Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier: tkOvsR+XsZPI5WZkqWtWSL1vOFKYbyXtuVNcWTQneCg=
Subject key identifier: BB:58:DA:49:58:59:CB:F0:46:D7:65:4A:6B:D3:3C:26:90:49:FA:55
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 019FA93E46F5B839E4F8E62B7B2CDE22870F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 15:00:58 +0000
Manifest this update: Tue 28 Jul 2026 15:00:58 +0000
Manifest next update: Wed 29 Jul 2026 15:00:58 +0000
Files and hashes: 1: B923TTC0Df04C2WKB5eoCgT73fQ.roa (hash: u8SWrYqzCDPEqqAsY+pz5LjUeslP1zMGGkEQ+CEEG6g=)
2: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: XkXCCkHckPlMSZXrB+XIss2dpPsF6MXFgN5cjGuWxck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:46:f5:b8:39:e4:f8:e6:2b:7b:2c:de:22:87:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Jul 28 15:00:58 2026 GMT
Not After : Jul 29 15:00:58 2026 GMT
Subject: CN=bb58da495859cbf046d7654a6bd33c269049fa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:36:2c:78:85:2f:7a:f3:af:4f:e6:5e:60:
bc:b8:df:39:a7:f6:dd:41:c3:4a:c5:01:c6:dd:44:
41:58:e2:26:14:59:de:60:05:b7:45:bf:d6:bd:a6:
93:81:68:c1:d1:3f:44:9c:ca:4d:b4:09:f1:cc:75:
03:ee:68:18:b7:70:7a:cc:61:55:74:b9:0b:d9:03:
4f:e7:cb:a6:8c:df:69:dc:b2:ac:a4:9f:4d:ac:b5:
27:b4:d0:af:62:d3:f1:fa:ec:3f:99:bd:32:a3:86:
1c:bc:a7:6f:12:14:ee:70:00:0d:42:34:8c:85:7a:
bc:e2:db:51:e0:ec:6c:8b:0b:0c:42:e4:64:cd:29:
70:c3:bd:33:6d:39:93:ba:4f:2b:7a:0d:14:df:eb:
8f:ea:ea:29:69:86:46:6a:61:d8:42:48:9c:0d:39:
a5:3a:4c:ec:68:e9:e7:85:60:29:cb:17:fb:17:98:
3e:6d:82:45:63:9f:81:2a:1b:43:b3:97:9b:9a:6b:
c3:7e:26:2b:42:29:82:55:89:37:3c:8e:14:91:ad:
58:e5:57:eb:d7:49:e6:b0:fc:bd:c1:b0:8b:53:d2:
08:7f:a9:0f:ff:7e:9f:b2:b4:c1:24:47:f4:ac:05:
61:20:2b:60:e5:f0:c5:1b:53:a7:1a:ec:e1:c2:25:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:DA:49:58:59:CB:F0:46:D7:65:4A:6B:D3:3C:26:90:49:FA:55
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:a3:e6:f5:df:e4:47:94:2d:61:ed:72:69:6e:1f:82:d3:
82:87:f5:e3:1a:7e:4d:7f:35:1d:6a:13:07:e0:48:b0:eb:62:
ec:30:6a:50:a0:3d:35:b5:95:86:d4:f7:19:03:c4:1c:21:35:
f7:d6:46:f5:50:47:55:fa:67:8b:dc:2e:ed:ab:59:e8:bc:31:
2d:2c:3c:6c:f7:a3:bd:ab:d6:c4:22:38:ba:14:c7:1e:0c:ac:
58:8d:43:b8:03:be:48:99:76:7e:cc:21:af:82:c7:d9:43:b7:
78:65:f0:d5:9e:dd:de:ce:cf:d3:19:6c:61:19:69:a2:c0:ff:
7a:fa:79:fd:bb:5a:cf:50:9b:1a:2a:57:eb:30:8c:eb:0f:76:
22:52:84:79:f7:b8:cc:06:98:fe:a7:70:b6:23:f4:60:28:04:
c1:b5:21:7d:2c:47:41:8d:73:b2:ec:a6:09:a3:47:b1:c8:e4:
70:0d:bb:fc:bd:f3:79:42:07:d9:c0:3d:35:fe:d6:3a:8c:d1:
32:91:e0:21:62:1a:ac:b8:bc:0c:99:e9:21:75:f4:45:59:36:
fc:2a:c5:22:71:7c:03:e2:6b:de:33:95:98:5a:d8:35:eb:84:
fc:8f:4b:68:bd:19:15:4c:65:26:e2:f8:c0:5e:65:57:70:26:
e3:98:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:16 2026 by rpki-client