Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: /jvsaSFrfZacDhLPikq/oFLu8FbTnFuc7GRDXjgTDfw=
Subject key identifier: 86:F2:3F:C2:A8:1A:25:F6:62:32:DC:4B:46:8E:55:5C:2F:9C:16:BF
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 019D9BF55E38CE2C0D5E37BF5946600992B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0F98
Signing time: Fri 17 Apr 2026 15:00:42 +0000
Manifest this update: Fri 17 Apr 2026 15:00:42 +0000
Manifest next update: Sat 18 Apr 2026 15:00:42 +0000
Files and hashes: 1: 69rAqslmUNQ4jxhqRukN3nUhlgk.roa (hash: IDmbzyv/bIKti6JCgd65/6aVCqu//LwD+RovZywUSK8=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: 7ajQipOKTO7IgtMx7NCvWyOFwjV78Ap1gaBIrAjz908=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:5e:38:ce:2c:0d:5e:37:bf:59:46:60:09:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Apr 17 15:00:42 2026 GMT
Not After : Apr 18 15:00:42 2026 GMT
Subject: CN=86f23fc2a81a25f66232dc4b468e555c2f9c16bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:f3:2e:28:0b:64:55:16:42:9d:e8:ef:e5:
e1:1b:44:07:66:17:ea:7f:a8:49:a3:37:33:cb:4f:
d4:5e:11:05:4c:81:d0:c8:b1:12:15:94:9e:91:76:
ca:1d:42:8b:37:2e:7e:e7:f2:8e:c8:c0:97:d5:17:
b9:63:95:80:57:7d:37:bd:c6:71:27:5b:52:57:6c:
e4:c0:4f:9f:9e:51:46:fd:b5:2d:d5:c5:90:7d:66:
e5:42:7d:94:1c:80:f0:9c:33:1b:24:ac:93:fd:df:
76:e7:54:2f:c3:79:93:e6:3e:25:f2:2d:9c:08:44:
58:ec:f2:67:40:23:e8:e1:93:5a:a2:42:5b:29:fb:
65:7f:9c:7f:cf:1e:3e:12:1c:08:89:d4:8e:da:ac:
72:68:d6:94:67:65:18:ba:e6:f0:74:c7:bc:5f:d9:
13:59:4b:ec:ac:b0:d6:b3:19:1e:b1:92:26:94:26:
a5:1a:be:a8:7e:ec:fc:ac:20:d7:8a:f8:f3:0a:f3:
3a:05:fc:92:5e:35:e3:ee:79:ea:cb:0a:1d:ac:c3:
e9:ae:52:3e:33:12:da:40:c7:7a:c5:be:15:4f:b6:
e4:c0:32:5b:7d:69:17:c9:3a:d6:3b:79:d3:f4:a8:
59:51:02:4a:c8:d3:5f:1b:46:65:7f:8c:35:0d:2d:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:3F:C2:A8:1A:25:F6:62:32:DC:4B:46:8E:55:5C:2F:9C:16:BF
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:b3:35:0d:f0:44:ee:34:3f:bd:09:2d:b7:f5:f6:8a:9c:
a2:8e:fc:8e:80:47:7b:e7:1f:19:3d:63:3a:86:42:59:3f:47:
cd:40:92:f5:01:c9:d2:51:20:93:14:5a:c1:82:0c:0c:cd:27:
e5:1f:42:69:4f:80:0f:86:ed:cb:d3:c9:e7:59:d2:08:e8:13:
37:9e:8f:56:e8:68:4c:1c:82:9d:00:64:c2:9f:10:be:98:67:
60:df:91:05:71:94:51:86:8b:1b:09:22:c5:4d:ac:f3:27:e4:
a2:23:32:de:19:4c:0c:1f:d8:63:59:fe:32:25:57:41:7c:06:
d2:1f:df:04:b1:3d:bd:65:34:7a:60:bc:62:0b:db:12:23:63:
64:96:4f:2c:fa:0a:6c:aa:90:e0:af:78:86:45:0f:a2:77:cb:
99:b2:de:51:b3:24:55:62:c1:26:46:36:f4:64:73:c8:75:84:
8d:60:e9:8a:80:89:f7:8d:14:7b:d2:9e:3d:00:3a:d8:92:91:
c9:03:7b:3e:60:fc:c2:e1:93:9d:4f:9d:a0:c1:ac:f3:3d:36:
23:6f:e7:1b:23:2c:56:f2:b8:c7:10:f8:d5:f6:31:da:2d:5f:
30:70:46:0f:e0:dd:6b:39:de:38:05:fe:48:c1:b5:84:27:c6:
3c:ae:b1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9V44ziwNXje/WUZgCZKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3
NDJlNzYwHhcNMjYwNDE3MTUwMDQyWhcNMjYwNDE4MTUwMDQyWjAzMTEwLwYDVQQD
Eyg4NmYyM2ZjMmE4MWEyNWY2NjIzMmRjNGI0NjhlNTU1YzJmOWMxNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ILzLigLZFUWQp3o7+XhG0QHZhfq
f6hJozczy0/UXhEFTIHQyLESFZSekXbKHUKLNy5+5/KOyMCX1Re5Y5WAV303vcZx
J1tSV2zkwE+fnlFG/bUt1cWQfWblQn2UHIDwnDMbJKyT/d9251Qvw3mT5j4l8i2c
CERY7PJnQCPo4ZNaokJbKftlf5x/zx4+EhwIidSO2qxyaNaUZ2UYuubwdMe8X9kT
WUvsrLDWsxkesZImlCalGr6ofuz8rCDXivjzCvM6BfySXjXj7nnqywodrMPprlI+
MxLaQMd6xb4VT7bkwDJbfWkXyTrWO3nT9KhZUQJKyNNfG0Zlf4w1DS3ysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbyP8KoGiX2YjLcS0aOVVwvnBa/MB8GA1UdIwQY
MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt
MDc3OTAyOWFlMjIyLzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy
LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnezNQ3w
RO40P70JLbf19oqcoo78joBHe+cfGT1jOoZCWT9HzUCS9QHJ0lEgkxRawYIMDM0n
5R9CaU+AD4bty9PJ51nSCOgTN56PVuhoTByCnQBkwp8QvphnYN+RBXGUUYaLGwki
xU2s8yfkoiMy3hlMDB/YY1n+MiVXQXwG0h/fBLE9vWU0emC8YgvbEiNjZJZPLPoK
bKqQ4K94hkUPonfLmbLeUbMkVWLBJkY29GRzyHWEjWDpioCJ940Ue9KePQA62JKR
yQN7PmD8wuGTnU+doMGs8z02I2/nGyMsVvK4xxD41fYx2i1fMHBGD+DdazneOAX+
SMG1hCfGPK6xJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:37 2026 by rpki-client