Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: YCdfxdxW8OkW5tjJGV8Iz6aAAx0AFTPP309Cmzi4Q5M=
Subject key identifier: 84:8A:64:5E:1D:B4:11:B9:13:28:15:4F:2F:FC:17:AD:A9:CC:E5:87
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019FAA50894C86EF729EB3E8D793DD3BA705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 142C
Signing time: Tue 28 Jul 2026 20:00:32 +0000
Manifest this update: Tue 28 Jul 2026 20:00:32 +0000
Manifest next update: Wed 29 Jul 2026 20:00:32 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: sr4hRCDm6sEdqquINrmCMQDgLkkrc+7djtBsIHmqdnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:89:4c:86:ef:72:9e:b3:e8:d7:93:dd:3b:a7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Jul 28 20:00:32 2026 GMT
Not After : Jul 29 20:00:32 2026 GMT
Subject: CN=848a645e1db411b91328154f2ffc17ada9cce587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:a0:2a:89:1c:e1:fe:15:20:0b:4e:a1:81:
5e:d4:0c:18:12:d9:4f:1c:40:23:00:9c:ee:8b:42:
9b:3d:4a:0e:e7:1c:ad:4d:36:45:03:cb:8c:d3:5f:
bb:fe:1f:d1:28:43:ce:b4:78:d5:e7:85:27:a6:86:
08:9a:f9:de:80:27:ee:52:27:ca:dd:58:fa:fe:4e:
b3:c9:c7:75:a4:55:02:df:21:93:2b:f6:24:e0:d9:
82:4b:38:91:43:15:5e:9a:57:2a:42:aa:2e:c7:b7:
dd:ac:63:14:ed:13:af:ed:43:93:6e:5b:54:12:f1:
f5:79:7a:a7:dd:08:7a:28:c5:ab:28:a9:39:d4:4b:
2e:14:61:63:28:41:98:63:e7:19:9f:97:f5:1c:f0:
32:8d:dc:f7:d2:b7:8c:9e:47:50:ad:de:98:13:a8:
13:dc:0a:08:df:cf:77:47:6f:fc:85:89:f4:8a:06:
d9:b3:b4:70:8c:b2:bd:65:7f:bb:05:a3:cc:f4:27:
8f:85:fe:cc:59:76:19:4c:7b:28:0c:f4:ec:6d:c2:
73:87:19:6a:4d:65:94:da:bc:2d:45:86:f7:d5:58:
87:95:63:f9:9b:fa:37:8e:cd:c3:09:8d:fe:19:8a:
0e:8d:0e:a1:68:01:86:b4:6a:20:86:28:e0:17:1b:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:64:5E:1D:B4:11:B9:13:28:15:4F:2F:FC:17:AD:A9:CC:E5:87
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:33:f5:e0:3a:46:00:c9:d3:fd:00:ad:3e:72:b9:fc:36:99:
70:12:b8:da:7b:2a:8c:1d:de:3c:54:4d:cf:f3:6b:d2:57:98:
80:89:d8:d7:d1:3c:20:7a:1a:19:62:96:72:81:e3:9b:5e:28:
c7:d8:d2:01:22:ff:39:ff:88:62:ab:d4:84:e3:8b:0b:37:c7:
8c:af:ba:9f:a5:e0:0d:87:b5:85:f6:ce:95:22:e1:1b:1f:b5:
1f:eb:5b:b7:a3:62:d2:b8:11:40:26:5c:36:6e:c2:3e:42:93:
e1:8c:23:9f:33:ad:64:a9:1f:eb:c3:75:0a:bf:82:15:0e:c0:
24:67:3c:46:19:d7:36:52:1c:ab:fa:0b:6e:84:bb:22:59:ca:
53:3e:a7:3b:02:1f:b7:19:01:48:4d:ad:bf:a8:18:85:69:34:
a8:54:f6:32:fa:68:9e:18:c0:34:63:a0:19:e8:9a:09:97:85:
9c:1b:87:30:1f:5b:e5:26:b9:f5:9c:3a:f4:1b:2b:9f:c6:76:
9f:f4:0a:c0:b3:5b:58:63:07:09:6e:be:3c:bf:bf:ec:df:5e:
9c:a8:b9:10:c5:0a:e1:68:dc:13:c0:54:0d:00:04:3f:ba:0b:
08:37:5f:70:b7:42:09:4e:e2:1e:e2:dd:2c:1e:cf:fa:44:96:
93:b2:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:33 2026 by rpki-client