Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: HzeqNVk2jPBLlu5OvjsyfkWj73Q7XQUf7uqE+7DN+PQ=
Subject key identifier: 03:AB:A1:CB:D4:D4:D0:F9:D3:6F:3E:F8:61:4C:35:2E:25:58:37:B6
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019D382DC8433C71138637EA74BD2CB47499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0E40
Signing time: Sun 29 Mar 2026 06:00:17 +0000
Manifest this update: Sun 29 Mar 2026 06:00:17 +0000
Manifest next update: Mon 30 Mar 2026 06:00:17 +0000
Files and hashes: 1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: otnJF8CVOdTtlkobSAgeW7uH27GA6Q1m2ZXCnTIC+3g=)
2: fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (hash: OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:c8:43:3c:71:13:86:37:ea:74:bd:2c:b4:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Mar 29 06:00:17 2026 GMT
Not After : Mar 30 06:00:17 2026 GMT
Subject: CN=03aba1cbd4d4d0f9d36f3ef8614c352e255837b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:32:91:0e:56:78:87:45:bc:1c:44:1d:d4:
d4:fb:dd:94:cc:39:ae:0b:67:57:20:e8:41:12:06:
7e:be:88:f3:2c:f1:81:50:ae:c7:2a:68:ea:ca:1a:
33:bc:90:04:a4:73:ed:0d:22:b7:21:27:73:2c:5f:
95:00:d1:f6:0d:67:8d:f6:cc:22:88:82:ff:f5:d3:
5d:ac:f6:72:28:0a:0a:66:a8:62:08:af:56:c0:a4:
1a:2f:ed:f8:56:c0:1a:09:ba:a0:a9:97:03:f4:e9:
40:dc:ac:39:12:1a:61:3f:35:81:47:55:74:62:18:
84:d6:bb:9a:a8:bf:66:59:b7:2b:1e:e8:e5:da:82:
16:43:47:73:10:06:92:23:0a:c2:b2:a6:ef:c1:c6:
f9:92:18:c9:e0:44:f8:96:9a:34:9c:e9:3f:fd:02:
06:9f:4a:c7:99:c9:43:1c:bf:09:c9:86:55:60:d0:
3d:e5:4f:89:a7:2f:01:88:e6:77:86:a0:4e:26:50:
1b:0f:e5:83:03:de:6b:96:ab:10:0b:ac:6c:0e:3b:
0d:a3:d6:ce:a6:85:4f:94:bd:2a:11:a7:45:29:28:
0a:57:e6:43:dc:b9:06:f8:a4:67:5a:e6:62:a6:37:
c1:f6:95:e2:79:98:79:7e:90:30:02:d7:0b:f5:28:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:A1:CB:D4:D4:D0:F9:D3:6F:3E:F8:61:4C:35:2E:25:58:37:B6
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:08:5b:64:21:49:0f:8a:ce:de:ef:5f:28:06:13:f0:e8:
af:b7:47:0a:1e:7e:c4:6c:a8:9a:a9:eb:10:fc:90:34:76:29:
91:e6:5b:95:b5:6b:89:8c:ae:3e:ce:86:a4:d3:1c:b5:3f:16:
b4:07:c2:9f:f4:87:3a:cf:13:48:39:a3:57:b2:c0:20:88:98:
fb:6c:49:86:66:e1:18:b3:75:4f:bf:29:cf:c6:b6:f8:43:ee:
d8:3e:b2:29:18:4b:9b:ca:e9:64:36:18:82:b9:97:d8:d4:b6:
42:3b:b5:be:7c:ee:3e:37:49:54:5f:b0:d7:d4:f6:bf:4d:45:
29:5f:22:ec:fd:34:75:a7:b2:d7:2a:63:98:00:82:ec:82:87:
ec:33:87:b1:a1:59:d9:39:6a:1a:61:70:90:b1:e0:c5:77:17:
cc:6a:85:28:4f:3f:38:fa:11:d6:d2:5b:e8:77:85:b6:91:d0:
9e:34:33:fa:c1:2d:cc:c9:dd:a7:fb:b8:a8:4b:de:e1:67:81:
ec:c2:3f:b4:90:95:73:9e:c5:66:5a:21:ac:a8:0c:4d:11:fe:
a6:ce:11:2e:52:b6:7e:fa:54:0f:62:4f:4e:a2:c9:c5:80:e2:
65:95:cd:95:62:8d:bd:87:39:3d:5f:3e:ff:c9:2e:2b:28:f6:
fb:ae:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:22 2026 by rpki-client