Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: imjAIt0LYZsyWx+mqWCac/mPV3XcwiufCz0jbXV5JHA=
Subject key identifier: B8:91:7D:57:78:49:A8:4C:7F:EC:20:EF:E0:95:C6:FB:72:C2:39:25
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019CABD931C1A00AD3F01E9440D370DEA371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 0518
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: FBzo45oocqMQMWfgJw0xwASr0sMMYQWeyccdMykCTA8=)
2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:31:c1:a0:0a:d3:f0:1e:94:40:d3:70:de:a3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=b8917d577849a84c7fec20efe095c6fb72c23925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:d5:ea:fa:3c:6b:1d:3d:fb:b2:fd:3f:96:
13:0b:e5:da:a3:82:10:23:1b:98:97:78:2b:ff:b4:
43:37:70:16:9e:58:f9:88:ad:60:a4:32:9a:8d:59:
55:45:cd:76:f4:6f:ce:2a:86:61:1a:1b:6e:bd:b2:
39:93:fc:f6:3e:5b:5a:fa:b5:83:5d:7d:8c:3b:27:
4a:93:73:fd:2a:0f:65:59:ff:7f:e9:62:98:2c:34:
f1:12:a6:fa:3e:34:30:94:87:aa:4e:5f:55:9f:fb:
6d:d5:a9:92:05:9d:45:c4:7b:18:fa:7a:e2:23:b9:
5a:a2:38:4e:b5:87:f4:e9:ef:d6:05:75:43:4c:af:
a8:18:e5:a5:4e:a9:84:1b:47:64:b0:63:c7:ac:bc:
da:e4:df:f9:ed:3f:78:2a:38:c5:fd:24:56:6d:b9:
17:3d:97:c5:32:f1:0b:7c:66:db:b7:a5:e8:91:6e:
43:4e:5e:2f:74:56:0a:ee:00:c3:90:19:91:8a:5f:
8f:dc:fe:98:4b:43:cf:42:bc:64:2c:89:79:83:bd:
c3:98:c9:50:5d:74:6e:ea:18:00:07:59:3a:c1:f4:
6e:e8:74:fa:df:1a:81:f4:32:0e:15:78:d3:7a:a1:
d9:cc:c5:18:42:6f:b0:ea:12:86:88:96:f1:21:7a:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:91:7D:57:78:49:A8:4C:7F:EC:20:EF:E0:95:C6:FB:72:C2:39:25
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e3:ef:48:c7:e0:12:fe:7e:97:7b:dd:76:bf:3a:10:35:fc:
b1:79:3d:42:d9:a6:77:2d:f9:16:89:bc:78:e9:fa:d9:77:e5:
4c:05:b1:1b:aa:60:04:e2:da:52:97:35:31:45:28:26:fe:fe:
f8:7b:ee:ed:3e:ff:54:9e:a0:a7:1b:8d:49:95:a7:30:0b:c0:
db:10:e0:91:53:33:03:83:4d:b6:4a:24:05:8d:82:a9:60:63:
e1:fe:46:56:3d:2a:47:1e:f3:12:6a:96:50:a9:1c:72:d2:8c:
ff:6e:d0:ec:7c:b0:14:d4:a6:5e:0f:bb:5d:98:96:71:5d:77:
31:d6:dd:10:18:45:6b:f2:bc:26:9c:79:22:a6:cb:34:51:21:
f8:76:f1:f3:b9:12:30:a9:24:08:6b:3a:99:9d:85:02:1c:93:
19:04:a6:fe:50:93:d6:2d:33:69:4f:5e:1b:f0:6b:8f:79:d6:
49:71:fb:a5:4a:1e:6b:e1:a7:46:9b:c9:a7:71:33:cd:a8:eb:
81:90:18:62:df:b6:f0:83:06:59:4d:f7:58:9e:31:bb:80:f0:
58:c5:b2:48:60:27:27:ef:bf:79:cc:3e:f1:ac:20:76:be:3e:
2f:7b:d3:91:ed:a9:43:78:20:60:d4:aa:5c:07:2c:4a:b2:48:
65:a4:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:20 2026 by rpki-client