Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: duEPwgcGb8dbyRFdBWKOXZ4vCXoWg+cFMBJitpzGF2c=
Subject key identifier: 2D:08:4E:0A:DD:AE:A0:7F:32:C7:3E:21:97:4F:C4:4B:BC:2A:23:7E
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01A0C633596BA2889A2FAB7DFDE2982BDDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 14BF
Signing time: Mon 21 Sep 2026 23:00:48 +0000
Manifest this update: Mon 21 Sep 2026 23:00:48 +0000
Manifest next update: Tue 22 Sep 2026 23:00:48 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: EUYrK1rwsVO1rVYUT7Oq+X4BQXy2/u3UZQmmr5jfuk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:59:6b:a2:88:9a:2f:ab:7d:fd:e2:98:2b:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Sep 21 23:00:48 2026 GMT
Not After : Sep 22 23:00:48 2026 GMT
Subject: CN=2d084e0addaea07f32c73e21974fc44bbc2a237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:ee:c4:e9:f0:01:bd:62:d6:ef:36:a0:6d:
24:3e:86:39:bb:71:32:6c:cf:82:0a:44:9f:b0:f1:
81:c5:82:f7:34:8b:74:27:c9:0a:a5:e0:d3:65:f9:
ba:30:36:e2:1a:f6:22:5f:72:f3:73:65:b9:b7:dd:
e3:8e:2f:d5:65:72:a1:ec:bf:d9:b2:96:14:f1:8d:
26:0f:b7:07:92:db:5b:6e:55:7c:c1:08:02:ee:38:
c7:6a:57:45:6c:18:47:01:8c:cc:0f:6a:55:d7:c6:
c4:10:11:69:66:aa:d9:19:1e:64:8a:b2:8b:9b:63:
4a:cf:58:02:93:40:1c:f5:ed:54:30:07:e2:d0:76:
31:39:e1:91:d6:3c:c4:d8:b2:41:d3:94:6c:28:82:
68:ae:c0:56:f9:ec:6a:05:d2:48:f0:61:dc:e3:c4:
b8:31:dd:f7:70:92:64:9a:ef:ae:83:74:f5:ef:e5:
da:26:ed:45:8f:92:9c:14:dc:6d:b7:01:84:70:cb:
3a:36:f6:8a:91:50:f2:9a:aa:9f:a1:c6:13:2a:0c:
3d:e3:5f:67:3b:84:e8:f3:0d:ef:ad:27:4f:cc:b9:
df:df:72:7b:c7:68:0b:3a:68:63:b9:af:bc:c9:1b:
0b:2c:68:73:23:f1:2a:c0:cf:9c:83:9e:c1:2a:ca:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:4E:0A:DD:AE:A0:7F:32:C7:3E:21:97:4F:C4:4B:BC:2A:23:7E
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f2:5c:39:67:53:31:89:01:ea:52:c7:96:38:da:f5:9c:67:
2f:00:0f:09:a1:6f:d3:fe:42:b1:11:c4:7f:8d:93:3b:a1:fb:
da:5d:c3:b4:4d:cd:24:43:ce:99:35:c0:25:5f:be:be:fd:50:
ae:8c:c1:bc:72:ed:99:a6:1a:91:ca:22:16:d8:59:31:a4:fc:
bf:f7:b9:20:04:aa:47:db:f5:f9:20:a3:0f:e8:75:7f:04:06:
96:17:1d:85:63:38:0d:00:48:b3:83:18:a9:67:76:d3:9d:4b:
0c:f1:02:e6:6b:fd:4a:5b:25:0d:3e:d7:95:d8:6d:94:2c:16:
f7:9d:da:8f:81:e0:dd:5e:8a:fb:1d:fb:09:9a:54:ce:e5:ef:
fd:22:84:5d:82:39:7c:d8:71:7a:c6:92:c8:d1:78:6c:b9:00:
f7:d1:29:e0:d6:17:f0:a1:ae:da:3b:ae:54:9c:68:8f:c3:97:
60:e8:8f:f3:54:d6:ca:55:11:5f:3c:1d:8a:bc:c0:d1:a9:71:
b7:71:84:64:b4:2a:b1:06:0d:2f:fb:99:b5:cf:7e:75:1c:c0:
d3:45:47:33:83:e1:8f:7d:76:5e:7e:6d:9a:07:f3:20:90:9c:
97:d6:ee:1b:68:5f:87:49:a4:bb:43:d9:9d:bc:66:aa:59:8d:
90:c4:b5:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM1lrooiaL6t9/eKYK924MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWQzNTE4YmRlNTk2MmJmZmU3M2U3OTg4NDcxOGU2ZWQw
ZmE0NTYwHhcNMjYwOTIxMjMwMDQ4WhcNMjYwOTIyMjMwMDQ4WjAzMTEwLwYDVQQD
EygyZDA4NGUwYWRkYWVhMDdmMzJjNzNlMjE5NzRmYzQ0YmJjMmEyMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmTuxOnwAb1i1u82oG0kPoY5u3Ey
bM+CCkSfsPGBxYL3NIt0J8kKpeDTZfm6MDbiGvYiX3Lzc2W5t93jji/VZXKh7L/Z
spYU8Y0mD7cHkttbblV8wQgC7jjHaldFbBhHAYzMD2pV18bEEBFpZqrZGR5kirKL
m2NKz1gCk0Ac9e1UMAfi0HYxOeGR1jzE2LJB05RsKIJorsBW+exqBdJI8GHc48S4
Md33cJJkmu+ug3T17+XaJu1Fj5KcFNxttwGEcMs6NvaKkVDymqqfocYTKgw9419n
O4To8w3vrSdPzLnf33J7x2gLOmhjua+8yRsLLGhzI/EqwM+cg57BKsoQhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0ITgrdrqB/Msc+IZdPxEu8KiN+MB8GA1UdIwQY
MBaAFAUdNRi95ZYr/+c+eYhHGObtD6RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQt
YzViZWIyZTI0NWZlLzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQtYzViZWIyZTI0NWZl
LzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvJcOWdT
MYkB6lLHljja9ZxnLwAPCaFv0/5CsRHEf42TO6H72l3DtE3NJEPOmTXAJV++vv1Q
rozBvHLtmaYakcoiFthZMaT8v/e5IASqR9v1+SCjD+h1fwQGlhcdhWM4DQBIs4MY
qWd2051LDPEC5mv9SlslDT7XldhtlCwW953aj4Hg3V6K+x37CZpUzuXv/SKEXYI5
fNhxesaSyNF4bLkA99Ep4NYX8KGu2juuVJxoj8OXYOiP81TWylURXzwdirzA0alx
t3GEZLQqsQYNL/uZtc9+dRzA00VHM4Phj312Xn5tmgfzIJCcl9buG2hfh0mku0PZ
nbxmqlmNkMS1ag==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:37 2026 by rpki-client