Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: ccCnlQMCeD1FgJEkVroxcZ3+lj+V+okeBUGv8xs+RC0=
Subject key identifier: 43:D8:08:51:B2:F6:A9:7D:3A:5A:3C:9F:47:02:12:FB:2E:48:D1:20
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019DA4542EC60F8E4147D869C36362796325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0E78
Signing time: Sun 19 Apr 2026 06:01:13 +0000
Manifest this update: Sun 19 Apr 2026 06:01:13 +0000
Manifest next update: Mon 20 Apr 2026 06:01:13 +0000
Files and hashes: 1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: 5W7D2lPzPi4hTmy9qQityYEgBHK/+0WwWVDNs/zl64s=)
2: fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (hash: OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:2e:c6:0f:8e:41:47:d8:69:c3:63:62:79:63:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Apr 19 06:01:13 2026 GMT
Not After : Apr 20 06:01:13 2026 GMT
Subject: CN=43d80851b2f6a97d3a5a3c9f470212fb2e48d120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:0a:30:6b:a7:4d:56:04:bf:e6:1e:1d:f9:
17:8d:d1:f5:0d:d5:ee:b9:9f:66:e7:71:83:c0:50:
2f:25:96:a6:35:fb:7e:94:ea:d8:ab:ac:85:76:a4:
00:5d:63:45:51:86:23:67:5b:83:be:0b:23:d6:5c:
b4:d7:1d:a8:4e:d8:ea:ae:9c:5d:f6:f8:af:a8:53:
71:d1:34:2a:8d:12:e1:dd:64:89:e9:11:33:8e:d2:
63:1b:16:6c:16:f4:d3:72:25:0f:ba:24:de:e2:1d:
95:0f:c2:4c:ec:03:2f:bb:a6:78:62:9a:39:8f:75:
40:20:09:9b:d4:8f:5d:b0:81:14:95:ea:37:93:81:
9f:8c:96:22:3a:ec:69:c9:e3:0a:d3:1f:06:73:93:
2d:a0:d6:27:a5:a6:68:24:ba:28:05:e4:12:3f:3e:
3b:8a:5c:9f:0f:9b:70:79:56:ee:6e:1c:5d:22:6f:
d4:e4:69:e2:b7:c3:9d:55:15:18:ef:85:9a:11:dd:
4c:d5:d5:9d:38:82:39:aa:a8:06:a9:a9:d1:49:c8:
36:b0:15:a5:22:23:6e:63:9e:f6:ab:67:1a:26:eb:
2a:85:e7:22:8a:b8:28:b4:75:56:cb:11:ab:7c:e3:
b2:d5:f0:a3:2d:0f:7a:6d:a4:8f:9f:dd:ac:12:47:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:08:51:B2:F6:A9:7D:3A:5A:3C:9F:47:02:12:FB:2E:48:D1:20
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:55:e1:58:76:f3:01:93:03:d8:bd:f0:bc:8f:45:c1:1a:cb:
0f:63:b9:cf:d4:69:86:a6:ee:3d:e7:41:7b:af:44:01:bd:91:
c4:df:95:36:97:bc:98:96:4b:f9:d9:8e:4d:1e:80:45:a3:a9:
88:0f:50:26:0c:29:df:29:5d:d4:6e:ad:5c:04:82:f1:cd:d8:
ba:d7:29:d5:a6:47:62:a4:8a:97:ef:aa:10:bc:6c:d9:66:ff:
0b:f4:65:b6:42:fa:df:39:21:70:80:77:f2:14:42:97:28:b9:
06:94:7c:6f:fb:03:71:66:5f:10:29:0e:3e:18:9f:e8:40:0c:
0a:62:03:45:ab:67:4c:d7:e1:9e:af:87:0b:66:a7:da:7f:cb:
39:5f:49:01:24:55:95:ab:6d:a9:3a:4e:bf:c7:93:9d:f7:84:
da:39:a8:fa:dc:25:4c:01:39:0c:3e:17:15:9b:c8:18:86:66:
7f:1c:69:61:be:cc:f7:65:a4:18:8a:3c:67:86:56:e2:d6:e6:
8b:8e:ed:a6:ac:65:54:42:d2:e0:1d:de:c6:ae:37:01:98:8b:
f4:91:3c:aa:55:01:52:32:d9:2d:e0:c2:42:e1:b1:e3:18:34:
64:56:25:e0:84:ab:80:be:38:31:16:de:15:ee:ba:42:fd:97:
65:05:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:29 2026 by rpki-client