Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File: BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier: pYfkIxmia7mVdJZBnGV6855+nbPPnmOsiVD+VX/aJQo=
Subject key identifier: C2:0A:AF:C8:B0:89:90:F4:82:B6:79:9E:7B:BB:AF:03:AF:85:CB:BA
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial: 019D389BD7F55D6A106005ED570119262B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number: 140C
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: NWwyQ14tB+D8mlmSFnOSaXVGZPFUuCACTqCqUPdpSkA=)
2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d7:f5:5d:6a:10:60:05:ed:57:01:19:26:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=c20aafc8b08990f482b6799e7bbbaf03af85cbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:59:1b:27:75:2c:53:65:91:33:50:a9:84:
cc:3c:8e:0b:b7:30:47:e7:89:f2:fb:b9:81:26:7c:
2a:27:95:df:9c:13:ac:83:2b:0e:f6:27:62:5d:48:
dc:ea:fa:4d:4d:08:d6:f8:04:8a:29:2c:ae:7d:a8:
cc:8c:70:37:e6:86:a5:5d:71:72:11:40:3a:26:c5:
42:94:1a:0b:aa:b3:cd:cc:38:7a:c7:7b:f8:53:31:
31:3b:89:e8:a6:3c:64:4f:88:50:92:d7:f9:f4:bb:
54:be:59:1e:dd:c6:13:97:11:05:00:c2:2a:89:0c:
e6:94:8a:45:8b:8c:28:84:85:77:4f:2a:ee:58:46:
56:57:50:4b:96:7f:5b:bd:d1:f1:ad:8c:b8:90:13:
26:63:b6:ef:cc:c2:a1:25:ab:a7:d3:5d:8e:fe:5c:
f6:90:84:5c:76:36:73:76:59:53:cf:8d:90:ad:a3:
8b:e8:63:b8:cc:88:77:99:86:e0:89:3e:76:d9:bf:
7e:e1:70:a1:a6:d9:85:e9:e2:e8:aa:c8:bd:e8:c5:
a4:52:a0:92:7d:f5:96:46:10:8e:ed:ff:9e:8b:77:
65:f7:ef:93:ef:8d:58:27:73:c5:82:0b:f2:c4:c9:
91:8f:cd:8e:f0:d0:a7:d6:62:59:95:a9:4c:31:e6:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0A:AF:C8:B0:89:90:F4:82:B6:79:9E:7B:BB:AF:03:AF:85:CB:BA
X509v3 Authority Key Identifier:
keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fd:ec:39:ab:06:82:05:33:d5:5d:a1:8a:de:5d:b5:1d:b0:
00:a2:b4:33:25:41:c4:b8:c8:c7:17:84:e2:2c:e1:1c:76:8c:
2c:e3:52:0d:c0:cf:5a:6c:e9:cd:f4:81:e9:8f:15:d6:07:8c:
d2:a5:30:3c:8f:12:d8:58:04:28:94:e7:52:b0:85:50:b8:17:
75:18:cf:ec:91:eb:58:bc:48:09:b3:5e:95:9b:3b:b9:fd:50:
c2:59:ab:6f:ff:13:6a:65:c0:67:be:cd:2f:b1:d9:dd:a8:f7:
3f:dd:5b:b5:31:f4:c3:2e:ab:9a:ae:1f:88:16:2b:6b:48:3a:
8a:3a:5f:00:f3:dd:62:de:e1:69:72:d3:69:08:18:53:7a:1a:
75:1f:d3:7f:23:6a:e8:53:43:3f:9f:5b:1d:7a:ea:7b:7f:a3:
c3:d8:c3:b5:e7:33:ef:22:9b:94:83:03:e6:c1:11:ce:16:85:
da:ee:bd:6d:25:85:1a:8e:cf:3b:bf:8a:20:cd:36:1c:d0:6b:
dc:be:35:9d:9f:4c:8a:1c:ab:3f:aa:48:8c:d7:71:a2:e9:85:
00:8d:88:1a:cb:60:b8:de:9f:e2:e3:b4:2c:ea:a0:2c:80:67:
77:d5:0e:e1:34:13:e2:4c:ce:41:52:63:e0:95:da:c1:62:b1:
23:14:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:22 2026 by rpki-client