Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier: 5ACo8aEZ8sQcyhB/g/2x+ZcTKfQ6Rw4dqcOjo7h44mc=
Subject key identifier: 77:05:3E:D0:BA:1F:78:CF:43:18:27:91:94:2B:C9:52:6C:B7:FE:4C
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 019F1943878BC78209A8454ACAFF9D638DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number: 0A6C
Signing time: Tue 30 Jun 2026 16:01:23 +0000
Manifest this update: Tue 30 Jun 2026 16:01:23 +0000
Manifest next update: Wed 01 Jul 2026 16:01:23 +0000
Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: g/2Fc3Ia1+v/uQOfNewmGRXiZ53xTB3OR1F0PDs5mt4=)
2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:87:8b:c7:82:09:a8:45:4a:ca:ff:9d:63:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Jun 30 16:01:23 2026 GMT
Not After : Jul 1 16:01:23 2026 GMT
Subject: CN=77053ed0ba1f78cf43182791942bc9526cb7fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:9f:0f:20:84:1f:c4:83:22:b6:37:df:8a:
af:75:82:8c:57:27:a1:33:e6:9c:51:ae:05:cf:15:
5d:4b:ef:c6:2f:23:e7:b4:6b:f1:bb:c5:80:34:01:
d6:39:c4:44:9d:e7:05:3b:bb:14:5c:fb:4b:5b:ea:
ac:94:23:4b:7b:b8:2b:65:b2:74:86:43:2a:f9:ac:
49:87:1b:db:64:da:2b:14:51:8a:7d:df:2f:82:0f:
3c:c7:35:91:4d:8c:ee:16:07:fb:db:f0:c0:0d:7b:
5b:fd:7a:e7:1f:70:c0:fd:fb:86:43:17:f3:a9:7b:
84:68:51:7a:dd:f1:d2:d0:1b:34:5c:f7:71:ba:1a:
48:b4:da:eb:cb:27:75:8b:d0:0c:c4:90:76:99:3c:
36:94:1d:b4:e5:b6:83:ed:73:03:14:5a:d3:64:42:
68:f2:cc:0b:41:cb:ba:34:cb:e3:85:fc:48:aa:84:
d8:0c:ab:d9:e5:d5:4b:40:29:b3:93:1e:b9:08:92:
0d:81:2c:82:cf:e3:51:b2:c7:96:34:3f:ef:13:f1:
e1:88:3d:75:6d:e4:39:84:d3:d2:40:80:03:02:0f:
ae:19:3a:08:eb:39:f3:2e:69:cd:c5:7d:57:74:fe:
7d:97:5c:59:c6:8f:2e:da:87:39:b7:2a:27:5f:dc:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:3E:D0:BA:1F:78:CF:43:18:27:91:94:2B:C9:52:6C:B7:FE:4C
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:1a:fd:66:df:fc:47:65:4f:0f:0a:41:31:ae:31:ce:4b:
04:0e:2c:70:8f:56:fa:4c:1e:ea:4e:32:f8:eb:db:da:3e:8a:
3a:3a:34:a2:28:fb:c2:fb:f1:dd:2c:8a:cf:8e:25:0e:68:8d:
62:59:5b:49:e7:db:11:2d:af:29:f3:7c:72:db:dd:3e:36:32:
aa:e6:e0:b2:78:97:f7:c9:8c:87:94:30:71:4a:0b:a9:b1:9e:
ef:c1:4c:40:be:1f:35:7a:8f:b7:05:c6:cb:1e:ab:54:b8:db:
73:b9:c8:2a:ca:29:39:ec:a4:ad:da:3a:c4:e5:77:76:95:08:
13:55:c6:2c:fd:54:1e:d5:94:1c:f5:70:01:01:5d:67:3b:10:
9c:ff:5b:83:f8:a9:4f:c3:0b:2f:81:43:21:0f:df:b9:4f:2f:
7e:8f:e2:23:b1:3d:45:58:ee:b8:99:73:7e:65:fc:8c:0d:e2:
e5:bd:97:ef:ba:18:b1:96:fc:9e:c5:38:4d:95:42:80:61:cc:
31:93:e5:57:77:79:98:3b:0c:28:a0:05:c3:de:39:c1:34:0e:
53:82:21:44:ac:76:3e:bc:ad:cd:2e:42:04:ed:ae:0e:a5:b6:
14:56:33:bb:9d:2f:43:0b:4e:a8:03:6c:d3:f1:80:df:a1:fc:
75:dc:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:13 2026 by rpki-client