6:97:28:F3:45:3D:38:A8:19:62:94:A7:0A:BF:DC:AE:46
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 019D2A04AEFF632D616E911F47DC17A1577C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0F5D
Signing time: Thu 26 Mar 2026 12:00:43 +0000
Manifest this update: Thu 26 Mar 2026 12:00:43 +0000
Manifest next update: Fri 27 Mar 2026 12:00:43 +0000
Files and hashes: 1: 69rAqslmUNQ4jxhqRukN3nUhlgk.roa (hash: IDmbzyv/bIKti6JCgd65/6aVCqu//LwD+RovZywUSK8=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: PoFRB6kR+sZ5BmqRE9+4BwODqSzTsm5cLlMhHhhY+ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ae:ff:63:2d:61:6e:91:1f:47:dc:17:a1:57:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Mar 26 12:00:43 2026 GMT
Not After : Mar 27 12:00:43 2026 GMT
Subject: CN=6ba1b6a69728f3453d38a8196294a70abfdcae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:3a:82:e8:f2:53:55:68:eb:e8:12:46:f7:
e9:f4:af:a9:00:6b:13:9f:46:1d:94:0f:66:aa:d3:
6d:e2:9a:f9:d6:d4:19:51:3c:38:0d:c1:cc:b3:b0:
01:43:f9:19:0b:1b:71:bd:bf:1f:01:29:57:af:ba:
79:71:3d:92:6d:9d:94:66:aa:19:17:1c:6d:2b:80:
9c:96:8c:70:74:c0:29:fe:84:fe:a6:f5:6e:d4:84:
80:74:ca:5f:41:69:2b:ba:dc:15:99:d9:e0:b2:59:
5f:b7:c8:f4:2b:0a:04:6f:06:ab:6e:e6:cb:e4:cf:
ec:33:1e:95:1c:47:44:9e:1a:4d:b7:1c:57:98:17:
c4:60:a7:15:ec:a9:77:bf:35:e6:f0:31:19:5e:71:
8a:80:ce:fe:f5:a4:ff:48:31:95:9d:af:6b:b8:82:
4b:b9:21:a1:be:77:58:a0:aa:40:18:87:39:a5:c7:
ed:78:de:4c:1f:0b:6f:9b:67:8b:f3:a3:19:01:cc:
2c:60:b7:d4:70:0d:54:dc:db:eb:3d:1a:03:93:7e:
55:58:e1:45:47:14:a9:1b:7d:6d:41:03:36:0b:84:
f2:38:dd:34:70:9a:5e:46:98:c8:28:18:70:ec:99:
0d:e7:3f:ae:2e:f5:11:e6:1f:45:38:6f:35:fe:7d:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:B6:A6:97:28:F3:45:3D:38:A8:19:62:94:A7:0A:BF:DC:AE:46
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:be:db:06:25:ea:ae:d7:bd:7a:42:cd:52:8b:50:ab:7b:
c6:ab:f4:7e:52:83:cf:73:99:03:25:64:38:06:9b:ab:3c:b9:
eb:07:b4:d8:e1:3e:ff:37:c2:2a:d1:df:a8:c3:d0:f6:34:8d:
fa:44:6b:b9:1b:44:7e:2e:80:84:d8:2f:f2:ea:fe:b8:dd:fb:
85:29:de:67:4c:8d:7f:b0:e5:49:29:c4:03:39:96:3a:2f:d3:
a5:83:96:2d:35:6b:15:40:45:f1:ff:3d:d5:67:ea:a4:22:a0:
53:e2:f9:f3:45:9f:8c:c2:30:a0:e6:bd:fb:54:2a:1f:6c:66:
cf:bf:6a:21:ec:b1:9c:e0:78:b0:5b:4a:74:01:b7:8c:97:9a:
81:b5:79:94:2c:61:80:99:d1:6d:c9:5d:1f:69:bd:29:0c:85:
5f:31:07:88:b4:47:18:16:8b:e3:33:d0:38:85:49:11:87:fd:
2e:0b:fb:81:2f:68:ad:d6:84:25:1a:e0:b0:7b:4d:a6:d8:d6:
ea:96:8e:70:db:f3:c4:66:8d:fe:73:e1:06:3f:96:b9:96:5d:
b6:db:28:f2:a3:3f:2c:08:d2:d4:67:f4:9e:f0:02:75:01:30:
27:49:2e:e7:43:b7:22:1f:c2:f3:6b:49:93:b4:46:5d:94:a7:
d7:5a:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:04:17 2026 by rpki-client