Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: VKae1Zv2u5dluxVT0np2QW8yVgPQ18cRlHoK5478Vfc=
Subject key identifier: 4A:55:66:D8:E5:50:54:91:D3:E4:FE:96:DB:12:2D:80:C6:23:DF:7D
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 01A13E94B320AFE4E14FA6CF7BFC56776D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 08:01:34 +0000
Manifest this update: Thu 15 Oct 2026 08:01:34 +0000
Manifest next update: Fri 16 Oct 2026 08:01:34 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: GjCP9N3ztPupQNrHyAKWgrraUzLhoS7zrQaPGeA+2FA=)
2: RV6tXj6W0nE7aN2FDSjnLLCyX9g.roa (hash: WdrE3hN0kAlM8z4J7L3E1iNI3SXMCvpVCPSlTiuP6e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:b3:20:af:e4:e1:4f:a6:cf:7b:fc:56:77:6d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Oct 15 08:01:34 2026 GMT
Not After : Oct 16 08:01:34 2026 GMT
Subject: CN=4a5566d8e5505491d3e4fe96db122d80c623df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:53:fa:a0:7a:3f:bf:e8:bd:89:fa:72:a1:
89:f0:e5:5b:28:20:cc:e0:b4:30:9c:07:28:61:af:
3c:eb:ef:f2:f3:21:a1:f7:9f:1b:c3:c2:51:c4:14:
66:b7:69:d9:bf:72:5d:aa:9c:c5:a3:b4:cc:61:e9:
9a:c9:1f:86:d8:4c:4a:cb:ee:e9:d8:6e:be:57:70:
85:8a:1e:0c:a1:f7:f3:43:63:44:69:b4:a1:93:e9:
4a:73:b7:1c:76:58:0e:9c:d2:94:d0:d1:9c:b1:f1:
84:e5:7d:c9:c1:fc:47:a6:14:da:31:e6:df:61:67:
bd:86:e8:da:82:15:47:6a:db:18:9e:54:25:92:bc:
72:1d:ee:a2:27:e0:34:e8:fd:ae:51:8c:36:34:8f:
4a:e2:d2:6a:cc:0f:79:32:19:77:e5:91:fd:f9:e5:
7a:2f:aa:76:f6:08:c5:95:ac:31:b5:42:26:3c:f4:
28:de:91:d0:8a:3b:cf:b3:98:7a:4d:41:65:0f:ee:
a4:f6:d5:05:29:d2:26:1e:f5:c5:75:74:6c:50:7b:
e5:36:1a:1a:4d:7f:e3:dc:83:84:d8:4e:09:5a:91:
86:07:58:89:a2:99:53:f1:10:74:ac:3a:2f:43:5b:
60:dd:1f:36:94:8f:6c:a3:f2:c6:5d:13:6a:ea:5b:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:66:D8:E5:50:54:91:D3:E4:FE:96:DB:12:2D:80:C6:23:DF:7D
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:4e:80:4c:f7:17:d7:37:04:0c:10:07:9c:06:ad:da:2e:
b8:39:88:02:fd:dd:54:9f:e8:f0:ca:b0:88:65:98:c1:a2:f8:
b4:8c:04:8a:24:c2:f1:be:cf:a4:cc:b0:2d:e8:c1:85:1f:b4:
43:4a:f0:89:10:69:88:ef:e2:96:ac:d5:56:9c:96:bd:80:47:
55:91:71:ae:4a:07:da:83:2f:bc:a8:0e:63:b7:2e:22:e4:9b:
f8:27:be:34:1f:b6:3b:e1:e7:b1:57:2f:b7:1e:3d:96:60:91:
b0:bc:73:49:e6:55:b7:f9:92:b7:1d:f5:1c:e9:d9:95:98:25:
66:22:af:50:b7:49:1d:55:c1:92:35:bb:32:70:c8:19:b7:d0:
c7:cd:55:72:9b:0b:f6:97:3c:95:7e:d7:0e:7f:46:30:10:e2:
98:ff:71:fe:2d:9c:38:7d:15:03:86:51:8c:16:53:86:48:59:
29:47:8a:d8:95:a7:ee:0d:af:c7:14:5c:62:f8:2e:e1:d1:4f:
25:d6:8f:2b:72:76:96:61:2d:ef:3c:bf:cd:99:6e:3c:1b:6d:
29:c8:bb:46:d1:50:27:24:8e:1a:b0:e1:23:62:8c:73:d8:a9:
6e:d6:05:2b:93:da:be:ab:26:b4:96:8d:8c:18:71:f6:ab:af:
65:28:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:18 2026 by rpki-client