Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: bTSTDqnQmq5Oakd/Qc5GmKXb47W4aZfEmmzTOrrWjDU=
Subject key identifier: 71:03:10:DF:60:40:B2:69:D4:39:34:84:69:A9:15:94:22:C0:7D:19
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019EBEB5D10B5CF4E194B86602C0530DE4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 13B2
Signing time: Sat 13 Jun 2026 02:00:47 +0000
Manifest this update: Sat 13 Jun 2026 02:00:47 +0000
Manifest next update: Sun 14 Jun 2026 02:00:47 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: JRy3ceEqGQ67IlUDgLpe1+OtaGPixeoSh6Sv9A2TLpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:d1:0b:5c:f4:e1:94:b8:66:02:c0:53:0d:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Jun 13 02:00:47 2026 GMT
Not After : Jun 14 02:00:47 2026 GMT
Subject: CN=710310df6040b269d439348469a9159422c07d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:84:58:e0:d3:d6:b7:ad:29:f2:ee:7d:8f:
d7:56:ce:d1:83:4b:c6:c7:ea:bd:40:6c:2d:b6:74:
a3:2c:36:c1:df:29:cd:5f:b2:3d:11:96:7b:5f:b1:
34:f8:63:7d:7e:93:e7:29:a9:3f:42:1d:a3:a3:49:
8b:5b:c2:ea:8d:31:8f:ab:2d:c1:94:88:7e:b7:fa:
53:07:55:8c:c9:5f:97:49:16:0c:ec:0a:a5:bd:b1:
96:68:79:19:c1:06:fd:36:66:9b:23:f7:be:75:27:
db:08:01:6a:be:52:d2:3a:df:4d:31:ae:18:d4:67:
14:20:4a:02:4c:64:f1:df:00:6d:ce:67:bc:3e:16:
67:5e:fa:7d:09:f1:27:f0:8b:c2:66:c3:2e:3e:b2:
1a:34:67:4c:9e:68:3f:76:9b:bf:7a:3d:32:d6:64:
eb:6c:16:3d:d2:30:86:db:09:44:91:52:a7:9c:dc:
7b:31:43:54:fb:2c:c7:9d:f3:b6:54:7a:ab:cf:25:
e8:33:81:86:2c:19:e4:95:e1:44:43:a9:9b:9e:81:
5d:9a:62:72:66:0e:f3:ae:cc:0a:bb:43:4e:9d:f5:
a3:4d:0d:22:aa:25:51:73:28:6d:7b:af:64:0c:e4:
81:52:1f:53:d5:44:87:3f:b8:b5:84:80:cd:49:5d:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:10:DF:60:40:B2:69:D4:39:34:84:69:A9:15:94:22:C0:7D:19
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:9d:c0:b3:9e:69:65:fb:9f:fc:8c:cc:25:e7:10:95:e2:
99:94:30:9a:64:c6:65:71:95:77:21:a8:4e:bc:e4:bc:e0:2e:
a7:4e:fb:0a:ee:9d:a1:48:63:5f:b3:e3:73:e2:14:a1:a7:d7:
4b:ee:31:de:50:be:f9:d8:30:95:9f:17:d1:26:7f:bc:e6:3e:
82:26:ef:09:72:86:39:dd:06:d3:6e:e1:80:33:d1:48:3c:c1:
37:51:5c:c6:eb:0d:20:1a:52:01:6a:80:c8:40:a7:5d:5b:e1:
52:3d:d0:b9:86:0f:79:2d:9f:14:50:4f:f6:1d:bf:6c:65:5c:
15:dd:8c:90:7c:cd:42:10:dc:ab:27:7f:e4:bd:cb:7f:ea:80:
f8:13:5e:81:dd:0a:c1:0d:b7:e5:29:95:4f:a7:26:19:56:d0:
60:35:26:56:d9:79:45:0f:de:e2:fc:f9:30:21:cf:c7:e7:5a:
d6:84:86:f2:b7:39:04:f6:58:3a:3d:e5:04:11:df:03:47:51:
9f:41:91:bb:02:37:17:f9:f3:2d:b6:9d:65:8f:27:f0:1c:68:
72:88:da:75:cd:ba:6e:c9:3b:fa:64:b3:e5:0f:55:23:fe:17:
1b:68:2b:56:3c:6a:85:d8:4f:18:1d:9c:a9:91:10:d8:b8:e1:
25:d6:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:59 2026 by rpki-client