Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: qtwuEdHg3HrGN0VtZO/eH3KEeyXXI+3wU8T2f7mju6w=
Subject key identifier: 6A:37:27:06:06:ED:68:9D:AF:83:4B:1C:F8:D9:EC:95:88:DE:21:0B
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 019D97E190DCD10D727AF95D66798DB894C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 0871
Signing time: Thu 16 Apr 2026 20:00:35 +0000
Manifest this update: Thu 16 Apr 2026 20:00:35 +0000
Manifest next update: Fri 17 Apr 2026 20:00:35 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: 1A0dW/ynsyZC2WzCxop3Tbmrf+PLU3oPxlyAelbB8JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:90:dc:d1:0d:72:7a:f9:5d:66:79:8d:b8:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Apr 16 20:00:35 2026 GMT
Not After : Apr 17 20:00:35 2026 GMT
Subject: CN=6a37270606ed689daf834b1cf8d9ec9588de210b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:b4:ed:a9:7e:46:05:0e:c7:97:9e:4c:2c:
c6:46:80:22:0d:ad:8a:85:7d:ba:9b:bc:c1:25:12:
1d:21:a8:0b:5a:00:54:bf:80:96:6f:11:b5:93:a7:
fd:05:b1:54:f2:7e:19:16:6a:f0:1b:6d:bf:98:c5:
71:e8:c6:4c:44:47:d8:6c:96:df:b5:81:8b:8c:6f:
9e:d0:36:24:42:7d:0f:c8:56:2a:a3:e0:15:a5:45:
08:69:2d:69:b0:14:0a:b5:fa:7f:6e:f4:07:2d:92:
68:ee:c8:da:4f:90:83:c3:2b:cd:3b:4b:c9:b1:f7:
6e:ba:53:34:f8:95:97:71:71:2f:87:89:f8:c4:23:
13:e3:0f:d6:be:7b:c2:ab:9e:96:44:7b:76:48:77:
20:5b:5b:bc:70:bb:8a:4a:a9:89:dc:6b:e1:33:f1:
55:37:29:ed:fc:ce:f7:6c:63:45:58:8f:a9:0f:a7:
54:64:32:06:5e:52:d6:eb:22:c3:dd:25:bf:cd:c1:
c6:74:8e:cc:18:59:f1:66:9b:22:03:0c:42:01:bb:
6f:ad:ca:7e:13:d3:48:dc:ae:a0:c7:3d:9a:16:2a:
bc:66:8d:df:80:74:5a:58:ea:59:f7:87:82:2b:e1:
b6:11:ee:8b:2a:60:1e:e9:e4:d8:2c:7f:d2:e7:fb:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:27:06:06:ED:68:9D:AF:83:4B:1C:F8:D9:EC:95:88:DE:21:0B
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6a:f2:33:1e:5c:14:8e:2c:9b:eb:d8:f5:71:c0:f2:78:c0:
95:5c:1a:17:77:63:78:69:bb:ca:58:91:83:ba:de:bb:03:da:
eb:41:f7:20:4e:d0:c2:16:51:9d:9d:f2:00:50:f2:35:8f:4d:
59:93:d3:a7:e5:23:3a:27:4a:7c:11:d5:43:64:77:71:45:c7:
0a:b3:f8:09:a4:cf:b3:92:ae:09:9c:2e:74:33:38:7c:54:4a:
28:0b:7d:ed:47:92:bc:22:93:4b:09:e1:f7:dc:13:fe:56:bb:
d3:ab:1d:b4:67:a2:81:da:b0:9a:6e:c8:c7:ee:36:34:da:7e:
8f:60:30:2e:d6:79:25:62:03:b0:ef:3d:df:ab:65:ad:f7:75:
f2:72:13:5e:7b:5d:33:ac:d6:23:48:0c:3f:2b:d5:5b:3b:cc:
49:71:07:19:a2:51:74:1c:15:08:6b:5c:6c:62:d8:76:bd:0d:
69:c4:e0:ac:7c:eb:4e:9f:df:2f:65:cc:fe:2e:7c:e0:ff:bd:
af:2a:c8:3d:02:bc:f0:e1:29:5f:44:9c:0a:45:80:46:0d:be:
0b:93:f2:b4:3f:48:ae:93:d8:79:7f:48:e2:20:07:7f:df:31:
59:16:ab:41:a6:5a:90:56:ed:91:aa:69:0a:63:a0:fc:0a:0a:
5b:b8:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:34 2026 by rpki-client