Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: h4XE17xD4FfAA62FjyvNvrEAjtMDwdxMELdB59eVaqQ=
Subject key identifier: CC:AC:A6:39:6D:53:68:5D:21:C5:C2:C1:C9:C2:E2:7C:35:DB:4D:9D
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019D389BFD69036655650A3CA96F18424416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 12E8
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: t70Y6bA7uob2RQeUWPi29O1jUrM47DvbdFSyrgF7gX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fd:69:03:66:55:65:0a:3c:a9:6f:18:42:44:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=ccaca6396d53685d21c5c2c1c9c2e27c35db4d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:c1:9e:44:bf:2b:a6:1a:e5:98:32:5c:e4:
09:b2:d6:db:5f:27:f3:96:06:37:33:85:69:84:51:
fb:2e:9e:16:1b:2a:c2:79:bd:4a:e4:4e:70:a6:40:
a6:67:00:82:01:bc:9d:13:3c:da:8d:5c:5f:58:51:
fd:a1:3a:76:fb:d9:66:72:cb:a2:0e:97:09:0b:1e:
d8:1f:21:de:20:bb:18:f0:fb:08:16:ab:44:24:cd:
66:6c:b2:c5:e6:61:91:4d:ba:6c:2c:21:f7:ed:3c:
20:8f:a3:8d:8d:7f:65:84:c1:9e:11:64:17:7d:20:
e6:c6:da:a2:66:5a:4a:2e:4b:32:fc:58:66:51:78:
20:9a:3a:a8:ec:41:1b:cb:48:0d:91:92:23:fd:7f:
b3:f1:38:0c:88:69:af:eb:2b:a1:dc:91:35:41:bf:
b5:ac:5a:47:13:c9:c2:c1:55:62:23:1a:df:d3:cc:
32:96:1e:cb:7a:92:6f:87:87:3a:cd:86:9e:bd:76:
a4:dc:25:40:7d:31:2b:ec:1f:b7:62:da:53:f2:8c:
5d:78:4c:8d:83:5f:73:93:84:3f:b2:24:a0:44:99:
71:c3:3f:8b:9f:bf:da:cf:af:d9:70:a6:e8:8d:4e:
27:08:9c:2f:4a:2a:58:b6:43:b9:cc:6c:63:56:00:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:A6:39:6D:53:68:5D:21:C5:C2:C1:C9:C2:E2:7C:35:DB:4D:9D
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:cf:77:4e:82:d5:0c:06:d9:53:5b:e3:76:04:38:51:40:
59:13:ce:0a:29:eb:44:a8:61:6a:8a:91:d1:92:2d:0c:cf:60:
d0:86:26:2c:87:a2:90:36:4c:d8:33:04:4d:3d:42:3f:0c:4f:
a5:4c:9e:98:d5:45:10:e5:49:37:b2:05:02:6a:9c:29:a8:7f:
a4:c3:f3:c6:91:27:66:8b:1e:af:27:06:b7:3c:1e:30:ad:7b:
9b:a9:07:84:62:8f:e6:d2:39:0a:9f:5f:40:33:35:46:53:85:
3c:60:c7:68:2a:fa:a6:47:86:6a:7b:08:b5:7e:98:b3:a4:b2:
46:21:e9:fa:20:1d:d3:5c:48:fb:32:41:d7:43:14:91:dc:e3:
55:f0:78:06:27:b0:a4:19:b4:6f:65:52:b2:ae:d9:2c:35:c0:
bc:2a:14:82:84:19:b1:43:51:7e:fe:78:3d:7c:92:11:59:3c:
44:26:7e:6a:ef:7d:3f:ef:5d:56:5f:e6:0f:b3:e5:59:82:42:
68:29:fe:8a:e1:59:3f:93:dd:75:cc:cf:08:17:13:0d:02:32:
a6:59:24:35:6a:1a:92:5a:7d:45:1e:6a:07:1f:db:4f:81:3d:
c7:97:c2:3f:88:29:09:24:c5:35:be:bd:f0:58:91:dc:90:86:
3d:9f:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:47 2026 by rpki-client