Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: MFYauaTgnuVe69L/qvUbVPYmVG0XQpRkKT5b9KmwmRg=
Subject key identifier: 8A:9A:66:FE:DA:7E:85:25:17:BB:FA:A1:03:FE:BA:8D:81:AC:4B:65
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019D996297B8E5F7EF26748C30B4FE6FC97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 0593
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: NEeeFvDt/zNacBi5xb2Ir/sme4UD1iWA3nUdQ6RFB2k=)
2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:97:b8:e5:f7:ef:26:74:8c:30:b4:fe:6f:c9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=8a9a66feda7e852517bbfaa103feba8d81ac4b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:f0:c5:28:a3:1d:e5:d3:a8:ad:cc:fb:67:
9a:36:ea:c8:2f:04:cf:c1:0b:f3:3c:2a:d9:e1:ac:
9c:da:f7:d8:69:2c:63:79:ac:94:74:d3:aa:73:d0:
a0:cb:8e:da:56:1c:4a:17:40:62:05:f0:90:39:e8:
79:a9:68:75:71:02:40:84:9b:f4:3a:25:50:91:14:
62:a5:98:96:9b:9d:4c:6c:f2:b5:92:94:9b:87:c6:
51:ff:de:55:9a:d9:69:d1:0e:7d:d7:54:5b:b1:c2:
83:1d:0b:a7:19:91:02:cd:82:e0:1a:bd:65:b4:8e:
fa:d9:b7:ce:f3:c3:de:8f:0d:1c:85:f8:89:01:5f:
b6:f5:14:69:58:86:47:d2:cd:e0:09:87:4b:3e:2d:
37:7d:ae:1b:88:1f:13:33:ea:eb:b1:0b:be:e6:50:
be:ae:e0:c1:1f:62:56:7d:09:2e:16:cb:75:5a:4b:
50:27:c5:7f:33:9b:11:d5:ea:a2:3a:e8:60:83:8e:
b6:56:79:9b:cd:8d:b4:26:86:aa:87:12:19:f3:c9:
56:f1:ac:29:c4:90:a2:36:93:08:9e:10:56:97:4e:
d2:4f:31:fa:59:ae:32:08:6f:c6:9c:30:32:76:7e:
2c:bd:2f:2c:82:99:ed:cf:0e:17:94:06:46:ab:81:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:66:FE:DA:7E:85:25:17:BB:FA:A1:03:FE:BA:8D:81:AC:4B:65
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:83:db:52:b1:d1:9a:9c:cd:a5:e6:ed:6c:4e:0c:e5:2b:49:
0d:ec:4d:72:39:26:bf:bb:d1:34:31:6e:ea:12:2c:aa:06:ca:
d4:48:23:91:0f:8a:c5:b3:b0:15:33:d1:19:01:be:6e:1e:91:
b9:8b:69:c3:c6:ec:00:f6:cf:04:a5:5c:54:37:a8:6b:c6:14:
d3:66:c2:dc:d5:11:cd:96:cb:66:85:91:7f:3c:8c:de:0c:58:
69:a3:5e:b3:df:98:9d:81:61:5c:68:52:f2:03:99:d1:fc:72:
4d:a4:ca:09:38:b2:da:4b:d2:d9:b0:0d:e3:33:32:73:d1:56:
70:1f:80:48:14:ac:95:27:fc:71:d9:6a:70:fb:d7:7c:ba:53:
b1:d3:84:37:58:bd:31:ac:c1:cc:e3:71:7c:5b:0c:fb:07:ac:
be:e5:16:4f:1e:e7:9c:10:93:ba:08:3b:be:24:5b:38:3b:b9:
b1:dc:43:d3:fd:24:1e:c5:5c:bd:2f:54:0f:f6:14:78:49:83:
55:68:e2:d4:c0:1f:67:ba:81:62:e3:08:be:ee:2e:cd:6c:f5:
dd:63:e2:b9:0f:c5:e7:25:51:77:03:48:5e:3b:52:f8:60:d6:
61:1a:72:26:64:ff:9b:70:12:11:45:8e:18:fc:b6:51:d1:26:
b4:d9:c9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYpe45ffvJnSMMLT+b8l8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTYwN2E4NjhkYWY0ODQ2MjQ1ZjNjOGJiZjllYmU3Njk4
MjlhZDkwHhcNMjYwNDE3MDMwMTA4WhcNMjYwNDE4MDMwMTA4WjAzMTEwLwYDVQQD
Eyg4YTlhNjZmZWRhN2U4NTI1MTdiYmZhYTEwM2ZlYmE4ZDgxYWM0YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfwxSijHeXTqK3M+2eaNurILwTP
wQvzPCrZ4ayc2vfYaSxjeayUdNOqc9Cgy47aVhxKF0BiBfCQOeh5qWh1cQJAhJv0
OiVQkRRipZiWm51MbPK1kpSbh8ZR/95Vmtlp0Q5911RbscKDHQunGZECzYLgGr1l
tI762bfO88Pejw0chfiJAV+29RRpWIZH0s3gCYdLPi03fa4biB8TM+rrsQu+5lC+
ruDBH2JWfQkuFst1WktQJ8V/M5sR1eqiOuhgg462VnmbzY20JoaqhxIZ88lW8awp
xJCiNpMInhBWl07STzH6Wa4yCG/GnDAydn4svS8sgpntzw4XlAZGq4EY8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqaZv7afoUlF7v6oQP+uo2BrEtlMB8GA1UdIwQY
MBaAFAUWB6ho2vSEYkXzyLv56+dpgprZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEt
NzJjZmRhYTk1OWEyLzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEtNzJjZmRhYTk1OWEy
LzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4PbUrHR
mpzNpebtbE4M5StJDexNcjkmv7vRNDFu6hIsqgbK1EgjkQ+KxbOwFTPRGQG+bh6R
uYtpw8bsAPbPBKVcVDeoa8YU02bC3NURzZbLZoWRfzyM3gxYaaNes9+YnYFhXGhS
8gOZ0fxyTaTKCTiy2kvS2bAN4zMyc9FWcB+ASBSslSf8cdlqcPvXfLpTsdOEN1i9
MazBzONxfFsM+wesvuUWTx7nnBCTugg7viRbODu5sdxD0/0kHsVcvS9UD/YUeEmD
VWji1MAfZ7qBYuMIvu4uzWz13WPiuQ/F5yVRdwNIXjtS+GDWYRpyJmT/m3ASEUWO
GPy2UdEmtNnJhQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:53 2026 by rpki-client