Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: 74/cFEQmSJDBrv7ywp6XG6IHluaOrkIAorSsdtRTFTU=
Subject key identifier: 7B:F8:1F:5B:5E:A7:FD:DD:F7:C3:DC:47:5A:39:C7:A8:EC:C8:E6:DF
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01A1C1417FC2F4C356114CF4174498B4F112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 1541
Signing time: Mon 09 Nov 2026 17:00:57 +0000
Manifest this update: Mon 09 Nov 2026 17:00:57 +0000
Manifest next update: Tue 10 Nov 2026 17:00:57 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: kfnw1JWW1weoYNthKBYAMMg0tDrR6lrubuEFqnUqqw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:7f:c2:f4:c3:56:11:4c:f4:17:44:98:b4:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Nov 9 17:00:57 2026 GMT
Not After : Nov 10 17:00:57 2026 GMT
Subject: CN=7bf81f5b5ea7fdddf7c3dc475a39c7a8ecc8e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:e8:fb:f7:50:2d:12:a7:21:17:7d:d4:68:
63:43:17:0e:88:62:d9:ec:85:5b:83:7a:55:5c:68:
17:a9:96:09:78:6f:9d:22:21:d7:3b:04:3f:e8:b6:
28:e3:8a:36:9c:3e:2a:04:02:55:39:76:d0:d6:da:
22:13:6b:fa:40:f8:db:9c:87:b6:5a:50:c0:19:5d:
a6:3e:87:d1:3c:5e:53:e9:c8:a1:90:a8:8b:fd:ba:
9e:f1:26:0d:e6:4c:15:12:95:8f:4b:46:5b:8e:8f:
38:a7:b3:65:a5:0a:36:00:94:76:e8:08:21:f8:c4:
2e:d3:2a:2f:7f:12:65:95:a1:41:e0:89:4d:83:4e:
a3:78:2c:49:85:f2:dc:d1:90:bf:68:c5:2c:1f:95:
40:6a:2e:6d:f1:e3:e3:b6:47:14:a8:84:78:34:e5:
99:a4:89:2e:93:76:4d:3a:99:ee:35:24:6e:a0:c0:
50:f3:c0:3b:e2:9c:34:93:af:18:b4:67:5b:2a:3c:
68:cc:53:54:4c:72:ed:3d:71:cc:ca:97:95:08:0e:
7c:95:f4:a8:2b:d8:c7:46:68:72:b6:12:d7:0d:5e:
f7:08:6b:7f:fa:40:b1:56:bc:e4:6c:85:e2:83:24:
68:4e:e9:ab:3d:ad:e6:af:d5:58:63:36:70:ab:26:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:1F:5B:5E:A7:FD:DD:F7:C3:DC:47:5A:39:C7:A8:EC:C8:E6:DF
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:91:45:0f:ff:5f:42:3d:e7:45:5a:e3:a5:e5:c6:17:e8:
f1:09:87:be:39:16:93:86:ec:e2:46:b9:6a:18:69:da:8d:c3:
d5:c7:64:ba:4a:f9:3f:c0:31:9a:68:c4:2a:5d:e3:0a:65:48:
cd:85:89:db:40:eb:f2:fb:6c:3b:78:38:df:2a:0f:4d:ad:13:
c9:15:2a:01:58:ed:f6:1d:0d:4b:e8:3c:7e:79:f7:01:c5:ef:
43:98:ec:ff:3a:a2:5e:d3:ef:11:e3:20:33:6f:ab:8c:bb:56:
51:1e:71:e5:ad:59:fa:0c:c3:0a:93:cf:c7:22:50:ea:7a:f5:
fd:99:85:5f:03:c0:3b:d4:09:ec:54:42:67:f7:c9:fd:d1:0f:
93:eb:51:0e:23:2c:a9:3b:06:93:2f:81:ba:9a:d6:e4:44:73:
b5:12:7f:90:5b:92:36:93:72:8f:cd:ac:74:bf:c3:1d:00:cd:
9e:a3:2e:6b:fa:df:4e:95:bc:b7:30:79:03:d2:be:4a:a1:b3:
63:d0:69:d5:c9:d1:a5:52:2e:14:ca:ac:7c:01:ff:fe:50:d1:
a1:7b:57:cc:40:05:36:2f:b1:cf:bf:92:a8:da:af:63:c2:7e:
c5:58:58:1f:ec:27:75:51:e8:14:57:44:87:32:9e:2c:31:9c:
6a:a3:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:58:10 2026 by rpki-client