Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: PdMDy15idBcwTf9DCjZi4ixSEzzZvwa+p42exCDxx3M=
Subject key identifier: 2C:26:7D:7C:15:3A:CC:42:BA:1F:FE:1E:52:95:92:7E:8E:DF:63:58
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019E314E044EB41BD10D87C77724077EEB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0EC1
Signing time: Sat 16 May 2026 15:00:56 +0000
Manifest this update: Sat 16 May 2026 15:00:56 +0000
Manifest next update: Sun 17 May 2026 15:00:56 +0000
Files and hashes: 1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: aIrC3BT7vEqBKMqLdLI3IxEHT2YEKBUWokd6vEENipg=)
2: fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (hash: OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:04:4e:b4:1b:d1:0d:87:c7:77:24:07:7e:eb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: May 16 15:00:56 2026 GMT
Not After : May 17 15:00:56 2026 GMT
Subject: CN=2c267d7c153acc42ba1ffe1e5295927e8edf6358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:88:b6:f3:71:23:54:1c:e0:f0:0e:78:77:
52:0a:ad:28:2a:ab:19:4b:e6:40:60:8b:ef:77:ed:
b3:10:b8:de:df:74:46:2e:11:88:c5:1f:f4:ef:57:
70:5c:4b:6a:db:0e:53:cc:33:08:a6:77:e8:aa:5f:
9b:14:de:54:5f:e7:9d:1b:2d:d8:59:93:93:b1:48:
0b:75:d1:0a:ef:65:91:a2:6c:bf:7a:2f:34:0a:3d:
96:4b:a4:28:10:25:c0:50:66:3d:0c:3d:2d:59:99:
d1:6c:2a:7e:02:63:d4:15:89:fc:1e:d5:b1:dc:61:
26:27:07:41:e1:e2:c6:fe:9c:2d:dd:e9:d0:a8:f6:
ee:7c:6a:2d:68:c2:fb:16:9b:4b:ca:42:c1:f7:58:
5a:9a:00:b7:2e:9e:b7:14:21:81:5d:d7:dd:b7:4a:
8f:fa:e5:14:d6:c6:fe:ad:54:1b:25:cb:09:55:d0:
aa:ef:39:b1:8f:b6:17:c1:fb:37:f1:7b:8b:2a:3e:
24:30:84:f0:d7:c4:19:76:64:a8:bb:10:fa:e8:47:
ba:29:1a:33:82:1c:f9:3d:20:e8:f0:28:58:4e:83:
22:3d:c6:95:f9:94:46:c8:a0:6b:35:c3:67:a0:53:
4a:35:b8:bf:08:a4:f6:02:d6:ec:32:7e:94:5b:f1:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:7D:7C:15:3A:CC:42:BA:1F:FE:1E:52:95:92:7E:8E:DF:63:58
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:73:eb:9d:86:b3:44:e9:28:21:8a:ca:0a:aa:40:fb:09:39:
1f:08:47:25:bc:c8:9e:f5:59:8c:cf:1c:be:b2:cc:60:d6:45:
79:a8:1b:8a:1a:b4:c3:89:31:e2:9e:82:35:b1:be:e3:b9:bf:
4d:6c:77:df:c5:1c:87:f8:df:b0:d6:5b:26:46:20:99:95:79:
4e:2e:dd:f8:37:95:1f:2f:21:5e:03:6b:2c:e1:99:49:e0:e2:
25:47:a5:0d:f5:81:72:9e:7d:1a:2c:d6:3f:4c:d4:ea:43:29:
34:ce:62:ef:d4:2b:de:1a:d8:f9:74:d0:3d:b4:d0:90:30:b8:
1d:7e:11:38:ea:23:48:cc:11:14:ce:f1:39:24:03:42:86:c4:
36:87:a6:a0:70:2d:43:f3:a8:f3:08:82:a1:99:19:08:d6:a3:
65:99:e7:00:f9:c5:d6:c6:d2:47:de:42:03:7c:c5:26:55:53:
55:ca:fa:b5:7f:23:fe:2f:6c:24:f7:ee:68:ad:70:da:56:d3:
74:0c:83:97:9b:27:b2:4c:dd:fe:8c:35:3d:b9:9a:57:ad:af:
f3:f4:e9:c9:27:2e:54:31:61:25:a5:78:0c:3d:25:47:64:f3:
0d:dc:14:d5:75:e2:d7:7b:0a:c3:15:f3:36:99:6b:e7:9a:7c:
89:45:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:14 2026 by rpki-client