Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: ihuRq9LUhyQdpL8vZFSZCmedEgDB6SdZouVdhNuQmd0=
Subject key identifier: 05:5C:CD:48:F1:4E:9B:BE:EE:C8:45:D0:51:DB:6B:2E:20:A2:9E:EB
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019D992B2D5CA232A8D992BF6286147D920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 131A
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: +yCL/52tMbEPa7Yl6vbGveJx4ZTTyM1i2gKRRERr9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2d:5c:a2:32:a8:d9:92:bf:62:86:14:7d:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=055ccd48f14e9bbeeec845d051db6b2e20a29eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:5c:a4:67:a1:d7:9d:ab:5b:81:87:05:7a:
02:1d:41:46:05:b8:e6:7b:96:90:3c:51:80:c5:82:
66:4d:60:69:3b:8f:3b:c4:dd:d3:97:6e:12:f8:ce:
f7:d1:55:be:72:2c:4e:a6:19:a3:7d:f9:81:50:77:
54:da:13:94:9f:e3:57:77:ad:61:6c:6c:b0:5e:86:
a6:a5:46:1c:5e:96:d2:2f:3f:e4:03:93:2b:8d:f0:
2d:f9:b6:9d:29:6a:c4:f8:4a:79:21:80:6a:b1:fa:
96:a0:6d:9b:f5:4c:4c:8f:d8:3e:94:4f:36:83:c9:
3a:27:e0:fd:e4:93:1f:31:51:df:73:3a:46:42:87:
dc:22:71:cc:ef:f9:06:ba:d1:60:b3:1e:3d:eb:de:
e9:94:68:cd:5c:77:2f:30:5f:f6:11:5f:a2:aa:3b:
ad:57:04:c7:74:ce:0e:d4:78:47:4c:4e:7a:da:fc:
96:b4:89:01:99:0f:7c:29:18:57:ce:c7:85:34:62:
bd:85:c1:c4:83:0c:a2:2b:d1:5d:b4:0b:04:ec:05:
55:fe:5d:da:31:08:96:73:25:35:6d:bb:ce:50:bc:
41:a6:00:ec:d4:be:1d:4d:33:5c:e8:17:0a:c7:6e:
c2:f0:2a:2d:0f:02:31:60:66:b5:83:ea:32:e1:e5:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:CD:48:F1:4E:9B:BE:EE:C8:45:D0:51:DB:6B:2E:20:A2:9E:EB
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6b:86:8a:63:63:89:60:43:18:04:a6:eb:74:dc:6b:7b:57:
2a:6a:d5:51:d5:bb:3b:07:d0:28:6d:7b:c4:1a:1d:97:43:86:
97:e6:66:7f:38:f2:73:60:dc:67:1f:27:fc:81:d7:ef:8f:e0:
8d:fd:69:ad:23:ea:c9:50:2a:33:e4:41:3c:3b:2d:61:62:b2:
c4:96:c8:e7:fa:01:37:13:7e:5a:a0:f3:16:b3:36:eb:e6:3f:
21:c9:63:eb:cc:dd:33:5b:16:de:40:a8:4b:32:0c:92:90:29:
e8:76:5c:6c:86:33:0f:af:4c:ed:96:50:d4:6d:a1:61:1e:c9:
cd:fa:15:11:ac:35:89:80:8d:2e:0c:74:84:6c:f9:68:00:00:
94:5d:a4:40:e8:26:84:a4:ac:66:c3:60:8c:e4:35:43:be:68:
ee:47:f3:ff:fe:ad:5f:f7:fa:56:00:d8:29:96:c2:a4:fd:25:
40:38:06:b6:0c:42:6f:c4:43:eb:23:62:9c:76:49:5c:28:a9:
f0:8c:dc:2b:19:14:d5:23:c8:cf:57:77:3a:a7:c9:0a:bd:75:
5c:00:2b:35:f2:62:84:34:74:46:bf:bf:32:dc:cc:a6:97:39:
2f:2b:41:0b:bb:e9:f3:be:b6:6d:22:7c:65:9c:80:c6:1d:d8:
21:0e:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:02 2026 by rpki-client