Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: N7mCvoluTYBDQwvdFfcAfiVzmJXRuzhKmsqvYLLy5iU=
Subject key identifier: 72:BB:2D:11:37:B5:9D:5C:45:C8:95:6B:14:41:50:1C:02:50:38:79
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 01A1DE02936CCD8A4CD1C58903704A3DAEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0BDB
Signing time: Sun 15 Nov 2026 07:01:13 +0000
Manifest this update: Sun 15 Nov 2026 07:01:13 +0000
Manifest next update: Mon 16 Nov 2026 07:01:13 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: 1731l8OEl2/IeAq1bciQQay5MXJvgU3Rpj1lMVYdoLc=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:93:6c:cd:8a:4c:d1:c5:89:03:70:4a:3d:ae:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Nov 15 07:01:13 2026 GMT
Not After : Nov 16 07:01:13 2026 GMT
Subject: CN=72bb2d1137b59d5c45c8956b1441501c02503879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:29:c1:3f:bd:f0:1f:7a:38:dd:2c:ab:4f:
71:fb:9c:65:7c:91:74:b9:76:9e:b8:11:55:c9:f6:
aa:39:40:13:06:2f:d4:98:58:33:b6:1c:d0:67:6a:
40:41:af:76:e6:eb:33:af:ae:cf:57:9a:ba:db:b0:
d5:0a:f3:0d:9a:12:f1:ec:74:75:a6:cd:29:a0:a8:
71:f1:76:2c:8f:14:30:dc:a2:a6:7f:0b:19:1a:40:
da:b3:0a:f2:4b:76:ee:56:17:3b:b3:1a:15:c3:c4:
9d:85:b8:77:5b:05:c6:81:20:de:0b:bc:15:f2:1b:
51:88:4c:76:05:c0:c4:f8:7c:82:8a:fd:1e:da:68:
33:21:9b:72:c4:32:5e:03:68:47:6d:27:06:50:22:
fb:75:fc:20:7d:3e:a1:36:2a:49:d4:dc:2c:88:ee:
6c:0d:dc:3a:b8:d8:82:03:99:a7:13:72:22:f7:17:
83:81:1b:76:04:3c:33:e2:21:76:4f:6b:29:d2:70:
1c:66:bf:b1:64:3a:b8:b0:19:e0:ca:ad:42:13:2f:
27:a2:97:9d:dc:72:e8:f0:dd:be:64:73:1b:28:a6:
b3:92:bf:8a:94:86:75:1a:6c:52:42:98:22:db:28:
88:89:c7:24:30:10:15:ed:b6:f1:73:8e:b4:4b:b3:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:2D:11:37:B5:9D:5C:45:C8:95:6B:14:41:50:1C:02:50:38:79
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:92:38:1c:ef:33:76:e5:3a:39:c3:96:26:c2:b3:a6:cf:
b2:2f:4a:72:63:19:6c:e1:7d:f7:1c:cc:b6:0f:ca:96:5e:c7:
60:c8:5c:b6:81:55:37:d2:35:db:41:0a:ae:75:46:15:66:f2:
ca:99:f4:0e:30:ce:56:65:ce:77:11:b9:54:f0:90:5e:05:d3:
48:7c:a8:11:f8:43:45:a6:5c:05:4f:9f:7d:aa:38:bd:16:0d:
74:17:27:b7:fc:99:99:c7:cf:0e:08:31:7e:19:d4:82:3f:c9:
af:36:60:1f:50:c5:9b:f2:d0:76:be:f3:54:fb:f9:4f:80:eb:
cf:0f:bb:18:44:49:cb:3a:2d:f9:8b:b2:2e:e5:82:ef:05:de:
a2:f6:50:3a:dc:a3:94:2d:95:3a:0b:92:de:c3:75:4b:7a:45:
ad:9e:a7:de:27:9c:65:da:7f:d5:a5:4d:e6:b1:ce:a5:be:f8:
fc:67:c6:77:54:5c:09:ec:d6:6a:d1:4d:7e:c4:2b:62:d8:6f:
64:b2:85:18:80:17:dd:19:ab:5c:f5:fb:07:29:74:3d:f2:34:
37:f0:a1:11:91:95:94:5b:fb:f4:c9:67:a4:27:aa:c0:a3:29:
06:35:aa:32:aa:f4:cc:38:11:8c:ef:64:08:e4:c3:0d:de:ca:
a0:86:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:26 2026 by rpki-client