Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: nHiq75uVR/blhf36jrLoIMgCJqPSuErthn0DKSM5IYA=
Subject key identifier: EB:71:81:95:71:71:2D:AB:1A:9B:6F:70:B8:D6:12:27:B1:3E:55:AC
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 019D3753264B91068AA5A620C7C2FD37BB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: ZCYkh+WobW+CPqM1CS5Y2uQ7bBjdcdQiK+h0cDWKW60=)
2: RV6tXj6W0nE7aN2FDSjnLLCyX9g.roa (hash: WdrE3hN0kAlM8z4J7L3E1iNI3SXMCvpVCPSlTiuP6e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:26:4b:91:06:8a:a5:a6:20:c7:c2:fd:37:bb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=eb71819571712dab1a9b6f70b8d61227b13e55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:f4:56:91:79:30:a2:6a:f7:85:46:33:1e:
6e:bf:a8:74:59:3b:e2:dc:76:0b:e8:35:79:9c:68:
b1:0c:2b:80:9f:67:e0:1b:65:21:db:3a:a6:ba:15:
d1:66:17:93:47:7e:cb:89:8a:a8:a4:86:86:ff:b3:
a4:22:42:55:4c:e9:73:54:19:a1:33:1e:7d:87:76:
a1:b9:7c:3c:e3:a2:ea:b3:59:3f:20:fc:71:1a:b7:
56:d2:23:db:73:39:09:97:3e:7b:04:e5:4c:37:05:
f6:b5:f0:dd:92:45:84:ca:a0:33:fb:38:d2:7c:cb:
f0:27:5e:1e:90:7e:28:3e:e1:83:c2:ac:c3:42:14:
5d:02:94:6b:21:c3:3a:1f:b9:20:81:61:0d:53:d4:
e3:db:6f:50:45:64:e4:88:14:8a:4c:e4:90:3a:74:
54:26:1a:21:15:1c:0f:81:1f:ab:31:26:25:e9:20:
be:f6:c0:2c:08:ce:81:0b:97:89:6c:50:b4:08:1d:
63:0b:47:a4:01:8a:16:5e:cd:6b:ec:d7:5e:51:d8:
cf:35:07:f6:25:cb:ac:75:a3:e4:8b:78:08:83:2c:
4b:2f:63:c5:f5:48:60:4d:4c:75:27:10:29:93:36:
9f:5f:fc:cf:6a:2c:79:18:6e:8f:50:2b:a9:9f:5a:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:81:95:71:71:2D:AB:1A:9B:6F:70:B8:D6:12:27:B1:3E:55:AC
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:b3:22:ad:94:94:b9:8d:fa:5a:05:67:70:a8:3e:40:b2:
99:7c:a8:3b:23:f7:ca:4f:eb:40:e7:42:ce:3c:c5:58:6c:8d:
94:54:6c:83:aa:4d:ce:98:cb:57:25:17:e7:e6:f6:16:e5:d6:
69:cf:0e:94:87:fc:31:90:9d:d6:b1:86:61:4c:e8:9c:19:09:
1e:48:cc:80:69:97:20:23:8c:5a:07:ef:52:33:38:d7:98:06:
fe:30:87:a1:73:b6:db:76:2e:b8:54:7e:c3:54:9b:50:dd:4e:
2d:b6:57:70:6d:dd:0b:40:c1:5f:64:b2:fb:f4:0a:2b:b8:ec:
cb:1b:2c:02:39:b8:34:7a:5d:50:f1:7e:cf:03:94:bb:62:a9:
ca:21:48:5f:6e:77:7f:fb:7a:e1:40:0c:3b:d9:63:66:4f:36:
13:ac:d1:58:e2:66:9e:5a:66:34:ec:3c:a7:96:87:69:23:da:
a2:b1:45:b5:20:7c:9a:e0:10:b2:d1:c8:e9:a4:a8:d1:39:e3:
6b:34:f9:43:55:43:ee:45:f4:1d:f7:96:78:35:ed:04:21:48:
81:c0:fc:9a:5c:f6:f5:d2:08:1e:4d:f2:47:56:d5:a6:a6:90:
17:b4:7e:46:9e:d2:87:01:c8:dd:9e:41:3d:bc:06:47:e3:5b:
84:fb:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client