Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: oD3qDZUnQEsM1CEBBSXm5IIMcUo14M3vAkubsgtxqDg=
Subject key identifier: F9:BB:AA:4B:48:87:17:99:58:EA:C8:42:74:B9:17:DF:A7:24:43:CE
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 01A0C21FEF9673B92D5611B9969FC1FFCE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0B48
Signing time: Mon 21 Sep 2026 04:01:07 +0000
Manifest this update: Mon 21 Sep 2026 04:01:07 +0000
Manifest next update: Tue 22 Sep 2026 04:01:07 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: QvsjyTC8S0i3FVm+XeWkpA2k1vlcmzWib3k7knNrfNk=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:ef:96:73:b9:2d:56:11:b9:96:9f:c1:ff:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Sep 21 04:01:07 2026 GMT
Not After : Sep 22 04:01:07 2026 GMT
Subject: CN=f9bbaa4b4887179958eac84274b917dfa72443ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:68:14:8b:4d:fe:d5:12:8d:27:8f:a4:69:
f8:cd:51:d8:75:24:61:03:43:09:d9:c7:f3:79:d7:
57:f5:94:86:7f:1b:21:39:70:7d:4f:c0:3f:2e:ef:
b2:ed:8b:a9:76:a3:cd:32:cd:f4:f1:2a:a0:34:b5:
2f:23:63:d8:96:23:0e:73:d9:38:f8:2f:d5:77:d6:
76:9e:57:0b:4f:d3:8b:b8:33:81:10:4b:ab:54:85:
c1:55:94:c9:e1:2b:eb:2c:35:b5:e4:b7:5d:6e:89:
ca:8d:64:f0:20:34:86:29:10:e1:ba:74:ff:13:96:
a7:0c:fa:bb:56:57:69:11:c4:40:96:5c:fe:73:65:
7e:83:ba:2d:d4:28:64:7c:44:02:f1:0e:da:65:e9:
26:81:45:3f:34:df:b3:e7:99:88:80:2d:b7:f8:1e:
6a:57:a1:57:d6:a7:9e:0b:21:20:00:5b:80:21:56:
93:0e:cf:ab:71:96:c2:b9:97:60:92:77:b8:04:4b:
c0:fc:51:8c:09:34:36:21:33:aa:06:ce:e8:06:1a:
e5:b3:64:ba:26:85:ab:70:dd:91:e1:da:25:dd:fc:
45:3c:02:04:8c:7d:9c:79:05:37:49:e3:5c:c9:36:
6c:31:3b:3f:e7:4f:db:8f:e2:8b:c0:22:fb:e2:d3:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:AA:4B:48:87:17:99:58:EA:C8:42:74:B9:17:DF:A7:24:43:CE
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b6:d2:95:3f:56:16:a5:56:21:be:8b:61:25:4b:71:5e:fd:
49:48:6d:8e:a2:25:6e:b0:91:58:44:8e:56:3f:97:a5:c2:67:
10:ff:7c:da:ef:8d:45:f9:7f:f4:b2:32:b9:86:3a:c8:17:f2:
36:0a:56:df:7a:65:54:ab:ac:87:d1:f9:6b:1c:0e:0c:9f:b9:
f2:f3:a4:9d:05:2d:48:9a:d3:6f:3e:d0:18:cf:3d:41:31:c0:
6b:12:45:58:f0:89:ac:53:83:c9:1a:0a:a3:a5:a4:77:d5:89:
b3:59:a3:a1:bc:a8:e8:ea:77:24:d2:da:b3:b6:3c:54:c7:a3:
f7:a6:c7:ae:0c:98:b2:02:78:eb:b6:2b:11:98:ab:8b:ac:02:
49:df:e5:e3:71:e1:f6:50:ec:c4:c1:87:e8:de:68:79:84:8f:
42:d5:9e:0c:d0:ed:8a:8e:ef:c6:ae:21:96:98:cf:78:90:3e:
f9:49:70:1b:21:16:92:4a:fa:4f:17:31:26:c0:7e:60:69:ba:
bf:59:49:42:85:8a:87:b5:66:cd:66:1f:77:d3:5c:98:37:cc:
d3:2c:81:bb:0c:40:ff:62:99:74:19:4c:2c:a8:bb:f3:80:88:
64:df:df:c9:f4:24:62:45:8e:a9:96:34:0a:bd:20:47:57:05:
e4:0b:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:17 2026 by rpki-client