Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: CeRQUvEmhRuaKa82U1iFQcZijh8l5bJo3z4Uj/xtTdQ=
Subject key identifier: B8:E7:DF:B6:B3:F3:5F:6E:AC:C0:38:81:4B:0D:CE:30:EF:DD:F8:07
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019E1FEC8C4A2D19A9CA9A4472047AAF1BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0EB8
Signing time: Wed 13 May 2026 06:00:56 +0000
Manifest this update: Wed 13 May 2026 06:00:56 +0000
Manifest next update: Thu 14 May 2026 06:00:56 +0000
Files and hashes: 1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: Pt/FqBPdFmfsq47nHgY24/9At167uc1/qyze/Q6lN0c=)
2: fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (hash: OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:8c:4a:2d:19:a9:ca:9a:44:72:04:7a:af:1b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: May 13 06:00:56 2026 GMT
Not After : May 14 06:00:56 2026 GMT
Subject: CN=b8e7dfb6b3f35f6eacc038814b0dce30efddf807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:14:b3:87:39:04:cc:c5:f5:df:4f:e0:b6:
d8:90:a3:61:a3:a5:d1:33:36:fe:51:ed:4c:b0:e9:
59:c0:4b:ec:4a:aa:23:98:36:62:fa:35:c0:1e:07:
2d:01:5e:8f:31:76:da:de:77:b3:0b:30:eb:fa:9a:
15:68:65:e2:c2:f7:72:c3:e2:63:9a:5d:0a:f8:ee:
f8:8d:4a:e6:b8:55:6d:b8:58:25:b2:21:76:6d:de:
05:f2:fe:a1:7c:2f:81:71:0a:56:58:6f:9e:f5:c1:
1c:3d:3f:de:cc:9d:45:a1:18:66:a6:47:8d:04:58:
89:6a:7e:2b:48:78:a1:08:4f:ea:5e:24:1c:27:f1:
44:e9:94:69:2d:58:0e:d9:ba:d9:7f:8a:58:21:8f:
0c:c7:8f:12:3f:68:1a:82:83:f8:66:0c:32:5a:ab:
52:23:86:48:08:df:e5:82:9b:bd:7f:95:97:e8:80:
0d:dd:9f:e1:f8:69:f6:1c:8f:ea:0b:b5:47:fe:a8:
51:98:9e:b9:09:52:52:ae:54:4d:49:a7:18:73:9f:
38:c3:d7:d9:cb:59:8c:d5:1e:3e:13:79:03:fc:37:
c4:04:c1:86:4d:5a:71:45:d1:62:68:fe:2b:9d:b3:
2e:e6:70:dc:03:af:d5:7f:a2:7d:d9:5c:d0:56:77:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:DF:B6:B3:F3:5F:6E:AC:C0:38:81:4B:0D:CE:30:EF:DD:F8:07
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:07:f4:d8:8e:10:fa:fe:54:5c:70:71:dc:93:cf:bd:e0:
49:43:9a:bf:47:ee:8c:4a:3f:df:aa:c6:93:07:19:a7:e7:60:
0e:60:8d:e4:76:7e:85:46:8d:c2:33:fd:43:d4:44:a2:e8:f8:
12:f2:80:be:3e:97:a0:d9:21:67:01:0c:40:0f:1d:cb:6b:ea:
61:5e:49:4e:81:e8:e3:58:ec:8e:6b:2a:33:8e:df:04:bf:0e:
d9:ae:86:f8:4f:41:c2:28:31:4e:3e:ee:b1:5f:b4:e5:17:c4:
7d:96:83:e1:f1:93:50:ba:44:43:13:0c:46:8a:22:da:aa:dd:
05:57:90:86:73:50:73:49:ed:3d:08:29:4a:9c:1a:d8:9f:ec:
f1:b1:9a:a3:c3:31:d3:de:a4:a6:1e:30:d1:77:95:23:14:7f:
56:ff:25:d4:c9:74:87:5a:eb:7c:b0:ce:35:fb:af:8d:a8:cd:
ec:28:69:53:b0:6a:f5:f1:6e:fe:f2:11:ef:7d:b1:e5:f6:94:
b2:a6:af:0e:d0:5c:2c:24:1a:7b:d6:8d:5b:b9:fc:4e:aa:f5:
e0:d6:22:fb:94:a4:b2:ca:0f:f8:e9:29:09:e4:04:21:a3:f6:
61:db:cf:c9:91:e9:d8:46:bf:2f:24:82:49:8a:09:41:28:70:
f2:ae:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:56 2026 by rpki-client