Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
File: BRdb6cBxQma6B0WpRMCISKOXy5g.mft (raw, json)
Hash identifier: OlvGklQdi9NDExdJcFujn4FB0GgE08NlFCKe0l/SJmM=
Subject key identifier: 45:05:E2:F8:DC:56:0E:C1:9F:22:D2:90:7D:F9:C3:6F:8F:03:04:36
Authority key identifier: 05:17:5B:E9:C0:71:42:66:BA:07:45:A9:44:C0:88:48:A3:97:CB:98
Certificate issuer: /CN=05175be9c0714266ba0745a944c08848a397cb98
Certificate serial: 01A0412AD5A08C1093DC61D143B6A5819F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:01 +0000
Manifest this update: Thu 27 Aug 2026 03:02:01 +0000
Manifest next update: Fri 28 Aug 2026 03:02:01 +0000
Files and hashes: 1: BRdb6cBxQma6B0WpRMCISKOXy5g.crl (hash: D4NOzJpdR9+kkbAQnSRBO1k86KWdyHzIdohsEJWqCMc=)
2: vACXBua6frn6XxXhU6e-bpttEyw.roa (hash: UeXFL+IQbDAX8ty16Dx0/22DrbrGLRV+5hTeRrDoCic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:d5:a0:8c:10:93:dc:61:d1:43:b6:a5:81:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05175be9c0714266ba0745a944c08848a397cb98
Validity
Not Before: Aug 27 03:02:01 2026 GMT
Not After : Aug 28 03:02:01 2026 GMT
Subject: CN=4505e2f8dc560ec19f22d2907df9c36f8f030436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1e:c9:00:7c:34:61:92:60:f3:83:7f:97:4b:
95:7a:bc:bd:6a:10:a2:38:d7:a8:09:a9:43:8f:a5:
32:2c:08:c4:84:7d:7e:b3:03:7d:a4:ee:89:cb:38:
b1:5a:37:4d:21:41:f7:76:a9:92:71:97:7d:23:e8:
5d:ed:e5:c8:9f:25:5c:35:79:e5:1d:4b:8d:d3:88:
c3:9b:d5:fc:bd:4e:2a:f7:e0:eb:42:25:6d:94:ce:
0c:d8:b2:91:5b:43:31:2d:bf:58:05:4c:f9:f9:63:
54:42:e6:4a:f9:28:6a:f2:d2:c7:77:9e:45:ac:e6:
6b:74:7a:ea:95:78:1f:39:a9:be:dd:ab:96:7f:b2:
20:7d:af:22:a4:a2:a8:7f:d2:a3:70:3d:36:64:30:
e5:de:52:a0:19:88:81:d8:36:b3:ca:6f:e9:75:98:
5e:d2:0b:e5:65:d8:f4:3d:6e:76:ac:70:3a:d1:c3:
c5:f3:79:9f:5a:de:7a:54:81:f4:08:53:59:ad:08:
ab:de:ba:ea:df:f7:b0:2d:d4:2d:89:70:9f:42:b8:
88:74:d5:f3:76:4d:35:0d:41:7d:24:3f:a1:09:2b:
f8:25:1a:38:5a:35:b1:0b:05:9b:03:cb:c1:f0:16:
e4:38:92:cc:b6:71:14:e7:8d:f2:16:ee:13:a7:06:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:E2:F8:DC:56:0E:C1:9F:22:D2:90:7D:F9:C3:6F:8F:03:04:36
X509v3 Authority Key Identifier:
keyid:05:17:5B:E9:C0:71:42:66:BA:07:45:A9:44:C0:88:48:A3:97:CB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:58:ee:57:29:77:b3:12:fe:eb:5e:d0:2c:9c:2c:14:95:
3f:e8:d3:65:2a:28:94:98:54:64:39:2a:44:b0:83:67:e9:46:
94:61:b4:b9:af:71:9d:7b:c8:7a:8f:e0:18:be:95:c5:6b:14:
3c:f3:22:8b:27:df:93:ba:00:db:b8:4b:48:a9:65:01:68:17:
75:e0:d8:03:70:a9:33:ef:de:c2:de:d2:1e:31:6f:2f:ab:44:
ec:5b:f9:25:9e:e3:90:4c:f2:32:44:99:50:d7:09:72:f5:06:
55:51:89:61:7d:9a:fb:f0:7e:f8:0a:43:06:e3:70:49:29:c3:
46:90:ce:93:d4:83:04:4c:8d:37:36:6f:16:2f:89:49:29:76:
3f:a3:9a:cf:be:44:6b:c5:39:dc:bb:f4:68:c1:04:c3:e3:9c:
b0:ed:4e:78:8e:7f:3a:5a:05:73:aa:21:e7:d6:b8:11:56:fb:
59:0d:09:1b:0b:33:33:ac:e4:39:f5:28:97:51:31:35:b8:14:
89:15:fb:1c:13:dc:61:0b:a3:0e:1a:75:a1:90:e8:d8:64:9f:
34:30:76:6c:77:9b:5c:a0:7d:0f:06:3a:86:84:35:43:c6:f5:
af:5c:3a:a6:83:77:bc:18:ed:51:31:08:cd:48:4a:de:e9:f1:
00:bb:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:12:45 2026 by rpki-client