Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier: pPg+WjNUT0y+NzEYnB36zzD8wUoNpgDxzhe3BBB0XmE=
Subject key identifier: 1A:ED:4F:C1:11:8C:B9:56:3A:AE:A7:C9:77:ED:26:ED:E5:81:24:DD
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 01A125AFDFC63CF1B13B17FBF48EA00892D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 12:00:45 +0000
Manifest this update: Sat 10 Oct 2026 12:00:45 +0000
Manifest next update: Sun 11 Oct 2026 12:00:45 +0000
Files and hashes: 1: B923TTC0Df04C2WKB5eoCgT73fQ.roa (hash: u8SWrYqzCDPEqqAsY+pz5LjUeslP1zMGGkEQ+CEEG6g=)
2: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: giiEJuaoRYDyCgHm5YFsS5qSbR2zG/dYuitG5ZrUC/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:df:c6:3c:f1:b1:3b:17:fb:f4:8e:a0:08:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Oct 10 12:00:45 2026 GMT
Not After : Oct 11 12:00:45 2026 GMT
Subject: CN=1aed4fc1118cb9563aaea7c977ed26ede58124dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:86:ee:33:6e:12:0c:66:c5:0e:9e:d0:9d:
e3:52:9f:84:3a:07:4b:5e:c6:f0:ce:5c:0f:13:e5:
04:8e:c4:34:a0:58:71:58:c6:f2:24:31:f1:11:36:
07:6d:a4:99:96:e3:08:67:a7:57:55:dd:86:4a:f1:
b5:15:7b:e5:43:37:c8:e9:0d:fd:73:61:d7:71:b5:
e6:39:95:2a:b9:6d:89:9d:e2:57:77:59:ba:73:38:
69:b0:d1:2b:2f:e2:0e:87:89:4c:4a:d4:1d:35:d4:
05:7a:cc:e9:fe:0d:6a:e4:25:7a:79:d9:b6:86:35:
02:03:18:9a:b9:e2:ca:c0:ad:c0:26:93:54:25:95:
4f:15:d0:b2:68:2f:7a:60:c2:2e:18:56:38:a3:b8:
89:cd:e0:e0:d8:bd:b0:b7:78:9f:00:90:17:fd:1d:
3a:1c:ef:cd:5b:01:5c:13:2c:68:d6:6e:95:21:35:
5b:cf:6c:51:04:a9:5c:c2:f4:58:26:d2:78:ca:2b:
54:b2:a3:1f:04:47:2d:c3:b9:1e:89:cb:46:eb:90:
8a:4f:b4:55:d9:bc:a5:9e:dc:30:99:88:ef:f6:85:
21:97:37:21:c6:5d:6a:03:10:cb:93:0f:51:3f:4a:
fb:87:af:de:87:0c:f5:17:f5:69:cf:e3:e4:16:98:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:4F:C1:11:8C:B9:56:3A:AE:A7:C9:77:ED:26:ED:E5:81:24:DD
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:39:f4:43:47:17:e8:30:65:7a:30:22:3a:91:c6:14:1b:e1:
d1:38:9d:28:12:37:4c:ef:98:f7:c6:28:de:49:6a:a6:2c:a9:
f3:68:df:8f:b4:76:d9:c9:c0:af:f6:1f:cc:94:84:fb:9c:7a:
42:79:b8:15:31:e0:f2:51:05:97:f7:33:12:07:1d:25:94:47:
90:3f:5f:d8:f9:19:bc:99:fc:85:dd:be:9b:d7:4e:b0:d7:c6:
2b:29:bb:5f:a0:19:af:44:c4:c8:1d:1a:b0:ba:f3:e0:28:7d:
5f:84:a2:d2:c8:a0:2c:c6:d8:6e:a7:88:45:ed:77:bc:93:01:
73:ba:d8:3a:d5:47:d3:be:b3:3d:3a:dc:44:ac:b1:e0:78:00:
77:11:1e:47:b1:e1:80:66:58:36:16:b1:03:59:ff:06:f1:df:
8f:1b:e6:ad:55:9b:8e:32:0a:9a:87:9f:97:b6:af:b9:7d:1a:
f5:24:37:f8:27:13:a7:12:1f:3f:19:2c:8d:52:22:28:22:61:
e6:eb:f6:29:1a:e2:9b:24:5b:24:6a:45:b0:b9:49:13:e3:08:
08:3e:2d:23:94:44:21:24:8b:34:d0:8b:2e:be:cb:a2:b3:02:
92:b0:30:39:15:0a:f6:24:7a:cc:3d:08:b8:2b:f3:ce:cd:c8:
3f:02:00:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElr9/GPPGxOxf79I6gCJLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1
OGQ1ZmUwHhcNMjYxMDEwMTIwMDQ1WhcNMjYxMDExMTIwMDQ1WjAzMTEwLwYDVQQD
EygxYWVkNGZjMTExOGNiOTU2M2FhZWE3Yzk3N2VkMjZlZGU1ODEyNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB6G7jNuEgxmxQ6e0J3jUp+EOgdL
XsbwzlwPE+UEjsQ0oFhxWMbyJDHxETYHbaSZluMIZ6dXVd2GSvG1FXvlQzfI6Q39
c2HXcbXmOZUquW2JneJXd1m6czhpsNErL+IOh4lMStQdNdQFeszp/g1q5CV6edm2
hjUCAxiaueLKwK3AJpNUJZVPFdCyaC96YMIuGFY4o7iJzeDg2L2wt3ifAJAX/R06
HO/NWwFcEyxo1m6VITVbz2xRBKlcwvRYJtJ4yitUsqMfBEctw7keictG65CKT7RV
2bylntwwmYjv9oUhlzchxl1qAxDLkw9RP0r7h6/ehwz1F/Vpz+PkFpgnrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrtT8ERjLlWOq6nyXftJu3lgSTdMB8GA1UdIwQY
MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt
ODk1NTFlOGNjZTEyLzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy
LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTn0Q0cX
6DBlejAiOpHGFBvh0TidKBI3TO+Y98Yo3klqpiyp82jfj7R22cnAr/YfzJSE+5x6
Qnm4FTHg8lEFl/czEgcdJZRHkD9f2PkZvJn8hd2+m9dOsNfGKym7X6AZr0TEyB0a
sLrz4Ch9X4Si0sigLMbYbqeIRe13vJMBc7rYOtVH076zPTrcRKyx4HgAdxEeR7Hh
gGZYNhaxA1n/BvHfjxvmrVWbjjIKmoefl7avuX0a9SQ3+CcTpxIfPxksjVIiKCJh
5uv2KRrimyRbJGpFsLlJE+MICD4tI5REISSLNNCLLr7LorMCkrAwORUK9iR6zD0I
uCvzzs3IPwIAMg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:23:02 2026 by rpki-client