Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier: jz0Uart7ksL+EUNGUswvwkdTsJySS/6OjYQQ/9mmHiA=
Subject key identifier: 9E:19:9F:AE:24:9A:5A:3C:48:D3:D9:43:68:29:83:E2:9B:5B:F5:38
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 019D3789A2CD9F5A0DAC8CC4B4FE3E753019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number: 0F64
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: 69rAqslmUNQ4jxhqRukN3nUhlgk.roa (hash: IDmbzyv/bIKti6JCgd65/6aVCqu//LwD+RovZywUSK8=)
2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: 4ZS2Rr/PJ+eAJwWV5VZA5JriLOs8XgZoZyMUuEWfT3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a2:cd:9f:5a:0d:ac:8c:c4:b4:fe:3e:75:30:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=9e199fae249a5a3c48d3d943682983e29b5bf538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:ed:7a:a9:cf:74:9d:58:41:93:f2:f0:ef:
0e:30:09:ff:f3:b9:1a:ef:ed:f9:19:34:95:2c:b4:
7c:d3:59:e9:de:54:33:ef:1e:25:32:63:d2:a1:0d:
40:2f:41:68:79:50:c2:f1:9b:83:28:fa:d9:03:fc:
df:69:75:b0:d0:fc:eb:31:61:93:46:28:10:99:24:
67:3d:99:40:d9:55:9a:98:25:7b:22:69:57:ce:b5:
ca:94:41:26:d2:78:13:d6:43:8d:f3:9b:fb:95:f7:
25:df:aa:29:96:3d:bc:3d:b9:7b:31:ff:de:45:db:
20:18:e9:62:1f:da:6e:28:2b:aa:f1:40:2f:47:31:
f4:53:33:05:c4:e7:df:ae:ed:86:fe:1e:04:25:49:
45:52:5c:44:a6:15:73:5c:09:69:a1:54:c2:4c:40:
44:78:8b:a4:75:e0:da:f3:f3:43:77:95:f8:8f:b4:
6d:bb:85:2d:a8:0a:c3:64:87:05:2d:a5:1e:28:32:
c5:40:28:98:56:04:f7:55:10:8e:6d:98:f6:cd:58:
e4:69:80:61:6e:a6:44:d7:4e:9a:c6:aa:17:3c:0d:
88:cf:36:89:38:c7:68:12:92:7b:23:b3:4c:71:68:
36:57:d8:78:dd:bd:0f:57:ed:1b:e4:80:1e:d7:bb:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:19:9F:AE:24:9A:5A:3C:48:D3:D9:43:68:29:83:E2:9B:5B:F5:38
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:81:65:98:12:0f:37:d1:2d:76:1b:97:83:d5:2b:66:21:80:
14:73:9d:5c:ee:89:28:f7:32:4d:5e:42:c6:ac:2c:98:40:f3:
7a:ce:d7:4b:53:93:a3:bf:11:55:9c:77:43:06:e0:c5:9b:e8:
55:26:6b:0c:a7:0e:ec:2f:18:52:ce:3d:c3:a6:d5:1d:64:cf:
0e:6a:de:b9:8c:d9:96:83:7e:7e:e7:c9:1c:98:7f:1e:31:06:
3e:87:b7:72:07:0e:5f:81:64:65:ff:10:9c:80:bd:64:3b:3e:
6b:0b:95:29:03:20:31:cc:1b:3e:24:1d:cf:a7:4d:4e:4c:b9:
12:38:d9:08:f4:29:7d:fe:9f:d6:5a:fc:1a:3a:7b:c0:41:69:
94:d8:77:09:ed:fc:70:85:8d:1a:9d:ef:5f:8c:59:8f:75:0e:
cf:99:16:a3:92:20:0f:69:c9:1f:2a:d4:8d:cd:3b:90:6b:38:
31:01:cf:d2:fd:29:38:34:c6:4b:8b:63:5d:b2:6e:51:1d:a2:
c9:93:dc:57:56:30:cd:80:fb:4d:99:c9:07:97:18:a6:b5:2b:
57:45:8e:b2:21:f6:15:f2:1f:16:a0:26:03:b8:35:70:ae:e6:
1b:ff:8c:96:a3:69:67:cf:2c:93:4c:6a:17:a2:28:53:82:29:
d0:d2:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:03 2026 by rpki-client