Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: ojDjRAy93XzTQ6G3dsmZivRHaSLlBMqOA53IOdE3wBw=
Subject key identifier: 4A:2C:FA:B9:A8:99:8F:F2:96:D7:22:5E:48:8F:0A:78:F0:B7:4C:3E
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 01A13DEF2D7436F3CB722967314DA3146103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 14FD
Signing time: Thu 15 Oct 2026 05:00:47 +0000
Manifest this update: Thu 15 Oct 2026 05:00:47 +0000
Manifest next update: Fri 16 Oct 2026 05:00:47 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: oOUR+yPNlMgU7EXV8EJxvVo1+zEXMygK0zqfPnCAmFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:2d:74:36:f3:cb:72:29:67:31:4d:a3:14:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Oct 15 05:00:47 2026 GMT
Not After : Oct 16 05:00:47 2026 GMT
Subject: CN=4a2cfab9a8998ff296d7225e488f0a78f0b74c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:b7:86:67:f3:70:c2:37:a9:4e:54:7f:25:
36:df:86:f6:39:2e:ff:cb:14:77:0c:08:16:99:94:
c9:37:99:88:8c:36:78:30:ab:e5:79:e9:6c:8b:11:
72:ff:46:db:a0:72:ad:b9:c3:95:d7:9f:ca:25:4d:
2c:54:df:25:1a:2b:e3:d1:0d:3e:71:3c:0f:44:bf:
f5:6b:c5:6c:9f:7a:ff:cd:2b:de:64:08:3f:8f:40:
38:0f:4d:d5:44:ab:a5:a6:95:fa:44:52:07:d1:04:
cb:7e:2a:5a:6f:ae:be:37:d8:56:72:a0:63:ca:95:
52:24:42:cd:9b:09:06:ce:7c:4d:bc:de:59:0f:dd:
6e:32:9e:f0:7f:68:46:11:27:7f:57:20:2f:e0:b0:
fa:0e:94:dd:fb:e3:f4:96:61:9e:ff:91:5c:f5:43:
1a:fe:51:a6:d6:88:97:39:22:8d:d8:5c:e1:15:93:
f7:ee:38:f3:e7:0b:fb:41:d8:46:c8:fc:83:70:d0:
dc:8e:7f:ac:af:54:e2:96:2c:77:64:cd:34:34:52:
36:37:13:b5:f9:a2:d0:76:13:6c:24:b1:e8:3f:40:
a9:2d:f7:ab:09:02:63:92:61:93:38:49:cb:5d:47:
36:24:f5:c8:08:6c:ce:6f:8e:60:ae:f1:d5:ca:ad:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:FA:B9:A8:99:8F:F2:96:D7:22:5E:48:8F:0A:78:F0:B7:4C:3E
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:42:b8:ed:ff:c0:1c:c8:12:4a:bb:26:e8:a8:54:27:cb:
2b:7a:a3:9a:83:42:b3:37:0d:95:ff:b9:56:8f:b5:49:23:88:
83:94:72:aa:40:9e:42:79:af:27:af:8d:0c:52:2a:f8:b0:0a:
cc:82:5f:78:5e:88:0f:24:73:cd:57:af:95:54:ab:de:09:1e:
16:c3:0e:07:84:a7:f3:db:b1:bf:99:00:4f:c0:bc:f7:3e:27:
42:22:68:0c:7b:42:b1:a8:ab:88:a2:f4:bc:c7:9b:1e:ca:27:
ac:44:8c:bc:a0:02:f7:43:c9:9d:c2:e5:6e:6f:0f:29:00:df:
db:d4:df:88:e2:fc:27:b2:55:e7:c0:8b:cf:f3:28:31:2f:ff:
d9:82:89:91:4f:39:96:9c:1e:c2:5d:4a:97:a0:34:2b:7a:a5:
fa:4a:49:d3:bc:16:bb:10:21:3b:fa:88:d7:ac:10:70:95:17:
cf:67:1f:04:d2:ce:d2:69:bb:6e:b0:d7:1b:47:6b:ff:7f:e9:
89:9d:84:a2:fb:94:10:d7:b0:06:5c:ad:5c:8c:06:d0:4b:17:
c3:48:15:c7:ff:2d:ca:12:11:21:b8:a6:00:e1:c2:17:80:04:
cd:72:e3:7b:20:fa:6b:91:51:f6:1e:b7:94:d9:52:66:9a:6e:
d0:2e:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:28 2026 by rpki-client