Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: WGiLm4TOMUHPkg2sfy+cujGjy+9JV3C1j+4fztqJ9Nk=
Subject key identifier: 01:E7:B9:A1:D9:47:F1:55:C3:06:6F:31:F0:CF:41:35:92:2B:D3:E0
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019CA9B3EA5E99D8D301F5F8257AC8C2E531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 129E
Signing time: Sun 01 Mar 2026 14:01:06 +0000
Manifest this update: Sun 01 Mar 2026 14:01:06 +0000
Manifest next update: Mon 02 Mar 2026 14:01:06 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: P71unumB9nYH6TQeNFiFX0r4WSSCH0PqRevbroHMD+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:ea:5e:99:d8:d3:01:f5:f8:25:7a:c8:c2:e5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Mar 1 14:01:06 2026 GMT
Not After : Mar 2 14:01:06 2026 GMT
Subject: CN=01e7b9a1d947f155c3066f31f0cf4135922bd3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:f9:a6:04:db:1a:a5:0d:da:87:62:13:fa:
e3:92:67:31:02:1a:25:36:64:6d:55:15:07:bc:06:
da:43:76:f9:2b:08:16:71:9d:aa:21:d9:d0:d0:99:
be:3f:dd:69:44:f3:fc:8a:22:21:e2:65:84:08:f3:
d5:ef:b5:b5:e8:a2:25:b7:a9:fb:c6:4e:c4:95:ac:
86:4d:b4:03:3f:0f:10:2e:59:d3:ca:c3:7d:06:89:
7d:c8:52:e7:f8:ca:44:f1:12:77:d1:b8:56:85:8f:
74:f1:91:8b:91:4b:78:9d:f6:61:5b:8b:a5:db:e2:
0c:af:b0:82:1f:b1:85:ce:fc:12:d1:10:b3:70:69:
a1:a5:07:36:ae:b4:46:55:9b:ee:29:84:8b:55:28:
ad:76:50:4e:7d:de:54:72:bd:9f:d8:4f:3c:a3:78:
50:23:7f:1b:65:09:bb:32:46:42:92:d5:29:64:48:
80:bc:97:68:ca:5c:66:08:d2:92:b6:03:db:89:21:
66:2e:a0:9a:49:7a:8e:79:c9:54:1b:96:29:be:45:
bf:91:a9:c2:fc:4d:3e:c9:ca:1e:e4:e7:d1:9e:48:
22:af:c4:d8:37:e0:6d:e7:f1:9c:9f:19:22:28:f2:
64:47:d1:3c:31:05:cd:e0:33:21:8e:41:8d:9f:58:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E7:B9:A1:D9:47:F1:55:C3:06:6F:31:F0:CF:41:35:92:2B:D3:E0
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:61:5f:ad:1f:e5:c7:3b:a3:87:99:a5:17:4e:b5:7b:36:
4c:61:ab:be:38:ed:b0:81:65:86:2e:ae:95:6f:1c:27:d8:01:
45:c5:cd:45:7d:2c:39:96:3e:f6:db:de:f6:bc:dd:c6:f3:f0:
48:35:10:cb:94:59:f0:5b:88:fe:6d:da:77:3e:5d:e3:c3:12:
49:08:1c:c0:28:f7:1a:8b:24:91:e0:59:7c:e7:c1:6d:55:94:
82:c1:e6:f1:69:c0:77:09:45:b4:a5:8f:96:5e:6a:c6:69:34:
87:4a:a5:29:e1:a5:05:f5:3f:ca:1d:e5:b6:85:01:aa:9b:66:
2e:33:ee:81:a6:aa:01:6d:61:e5:fb:cc:34:17:62:9c:0b:04:
28:94:00:49:0c:ed:a7:a8:34:ce:95:c9:e3:39:64:4d:f0:04:
7e:52:0e:d3:2e:70:e9:72:e0:62:c1:cf:ee:af:02:d4:c4:5c:
f2:36:d7:d5:1a:08:03:ef:b2:67:99:66:a7:95:9b:76:a0:4d:
f9:d7:dd:b7:83:bf:62:75:28:b6:65:34:5e:3d:82:28:b0:00:
68:5a:1e:d7:a6:e9:6d:30:f5:ab:e6:1b:7f:31:cf:7a:9e:de:
0a:57:2f:b1:56:ba:9c:3f:9e:bd:e9:3c:71:dd:a4:dc:1a:a4:
b4:b1:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:49 2026 by rpki-client