Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: 0VG1bhP2xkz4/wgqj5R3SUYrug+OcPh0Sk2yEi72kVw=
Subject key identifier: 9D:69:80:0B:36:A1:F0:B3:A3:46:FC:7F:D2:A7:D1:26:E8:F0:01:34
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019CAB3490E3B9800F99CBE80B62027D65AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0DF7
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: 56bo4X61iAhpnIla2spo3r0X0Aot61/KC+rrl5HswU8=)
2: fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (hash: OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:90:e3:b9:80:0f:99:cb:e8:0b:62:02:7d:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=9d69800b36a1f0b3a346fc7fd2a7d126e8f00134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:86:5a:60:79:74:7f:77:cc:50:ef:45:71:
76:0d:48:ca:14:b5:ef:7d:1f:f3:60:b9:65:e9:42:
3e:26:5d:29:6d:81:47:82:80:39:90:7e:78:e2:88:
cd:a1:a3:45:93:be:d4:e6:5f:99:fe:9d:b2:fd:45:
2c:73:6e:d1:59:7e:18:b0:41:08:94:3b:03:d8:e8:
f3:8e:33:66:d4:ec:ca:81:5e:62:a0:23:76:be:3d:
37:b4:15:23:66:aa:09:84:41:32:de:e7:7b:e6:bc:
cb:57:53:2a:92:d3:cb:e4:8d:ab:ce:7d:b2:aa:c5:
57:fa:a2:1d:40:f1:48:14:cc:7a:94:85:5d:e1:58:
d9:bb:87:0e:90:e7:ca:e3:a9:35:5a:d8:12:e3:1f:
9c:0f:bc:1f:c6:63:fc:1b:9b:86:0a:6d:3f:0e:1a:
c5:ff:90:e2:1e:77:06:fd:a6:9c:07:20:89:c6:e2:
89:00:47:41:1f:c8:d7:9f:ba:be:22:a3:70:ba:e8:
e0:3a:41:a0:f0:ca:48:eb:36:6b:ef:fe:4e:e2:29:
73:f7:55:da:1d:87:dc:b5:a4:04:7c:14:91:13:21:
13:ef:e9:d6:42:d0:f8:7b:17:c1:29:91:9e:1a:03:
82:18:de:b3:85:bd:0e:16:33:d1:b2:4b:1c:b6:3e:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:80:0B:36:A1:F0:B3:A3:46:FC:7F:D2:A7:D1:26:E8:F0:01:34
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:31:c0:69:d0:1b:32:26:0d:81:11:98:df:5a:cb:5c:d4:2a:
ef:d2:ee:79:93:a3:9d:f7:99:36:d5:c1:56:ff:8f:12:39:2c:
bc:1b:43:d6:7e:76:ce:c4:e7:f2:e2:5f:cd:66:d3:d7:34:bf:
38:9c:3b:fa:93:53:0a:e3:52:34:2e:b4:4c:3b:39:29:a5:2d:
91:8e:f5:04:36:c7:05:7a:61:40:2e:dd:82:c7:98:4e:c9:e6:
b8:a4:da:8b:77:a5:5c:e7:d7:e7:ab:4d:26:db:89:74:bc:e4:
9c:19:88:20:a4:8a:16:2e:1b:35:4e:6a:9e:8c:a8:a7:5f:e8:
d0:d4:74:55:af:6d:b0:7b:e4:dc:0a:ef:a6:7c:4e:3a:c8:9f:
84:5c:5a:c5:fc:ea:6c:88:04:d2:c1:16:1c:48:97:0c:55:b4:
23:d2:aa:72:29:06:5e:b4:cb:db:17:12:21:82:5d:6c:ae:fb:
b4:05:f9:df:02:63:60:a0:61:9a:c9:92:93:59:75:52:2e:fb:
33:a2:11:0e:40:68:60:5d:4c:7e:8a:f4:bc:85:9a:a0:30:eb:
d9:27:af:6b:9f:44:f7:b2:39:e4:62:1d:58:03:20:b0:6f:0f:
eb:01:fe:52:d6:12:23:a4:ce:16:8a:ac:f4:b6:ec:c2:a2:57:
53:07:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:44 2026 by rpki-client