Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: W9EdjeLAzqfDzhSFCvvHjkl/kN8Omdvj/RJtE4vcSJM=
Subject key identifier: 84:8A:67:79:60:F1:B6:DA:27:E8:89:68:7A:08:C9:B7:C1:69:E3:B6
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 019CAE6C6C313321FD171B8CF5FB52E5675A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0F1D
Signing time: Mon 02 Mar 2026 12:01:06 +0000
Manifest this update: Mon 02 Mar 2026 12:01:06 +0000
Manifest next update: Tue 03 Mar 2026 12:01:06 +0000
Files and hashes: 1: 69rAqslmUNQ4jxhqRukN3nUhlgk.roa (hash: IDmbzyv/bIKti6JCgd65/6aVCqu//LwD+RovZywUSK8=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: cM0Qi7lU6SSXPwuBgwEjjBlIKJTQGHzdkvunWpMGHbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:6c:31:33:21:fd:17:1b:8c:f5:fb:52:e5:67:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Mar 2 12:01:06 2026 GMT
Not After : Mar 3 12:01:06 2026 GMT
Subject: CN=848a677960f1b6da27e889687a08c9b7c169e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:09:3f:eb:68:c1:4c:45:1d:5a:2b:d2:5f:
c5:e7:ac:7f:eb:4c:04:b6:0b:8d:dd:45:c6:8d:68:
3b:a3:92:ca:b3:f7:2c:71:9a:ae:13:62:76:16:37:
8e:5d:7e:3d:1f:c8:19:7d:e8:cb:81:79:eb:32:d5:
05:e7:78:d4:bc:d5:3b:75:09:ad:74:18:f3:9e:6a:
f1:cf:26:15:36:4c:fe:bc:72:82:a8:b7:e0:25:e5:
53:3e:06:9f:a8:55:61:9b:a1:8b:16:4b:31:f4:ec:
31:60:5f:0a:9d:1a:87:dc:24:17:d4:86:ba:56:b6:
6b:c7:dc:cf:c9:3d:e2:99:13:45:ec:f6:46:2e:d8:
0e:32:cc:1b:f2:a5:c5:64:05:3e:d2:f0:2c:1e:fc:
49:ef:a5:52:cb:0a:d3:38:82:f9:5f:e3:6b:ad:e8:
8a:87:4f:21:f7:6f:5d:55:6e:b5:36:ca:82:ed:5d:
88:26:a3:1b:b5:92:f3:1b:10:ee:e4:92:14:ed:b5:
24:4d:cf:58:2b:7c:42:6d:b4:14:79:8e:26:a6:de:
90:f7:4d:80:1e:65:75:6f:3f:b5:af:26:38:82:80:
8d:b7:bc:8f:ba:ab:ee:f6:b3:14:ae:fe:f1:b0:0e:
0d:0d:c4:3f:67:ce:a0:71:9e:a3:8f:2b:44:b5:ba:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:67:79:60:F1:B6:DA:27:E8:89:68:7A:08:C9:B7:C1:69:E3:B6
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:3e:1a:fb:dd:47:4a:de:37:fa:61:7f:87:09:9c:20:b2:
67:2b:12:1e:5a:18:83:c3:d2:eb:b4:37:d0:e6:24:42:3b:23:
9a:a7:c1:49:64:a7:25:9d:ec:af:14:81:c3:e5:27:6f:2a:2b:
4d:98:a6:e4:ec:07:ae:b6:e0:15:c4:36:28:d7:98:18:8c:67:
6d:b8:7c:c6:d1:6c:8a:be:a7:81:94:49:69:20:9d:b9:a7:bf:
93:93:16:d3:82:fc:e9:18:40:32:f0:4c:bd:9e:85:1b:b9:f0:
ba:df:e1:12:c1:c2:85:c1:df:91:c6:b0:8a:6c:ca:7a:2c:cb:
30:b4:2c:d8:f1:a0:24:9c:65:47:ea:67:64:2e:e0:ce:8f:a6:
d9:23:69:01:9d:8c:f6:e9:8f:c3:63:42:f1:42:6b:e7:a4:52:
b6:52:b2:4b:da:5d:4b:af:7c:da:26:a4:57:fc:a0:70:bb:fd:
f4:6d:d0:32:b8:02:c8:ae:61:75:76:96:40:6f:c9:12:a7:77:
34:b3:6f:64:d9:78:de:32:ab:94:01:03:3d:0d:ae:85:cf:82:
8c:fb:6f:6c:48:ed:7b:22:8c:4c:0a:8c:ff:5d:29:f4:9a:a2:
84:71:f6:e8:3d:d0:00:d9:20:a4:c9:9d:18:9a:d9:09:29:db:
4c:9c:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:48 2026 by rpki-client