Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File: v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier: Kxb5yuV00gUzKnQlM6cOGQbuyBwA1zrZpuH67GpIQzk=
Subject key identifier: D6:C0:4A:3B:44:16:F9:DB:8D:34:6C:E4:22:E3:8E:FE:46:4E:58:DC
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 01A1562F6C09BA9A43CADD8C575A5A0A9850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number: 1386
Signing time: Mon 19 Oct 2026 22:01:50 +0000
Manifest this update: Mon 19 Oct 2026 22:01:50 +0000
Manifest next update: Tue 20 Oct 2026 22:01:50 +0000
Files and hashes: 1: 4cK2toKGStLvtVpJDp0UztrPgH0.asa (hash: ZNY72R7qVZc/Zu94pUGocbYyKhf7trhy+TL1EY5kc7Y=)
2: CHYxKsoN6IeVA10L6kUmg387K4E.roa (hash: mPumrjNcFYvdRL5bdDvvsuVOxWBNEvLLvkR9dRXxG+0=)
3: HEYAnN_9hlNawT0gfEq7cBceqz4.roa (hash: I1MGXqqgieCZdZAjgnAyAg80Pf2U7lhaBnlyBhpIJso=)
4: SDoF-WCqCPjknLT2mM2_4GQ1V00.roa (hash: 9DCTVTfRoXNgWVh36MOAbrslGxs/tC2WsKyt8y4+r+o=)
5: gDYEALi2Hj-tupJ_rsL3s8tznlE.asa (hash: 68FX2IHGNZcEoY9bCkB81Lljsq+1FZmQtZVe4paP9Q4=)
6: uWtL-ZUWThEBX2Kk-wgOPUghIXk.roa (hash: 5DR/R0A/IU4wtB24PmXGRhwrZ3nwhIVVut65+Q4hkXk=)
7: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: HN8MqoXtqEggKXQn4ETkNKQYUNxNJCy99QzpjhpO2Q8=)
8: wshhYohjqXbtPI9N4_VP7v1zc_4.roa (hash: K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2f:6c:09:ba:9a:43:ca:dd:8c:57:5a:5a:0a:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Oct 19 22:01:50 2026 GMT
Not After : Oct 20 22:01:50 2026 GMT
Subject: CN=d6c04a3b4416f9db8d346ce422e38efe464e58dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:5a:b8:80:fa:76:f7:83:41:dd:db:ed:1c:
49:48:bb:06:e6:4b:63:74:fc:ab:77:b3:29:5c:f3:
31:b3:9f:39:06:2c:dd:a6:45:48:10:11:d1:47:aa:
af:37:4e:33:88:89:3a:39:d7:f5:f3:6e:3c:23:a3:
26:33:22:5e:43:6e:df:d1:5c:8e:66:50:74:25:5b:
5c:39:11:b6:9d:f4:66:18:1a:01:4d:9f:3b:54:ec:
e5:94:e7:f0:c7:3b:e0:d8:f4:4e:83:fc:89:4a:b1:
84:30:f3:99:78:a7:2f:38:a4:98:6b:cd:ed:e4:62:
f2:f6:d4:0d:ff:e0:c9:27:b9:c9:3a:95:15:b2:f4:
51:f1:73:fa:f1:01:df:00:64:eb:63:f6:b4:9d:4f:
d6:e3:f6:5e:98:48:a1:ee:52:f9:49:e2:27:fd:26:
98:95:d2:03:7b:39:cb:67:06:6b:a1:dc:71:fc:97:
75:76:5d:4e:d9:c5:7d:1c:7d:bb:5b:20:9d:19:30:
36:24:b5:15:7b:7d:4c:31:07:47:91:68:b0:65:47:
17:bd:30:6e:b0:b9:c1:f2:61:ac:46:21:f9:72:4b:
ef:17:37:8a:83:b7:85:b2:82:6b:54:27:3d:ad:ec:
32:aa:fa:dd:99:b6:c0:8e:12:62:6d:6e:22:3d:1b:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C0:4A:3B:44:16:F9:DB:8D:34:6C:E4:22:E3:8E:FE:46:4E:58:DC
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:2a:fc:5d:da:5f:19:5e:c7:58:63:43:8a:0c:a2:3f:4a:
6c:4f:e4:38:d2:a1:2d:8c:88:81:3e:d5:78:45:e7:73:02:5f:
18:99:a3:75:a6:56:46:a1:d2:2a:21:1a:e1:ca:d5:0a:3e:94:
d1:40:8c:64:57:08:77:63:9a:3a:3e:45:27:9e:e8:42:03:5a:
14:6a:43:fd:7e:9f:1f:79:60:fe:ee:4c:40:ec:33:42:9a:5c:
da:6e:d3:a7:51:32:f7:95:8d:ba:75:77:47:8b:6f:8b:eb:bc:
1f:c3:79:fb:bf:61:fe:4b:12:23:05:d9:0a:50:7a:c9:65:0b:
54:33:4f:ed:86:36:2c:fd:b2:ea:d6:7d:f2:0a:38:e1:42:54:
13:84:0b:7e:a9:30:aa:53:8c:aa:f1:77:fd:c1:d2:cc:dc:59:
5e:37:9d:b2:dd:d9:5d:ed:2f:ec:63:bb:7c:3e:65:93:cd:51:
80:45:cb:05:1d:29:55:89:9f:c0:ab:35:8a:05:e3:f1:6f:14:
ba:a7:f0:66:0f:a5:de:a7:71:d2:1d:9b:80:44:f8:01:76:13:
18:b1:66:c4:a3:f1:ef:2d:34:96:7b:46:6a:bb:83:d5:bd:5b:
b8:bc:ac:fc:63:c0:8e:08:c5:90:a9:fa:8d:56:a6:45:fc:ee:
1e:b4:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:02:57 2026 by rpki-client