Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: vc+a2eJtpc821ATB4zFS7hfa35ccR57t3My28sqK2X8=
Subject key identifier: A1:B9:CB:83:10:FF:0D:ED:47:57:FA:DF:84:87:AC:A8:FC:CB:D9:5F
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 019EC06E3D2CFD5672142D071F95060809AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0A3E
Signing time: Sat 13 Jun 2026 10:01:50 +0000
Manifest this update: Sat 13 Jun 2026 10:01:50 +0000
Manifest next update: Sun 14 Jun 2026 10:01:50 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: C9Js25SpiFimq7QSG8/2JC6lUmLTMs6ueDfkMwMldSk=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:3d:2c:fd:56:72:14:2d:07:1f:95:06:08:09:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Jun 13 10:01:50 2026 GMT
Not After : Jun 14 10:01:50 2026 GMT
Subject: CN=a1b9cb8310ff0ded4757fadf8487aca8fccbd95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:d7:15:1e:99:ee:0e:34:d4:e8:12:db:cb:
88:b3:51:93:f5:6e:12:44:02:a6:67:c9:ad:c5:5a:
61:39:65:71:a3:61:cb:5f:23:1b:b9:e7:d9:9f:52:
c4:02:da:6c:4c:0e:99:e1:ad:13:97:fc:c8:17:c5:
75:56:e7:ca:d0:30:ab:7f:4c:8f:df:54:17:2d:b0:
50:dd:48:59:38:be:2c:f9:5e:b2:b5:28:e0:c6:8d:
15:5e:ac:a5:fc:ab:fd:71:ee:04:ef:18:3c:2d:73:
4a:1f:cc:98:72:90:c9:cd:f8:5d:09:66:a8:7f:f1:
f9:f1:ae:01:d4:47:62:80:f9:58:97:be:9e:49:fa:
af:b4:1a:fb:6e:80:df:65:d5:9e:1d:b3:37:2e:ab:
6c:07:02:1a:1c:6e:74:b5:9a:4d:2c:6f:c1:59:1d:
f9:f4:b1:df:35:1c:a3:66:92:b3:28:b9:b1:96:70:
bf:ac:b2:bc:7c:16:3b:01:e7:ea:e7:dc:a2:97:41:
27:b8:10:a6:aa:04:a6:77:cf:6a:2b:5c:c4:15:89:
66:78:58:79:3b:20:4f:80:4f:5a:ca:e2:0f:88:03:
c1:25:8d:cb:bc:60:b8:9d:0a:04:cd:b8:88:71:f9:
35:dd:94:3d:be:a5:9e:cc:1d:35:a8:14:fe:dd:cb:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:CB:83:10:FF:0D:ED:47:57:FA:DF:84:87:AC:A8:FC:CB:D9:5F
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:65:5a:93:25:c3:2a:3b:2b:35:05:1f:1e:b6:b7:6d:90:3b:
14:1e:ca:79:b1:ee:db:a2:d8:06:e5:d4:b4:0b:bc:e7:fe:b7:
1f:32:a7:3d:a0:f5:23:84:98:47:e6:9a:59:b5:6b:02:36:04:
b4:a6:b3:13:16:87:78:40:f9:5f:63:fb:30:9c:a0:07:97:e2:
1c:9f:f6:0a:dd:20:03:d5:6c:99:4d:4e:0d:ee:80:ca:f5:13:
1b:bc:cb:fe:f3:b8:0f:6d:e9:c8:90:8e:83:c4:12:1e:47:b7:
c6:e0:d0:ff:eb:45:a5:68:1a:5f:65:d0:23:4a:52:7f:a6:f8:
78:39:74:27:41:74:d0:4d:0d:dc:8c:62:64:20:8f:1d:c3:74:
4e:07:a5:31:b1:5b:e0:77:04:1e:8a:0d:80:5e:3d:88:e8:66:
28:5c:3e:86:0b:cd:72:56:bc:10:67:e5:0d:7d:f8:7c:be:83:
3e:c2:c7:68:df:d8:c6:11:50:08:2c:1c:3f:4b:3f:37:d5:73:
3f:13:ae:9b:1d:fc:9a:4b:94:2e:7f:9d:79:3d:e1:97:ad:58:
1a:3c:95:0b:ca:85:02:32:7a:e2:99:83:e7:6a:31:8c:b6:42:
ef:38:79:34:3f:4f:5a:1d:6d:d6:9a:e3:4a:14:c9:3e:49:eb:
0d:05:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:13 2026 by rpki-client