Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: UpIx2Q7784qOEnkPCAcOPJKPZvGhBnQfj44cAs0XUTE=
Subject key identifier: 59:1F:2B:6B:57:30:A4:7D:69:B0:75:3F:C7:E4:94:28:CF:E8:A4:EA
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 01A151769A07F5C52C3C6223F2B3C47EE03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1AAC
Signing time: Mon 19 Oct 2026 00:01:29 +0000
Manifest this update: Mon 19 Oct 2026 00:01:29 +0000
Manifest next update: Tue 20 Oct 2026 00:01:29 +0000
Files and hashes: 1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: iIYy+8wnGs77lZ8+zStacISgNuJiiiveL7OCR6bTHJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:9a:07:f5:c5:2c:3c:62:23:f2:b3:c4:7e:e0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Oct 19 00:01:29 2026 GMT
Not After : Oct 20 00:01:29 2026 GMT
Subject: CN=591f2b6b5730a47d69b0753fc7e49428cfe8a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:41:74:e0:fd:8b:ee:5f:1b:54:c0:13:c7:
8f:31:71:43:07:68:65:e8:0e:06:7c:5d:4b:16:ee:
5c:3c:73:bb:40:31:fc:c3:44:4b:9b:0e:6e:6c:1f:
9c:43:33:07:fd:3b:86:6a:d4:30:68:04:07:2c:21:
0a:1b:9e:2c:39:13:48:2c:ba:d6:8a:bf:1c:3f:16:
62:31:a8:66:d5:a7:0e:44:6f:4f:7e:e3:ac:53:ea:
a1:95:07:7a:b1:a1:92:c0:2b:96:99:fe:37:0e:8c:
81:44:00:e4:81:79:fd:1b:31:e4:d0:30:37:a1:1d:
d4:66:5e:5c:37:14:03:d9:e2:12:a4:e1:c6:29:99:
87:b5:26:48:c2:7e:5f:10:d3:c4:87:8b:38:b0:66:
f3:07:68:97:9e:ec:2a:ae:9b:77:d8:b3:18:96:c9:
7d:bf:70:8b:e9:f5:e6:f3:36:54:91:01:bb:78:2c:
d7:e4:fd:16:ea:1e:17:b2:03:f9:99:14:62:30:32:
78:aa:ef:c5:9f:cf:33:81:69:fe:e9:05:52:f9:ff:
45:c6:04:20:00:b1:24:95:32:b2:1f:04:a6:e6:09:
cd:78:f7:a5:57:4e:56:df:26:a9:25:ec:a2:39:f4:
d1:f5:4a:62:e9:ab:1b:7d:36:2a:45:5f:ca:d9:3d:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:2B:6B:57:30:A4:7D:69:B0:75:3F:C7:E4:94:28:CF:E8:A4:EA
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:ca:4f:8b:2e:e0:9c:29:2e:d1:33:d2:84:ea:ca:e7:9e:
49:12:a7:39:05:f7:4e:bf:45:97:68:47:14:3d:91:7e:b5:89:
a7:4a:87:c7:d8:ef:09:39:59:fa:62:d3:e3:cb:b0:2d:4f:e4:
3e:14:a7:21:4b:41:bf:7f:2d:59:f2:72:91:21:50:c0:fa:63:
54:5f:d4:2e:e0:38:07:0b:c9:af:30:6f:1e:10:91:bd:61:68:
fb:ff:a8:c3:ee:45:8e:b6:ee:52:8c:18:64:83:01:a5:7e:ab:
34:ab:30:94:f6:9c:5e:19:6b:0b:57:7b:b1:c9:0b:08:be:20:
b4:7d:42:22:54:2f:a1:7f:b1:21:4d:2b:1f:1b:ec:32:b0:44:
5f:e6:58:71:47:52:26:2f:d7:a0:44:1d:75:66:5b:a0:38:e8:
12:c2:ee:19:16:eb:58:08:f3:8e:ad:2e:0a:ed:91:e9:9b:4f:
dc:7f:67:96:3a:fc:62:bd:54:00:78:4d:91:03:f1:aa:af:40:
86:58:ce:ed:59:64:a7:93:7b:e8:1a:95:51:43:c2:97:eb:b6:
be:50:a2:9d:e8:40:65:15:55:b3:04:91:e1:2e:0e:db:81:ac:
a6:29:42:25:3a:4a:20:68:a8:34:09:2f:94:d4:9f:14:94:29:
08:d2:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:50:47 2026 by rpki-client