Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier: AI0iMYsp4FlEdCPio95Sk9dJrKuxgBJ4JQXcHgUA6Uk=
Subject key identifier: BD:FF:44:BE:17:FF:A3:A0:79:6D:5A:77:5E:61:A7:95:AF:66:E1:F0
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 019EBF917F0D233F91058E18BF4FBAEAC058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:43 +0000
Manifest this update: Sat 13 Jun 2026 06:00:43 +0000
Manifest next update: Sun 14 Jun 2026 06:00:43 +0000
Files and hashes: 1: B923TTC0Df04C2WKB5eoCgT73fQ.roa (hash: u8SWrYqzCDPEqqAsY+pz5LjUeslP1zMGGkEQ+CEEG6g=)
2: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: eErvdm4YzbJ63Dt4+gFmndtSS+hsVy9QCnF3u66yJRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:7f:0d:23:3f:91:05:8e:18:bf:4f:ba:ea:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Jun 13 06:00:43 2026 GMT
Not After : Jun 14 06:00:43 2026 GMT
Subject: CN=bdff44be17ffa3a0796d5a775e61a795af66e1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:30:14:4e:d0:6b:e2:41:af:27:5c:c9:a1:
08:eb:b1:7b:20:5d:e9:c4:da:90:be:ae:88:67:86:
de:35:72:c7:50:28:89:3a:18:20:6c:98:46:81:68:
20:14:b4:ad:36:c2:e9:bc:85:5d:8f:92:54:31:52:
cc:95:ee:dd:1d:0a:5a:db:ac:4d:f6:42:6d:d6:48:
83:86:62:ff:90:3c:29:30:e9:7a:c9:c6:72:3c:c0:
17:06:79:15:2d:71:f5:ea:74:43:fb:05:3c:be:70:
a2:25:99:ff:0e:78:fe:88:56:7e:35:24:1f:f7:51:
25:2c:31:5e:1b:09:c8:eb:31:b4:7c:6d:90:03:a0:
fa:ee:3e:a4:72:51:f9:cb:6d:6e:32:f1:30:04:ec:
a7:c3:9b:fc:5e:3d:e3:45:ae:8a:cd:08:e4:68:ec:
ca:a3:dd:57:0d:98:73:e3:57:92:f7:d6:86:a3:62:
5a:47:5b:55:a1:62:51:bc:17:82:18:de:03:e1:3c:
0f:77:38:d1:da:76:f7:13:08:87:22:07:d4:93:3f:
99:7b:0d:99:41:6f:3d:c8:d4:91:06:87:3d:38:ff:
5d:77:3a:f0:05:04:4e:3a:1f:d3:41:e7:0a:cd:d3:
12:cc:58:a8:91:b6:eb:e8:0e:3a:e6:07:ba:07:32:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:44:BE:17:FF:A3:A0:79:6D:5A:77:5E:61:A7:95:AF:66:E1:F0
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:37:be:6c:44:e1:0e:b5:b9:e9:73:50:97:67:20:02:06:
8f:9d:72:dd:7c:6e:c0:f9:ca:36:87:91:b6:c7:5e:43:6f:48:
8e:93:34:3c:41:6f:e4:45:99:b9:e8:45:3b:70:a4:ca:bd:09:
d9:5a:b3:82:aa:50:b4:be:dd:2e:1a:d2:f3:80:a2:7a:d7:e9:
36:2f:58:b7:ed:a7:77:d9:af:d7:a2:79:4c:29:27:0f:b7:b7:
7d:2f:44:2f:11:9a:40:d5:8b:67:8b:3e:38:12:c0:c0:32:cf:
76:2c:16:ef:9e:24:cf:b4:5c:34:83:dd:dc:8b:86:59:5c:cd:
4f:b4:76:ff:f2:fc:7d:1f:8c:03:ce:dd:e3:d3:95:98:f3:4f:
81:ce:f0:da:31:76:06:91:08:df:da:e7:65:ae:d6:c6:32:b2:
f1:6f:b8:7d:a3:29:70:40:28:3a:ac:a6:d9:26:7f:4f:f7:ac:
a2:a1:f0:fd:eb:e1:bd:d5:0c:52:d5:76:64:94:3e:97:a5:18:
cd:1f:ed:ea:58:5f:d2:af:ba:bb:00:8f:f6:db:d5:d1:39:c9:
84:05:c9:61:7f:6f:92:6f:42:a4:47:17:94:49:61:1b:ad:ed:
6f:4d:bf:29:a9:3e:fe:1a:14:47:af:37:dc:42:16:b3:93:4f:
48:9f:08:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kX8NIz+RBY4Yv0+66sBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1
OGQ1ZmUwHhcNMjYwNjEzMDYwMDQzWhcNMjYwNjE0MDYwMDQzWjAzMTEwLwYDVQQD
EyhiZGZmNDRiZTE3ZmZhM2EwNzk2ZDVhNzc1ZTYxYTc5NWFmNjZlMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCAwFE7Qa+JBrydcyaEI67F7IF3p
xNqQvq6IZ4beNXLHUCiJOhggbJhGgWggFLStNsLpvIVdj5JUMVLMle7dHQpa26xN
9kJt1kiDhmL/kDwpMOl6ycZyPMAXBnkVLXH16nRD+wU8vnCiJZn/Dnj+iFZ+NSQf
91ElLDFeGwnI6zG0fG2QA6D67j6kclH5y21uMvEwBOynw5v8Xj3jRa6KzQjkaOzK
o91XDZhz41eS99aGo2JaR1tVoWJRvBeCGN4D4TwPdzjR2nb3EwiHIgfUkz+Zew2Z
QW89yNSRBoc9OP9ddzrwBQROOh/TQecKzdMSzFiokbbr6A465ge6BzInsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3/RL4X/6OgeW1ad15hp5WvZuHwMB8GA1UdIwQY
MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt
ODk1NTFlOGNjZTEyLzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy
LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr43vmxE
4Q61uelzUJdnIAIGj51y3XxuwPnKNoeRtsdeQ29IjpM0PEFv5EWZuehFO3Ckyr0J
2VqzgqpQtL7dLhrS84CietfpNi9Yt+2nd9mv16J5TCknD7e3fS9ELxGaQNWLZ4s+
OBLAwDLPdiwW754kz7RcNIPd3IuGWVzNT7R2//L8fR+MA87d49OVmPNPgc7w2jF2
BpEI39rnZa7WxjKy8W+4faMpcEAoOqym2SZ/T/esoqHw/evhvdUMUtV2ZJQ+l6UY
zR/t6lhf0q+6uwCP9tvV0TnJhAXJYX9vkm9CpEcXlElhG63tb02/Kak+/hoUR683
3EIWs5NPSJ8I4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:17 2026 by rpki-client