Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: Fc5sFrTB/cnOzZ5jkBqbeCzgV83zzNdPcKIIBAFI/6o=
Subject key identifier: D1:83:6C:42:D4:4A:D4:5A:F3:12:DD:27:A6:4D:E8:CB:0C:71:5A:34
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 019F178BD4F0E7734F36E9C2CBB34F8D33A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 13E0
Signing time: Tue 30 Jun 2026 08:01:07 +0000
Manifest this update: Tue 30 Jun 2026 08:01:07 +0000
Manifest next update: Wed 01 Jul 2026 08:01:07 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: /0uNGqNiD2bRE+fiodk9yjb7zrXIHuj4joaJY91A5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:d4:f0:e7:73:4f:36:e9:c2:cb:b3:4f:8d:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Jun 30 08:01:07 2026 GMT
Not After : Jul 1 08:01:07 2026 GMT
Subject: CN=d1836c42d44ad45af312dd27a64de8cb0c715a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:25:86:56:63:a5:3d:4c:c2:98:97:84:65:
d6:6a:85:c4:76:81:4a:ec:79:6b:62:d9:89:83:1c:
d8:78:70:dc:8f:0b:dd:52:87:79:26:c8:f5:61:e8:
a3:95:d2:86:01:56:7e:58:d0:0e:b9:73:11:f1:69:
d8:8b:1c:d5:2e:d1:45:ad:dd:d2:71:f3:02:29:5d:
ba:4e:da:3a:d9:95:28:74:6f:51:7b:f7:1a:b5:77:
ec:99:18:4e:0b:f4:dd:bb:c4:2a:6d:c9:bc:50:c7:
a4:93:30:91:0a:5a:f8:63:ff:b2:67:df:c4:54:f8:
3d:a3:fd:c0:3e:6d:38:49:67:3e:73:62:d7:06:0d:
dd:b6:3c:ef:68:9b:e4:4c:31:c0:c1:69:8d:08:3d:
c4:14:d5:2f:5f:08:18:11:cb:09:5e:6f:51:6e:a4:
8c:b3:6e:06:a2:2f:8a:f7:e5:c8:88:24:d2:96:08:
f8:e4:76:5e:93:a9:c8:90:98:0d:3c:9e:8c:26:38:
ce:50:4b:73:c8:37:26:61:db:6a:d6:ee:1f:9c:ed:
40:65:a2:89:92:65:6a:93:ad:b0:1e:e4:48:1c:e5:
4c:28:cc:8f:bd:62:26:49:f7:82:f3:83:43:a9:5f:
01:80:92:4b:fc:6f:e8:77:44:78:6a:0f:9c:d3:f8:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:6C:42:D4:4A:D4:5A:F3:12:DD:27:A6:4D:E8:CB:0C:71:5A:34
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:c7:5a:62:3d:22:e4:bb:aa:81:8d:d1:19:de:48:2a:42:
69:77:ff:e5:15:52:45:4f:7d:39:5a:56:3f:dc:38:6e:bb:d3:
7c:10:10:f1:b3:6c:7b:40:ea:88:58:90:bb:d6:94:fb:88:7f:
3b:f3:df:98:1b:28:9e:78:2a:73:12:de:b6:51:d8:18:41:4e:
cb:a7:54:9e:65:c6:e2:34:1f:5f:fb:c4:39:61:7d:ac:ca:e7:
fd:a4:e8:72:b8:3b:ce:e7:95:6d:d6:72:26:fd:67:bc:91:be:
64:db:3d:df:7b:30:ba:78:d5:99:c5:da:dc:f1:d0:9e:e2:6b:
30:5d:f3:ae:df:6a:48:b7:16:4e:df:e4:ea:01:9f:1a:02:cf:
a5:64:99:d6:04:53:cf:00:22:d9:f4:87:b7:9e:cf:86:a6:a5:
ec:6c:29:64:15:b8:e7:ae:e6:12:ac:7e:f8:8f:e8:e8:0c:1d:
d2:0c:ff:b7:dc:c7:74:44:a4:ac:ed:84:cb:dc:3a:64:bd:53:
9c:3c:98:14:6e:d6:25:6d:f0:50:40:b6:bc:15:e8:da:38:d9:
6d:13:55:ea:10:0b:bf:ef:3d:41:ca:db:a2:da:0a:77:bc:41:
6e:5a:8f:ed:69:0b:e6:d8:40:39:bb:e3:ba:0b:59:63:57:b2:
f1:a7:63:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xi9Tw53NPNunCy7NPjTOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWQzNTE4YmRlNTk2MmJmZmU3M2U3OTg4NDcxOGU2ZWQw
ZmE0NTYwHhcNMjYwNjMwMDgwMTA3WhcNMjYwNzAxMDgwMTA3WjAzMTEwLwYDVQQD
EyhkMTgzNmM0MmQ0NGFkNDVhZjMxMmRkMjdhNjRkZThjYjBjNzE1YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDAlhlZjpT1MwpiXhGXWaoXEdoFK
7HlrYtmJgxzYeHDcjwvdUod5Jsj1YeijldKGAVZ+WNAOuXMR8WnYixzVLtFFrd3S
cfMCKV26Tto62ZUodG9Re/catXfsmRhOC/Tdu8Qqbcm8UMekkzCRClr4Y/+yZ9/E
VPg9o/3APm04SWc+c2LXBg3dtjzvaJvkTDHAwWmNCD3EFNUvXwgYEcsJXm9RbqSM
s24Goi+K9+XIiCTSlgj45HZek6nIkJgNPJ6MJjjOUEtzyDcmYdtq1u4fnO1AZaKJ
kmVqk62wHuRIHOVMKMyPvWImSfeC84NDqV8BgJJL/G/od0R4ag+c0/ieTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGDbELUStRa8xLdJ6ZN6MsMcVo0MB8GA1UdIwQY
MBaAFAUdNRi95ZYr/+c+eYhHGObtD6RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQt
YzViZWIyZTI0NWZlLzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQtYzViZWIyZTI0NWZl
LzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8fHWmI9
IuS7qoGN0RneSCpCaXf/5RVSRU99OVpWP9w4brvTfBAQ8bNse0DqiFiQu9aU+4h/
O/PfmBsonngqcxLetlHYGEFOy6dUnmXG4jQfX/vEOWF9rMrn/aTocrg7zueVbdZy
Jv1nvJG+ZNs933swunjVmcXa3PHQnuJrMF3zrt9qSLcWTt/k6gGfGgLPpWSZ1gRT
zwAi2fSHt57Phqal7GwpZBW4567mEqx++I/o6Awd0gz/t9zHdESkrO2Ey9w6ZL1T
nDyYFG7WJW3wUEC2vBXo2jjZbRNV6hALv+89QcrbotoKd7xBblqP7WkL5thAObvj
ugtZY1ey8adjIw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:24 2026 by rpki-client