Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: dn+xKEN2AFC6g3dKr2XnJ6O49dwbAasvwyx0LBW1LHg=
Subject key identifier: 98:5D:20:AB:48:59:0D:15:33:B9:AD:D9:F5:B7:B1:AD:BE:36:27:60
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019EBEECEB14E29E593418FD9F7B5B04FAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 062B
Signing time: Sat 13 Jun 2026 03:00:58 +0000
Manifest this update: Sat 13 Jun 2026 03:00:58 +0000
Manifest next update: Sun 14 Jun 2026 03:00:58 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: dxbvfO/cMuMVdMwfaIFoNw5NaKK49FKaUtl5os+Ekps=)
2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:eb:14:e2:9e:59:34:18:fd:9f:7b:5b:04:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Jun 13 03:00:58 2026 GMT
Not After : Jun 14 03:00:58 2026 GMT
Subject: CN=985d20ab48590d1533b9add9f5b7b1adbe362760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:e8:7b:6f:06:52:9d:31:54:ee:f7:41:f6:
5a:72:19:26:33:71:df:a9:a0:f7:15:ad:d1:bc:ad:
1e:d1:65:5b:0e:eb:63:01:64:3f:6a:c3:6e:74:cd:
5a:dc:3f:7b:1e:b2:fa:ec:71:68:4c:23:09:a7:07:
d9:d1:bb:e2:eb:d3:10:07:f8:53:06:cc:3e:d0:68:
c4:94:e6:72:c8:2d:28:c3:ef:81:52:77:08:8f:ef:
4b:1b:7c:f3:94:a8:4d:9f:c2:ee:7a:c7:2c:bf:f8:
ce:bb:2d:1f:19:ed:e1:f0:13:db:65:99:7f:fa:40:
54:d0:cb:8d:59:b6:dc:98:c0:b2:c8:53:d6:0f:90:
71:52:9f:46:77:be:98:80:72:f6:00:c8:27:12:27:
9b:c4:18:2d:de:cf:5b:0a:4d:25:89:6c:9d:04:2f:
3c:3d:53:f5:bd:71:75:a2:78:14:90:0b:3c:6a:02:
15:7a:9d:69:ac:48:11:09:df:10:12:2b:0e:7f:d1:
85:75:b8:c9:f2:0c:e8:3b:2e:4b:7a:dd:ed:8f:c9:
e6:5b:44:fc:8c:0b:ee:39:c8:01:18:a6:2e:89:3b:
19:a8:7a:df:cd:60:1c:6a:36:14:c9:20:5b:dc:12:
e5:e4:e0:85:3c:cf:9d:b8:a8:b0:6c:ac:6e:25:89:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:20:AB:48:59:0D:15:33:B9:AD:D9:F5:B7:B1:AD:BE:36:27:60
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:76:58:c2:77:b9:ad:ec:d2:e7:31:52:fe:8f:3e:73:22:89:
00:7e:08:a0:8c:15:67:d1:5c:66:c3:0e:26:1e:6d:23:a3:05:
53:7f:18:d8:d3:b4:5b:26:b6:25:b8:fa:db:5b:5b:94:a1:9e:
5a:da:62:2a:07:35:aa:2c:e1:64:c6:a3:95:18:46:a4:df:58:
2b:70:49:2f:1a:d1:80:a5:aa:3b:48:0b:0b:d6:14:93:a7:75:
a4:1b:65:dd:dc:f7:1d:b8:ea:e4:e4:2b:f7:b3:4a:02:d1:17:
ce:27:7a:4e:7a:04:76:97:14:ad:90:9d:6a:15:79:8d:88:7b:
6b:8d:bc:ee:7f:b7:0c:3c:46:db:fd:d1:6b:3b:3e:ad:e3:35:
51:69:39:1c:ee:73:26:00:e8:fc:b2:1a:d5:80:50:e1:2e:f8:
ae:02:1c:a5:77:3f:26:9a:b5:15:94:32:a5:ce:75:5d:43:36:
ae:9a:8b:de:54:80:b2:ef:54:e7:59:53:ca:3a:e7:8a:5c:23:
ba:99:93:6c:71:08:74:fb:fb:8c:e5:5a:8e:81:81:10:44:a0:
08:19:cf:ea:2b:92:a9:84:23:1c:c0:fa:94:6d:45:d0:e1:27:
e2:00:07:56:07:12:2c:ab:67:49:e1:ce:5b:2a:f5:67:c6:ef:
a9:ef:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:53 2026 by rpki-client