Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: uMTAaHGVELKNXwiH1cKyYUhddpq1M5VnsxPOF+4OfZE=
Subject key identifier: CB:18:FA:36:62:77:86:DB:F4:11:87:29:D3:5A:83:6B:ED:9B:B9:0E
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 01A14015E5ABBFF745B7661CAE485B0A76E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 0777
Signing time: Thu 15 Oct 2026 15:02:19 +0000
Manifest this update: Thu 15 Oct 2026 15:02:19 +0000
Manifest next update: Fri 16 Oct 2026 15:02:19 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: ohcsa6ehVCpycKtKbaygxics39wp7wCdJ1DX5Y62Wl8=)
2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:e5:ab:bf:f7:45:b7:66:1c:ae:48:5b:0a:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Oct 15 15:02:19 2026 GMT
Not After : Oct 16 15:02:19 2026 GMT
Subject: CN=cb18fa36627786dbf4118729d35a836bed9bb90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:69:a0:f9:a8:21:ba:1c:4c:a2:ad:5a:d4:
bd:c6:90:ac:c1:42:e7:99:2e:18:df:7d:e2:27:e9:
66:3a:85:07:60:a9:cd:b0:f8:7f:fd:6d:5f:a0:13:
c8:27:9c:54:1b:aa:05:24:d5:31:d2:e2:08:df:da:
02:31:33:6c:fd:08:69:95:68:15:44:bd:51:9e:c7:
ba:5c:d3:db:62:9b:e2:19:71:60:86:f2:5a:2a:3b:
96:9b:f8:dd:13:e4:da:81:1a:9f:59:79:fe:9f:f6:
ad:f0:b0:bc:9e:99:4b:10:c2:a3:b5:d8:f6:bb:20:
45:9c:ff:4f:8c:38:c7:6a:c0:d9:4b:35:10:2c:1b:
12:26:45:a8:5d:16:94:24:46:39:e2:d9:4e:fc:c6:
54:d2:12:88:33:f1:9f:34:7a:18:31:0c:bf:b0:3b:
f6:f2:74:4f:90:09:af:8e:49:43:ad:a9:62:38:3e:
1a:4f:5e:83:93:45:fa:b5:e9:87:ff:44:31:87:df:
49:d4:f5:e1:3a:b5:55:fe:a6:05:37:02:50:36:2e:
50:59:26:52:ce:58:94:ff:20:7e:0a:be:56:ce:97:
15:9e:62:28:02:41:91:ab:b0:e3:72:10:c6:c6:aa:
d2:e5:5c:09:d4:ba:9a:84:53:d3:e3:98:3a:ee:08:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:18:FA:36:62:77:86:DB:F4:11:87:29:D3:5A:83:6B:ED:9B:B9:0E
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:19:73:3c:97:09:b8:3f:42:2e:ce:ab:16:c1:5b:b8:1a:
4d:e5:05:ab:a7:74:62:da:64:36:75:a6:de:b9:9b:7b:e8:ea:
08:35:bc:ca:c3:ea:05:80:1a:2f:2e:34:ba:46:5b:1b:9f:24:
c5:80:83:de:23:cf:8c:9c:00:01:bd:9b:34:ec:9d:e8:0c:15:
0e:71:c0:39:cf:49:67:21:61:df:0a:d4:93:27:f0:2f:47:75:
92:6b:96:04:5c:e1:ef:07:7d:e6:8c:db:e3:9f:2d:ef:0d:b4:
73:15:77:a3:7d:be:84:65:3c:00:2f:ac:cf:36:40:83:6c:9a:
ee:81:78:03:04:d4:35:c5:53:44:ab:6f:ea:15:c2:b9:8b:95:
e4:98:fc:a3:81:7a:38:32:cf:04:b5:c1:3d:79:7c:42:b2:b9:
7b:94:ce:4b:d4:ec:70:17:f2:45:15:a5:13:e2:58:9d:9a:2a:
c4:54:38:8d:7a:9e:50:85:70:d8:5e:21:34:7b:40:b5:74:33:
60:00:24:78:f0:07:97:45:52:45:02:bb:d6:7c:08:14:a1:30:
78:7d:26:eb:8e:09:84:21:2c:d8:c3:46:a7:03:5a:2c:7c:c6:
46:8a:39:18:3b:ec:0e:1c:a4:b7:8f:34:ae:35:3a:4e:ad:f4:
df:ec:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:55:16 2026 by rpki-client