Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File: v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier: K6eNMQVzwol+wPZLVd7URxmDT4jTbu9DySM6nKViDCI=
Subject key identifier: 60:48:DB:76:E9:DA:7B:9F:D5:DA:70:21:D6:24:94:60:E1:40:9D:55
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 019D9A3F03C00AE32DF4536383E6821EE406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number: 1197
Signing time: Fri 17 Apr 2026 07:01:54 +0000
Manifest this update: Fri 17 Apr 2026 07:01:54 +0000
Manifest next update: Sat 18 Apr 2026 07:01:54 +0000
Files and hashes: 1: 4cK2toKGStLvtVpJDp0UztrPgH0.asa (hash: ZNY72R7qVZc/Zu94pUGocbYyKhf7trhy+TL1EY5kc7Y=)
2: CHYxKsoN6IeVA10L6kUmg387K4E.roa (hash: mPumrjNcFYvdRL5bdDvvsuVOxWBNEvLLvkR9dRXxG+0=)
3: HEYAnN_9hlNawT0gfEq7cBceqz4.roa (hash: I1MGXqqgieCZdZAjgnAyAg80Pf2U7lhaBnlyBhpIJso=)
4: SDoF-WCqCPjknLT2mM2_4GQ1V00.roa (hash: 9DCTVTfRoXNgWVh36MOAbrslGxs/tC2WsKyt8y4+r+o=)
5: gDYEALi2Hj-tupJ_rsL3s8tznlE.asa (hash: 68FX2IHGNZcEoY9bCkB81Lljsq+1FZmQtZVe4paP9Q4=)
6: uWtL-ZUWThEBX2Kk-wgOPUghIXk.roa (hash: 5DR/R0A/IU4wtB24PmXGRhwrZ3nwhIVVut65+Q4hkXk=)
7: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: IoFjjT/f3Pj6ZKLdTToHI/qUsGwJLXqBIB8axxXnhJQ=)
8: wshhYohjqXbtPI9N4_VP7v1zc_4.roa (hash: K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:03:c0:0a:e3:2d:f4:53:63:83:e6:82:1e:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Apr 17 07:01:54 2026 GMT
Not After : Apr 18 07:01:54 2026 GMT
Subject: CN=6048db76e9da7b9fd5da7021d6249460e1409d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:7b:f2:88:e6:6f:68:9b:14:4e:d8:af:2a:
20:0a:39:c2:66:5b:25:ad:cd:29:62:62:06:ee:be:
21:44:5d:4e:c0:0d:5b:40:24:6f:ea:16:9f:d7:ea:
92:cd:3a:f7:f3:39:99:cd:97:28:0d:44:d0:ba:2f:
ad:fb:e0:e9:90:7e:10:74:bf:ba:1c:2d:e6:04:f9:
33:ec:6e:5e:87:64:02:34:14:55:2b:b3:71:a0:9b:
32:ba:86:5b:43:af:a7:5f:c4:5d:cb:aa:07:a4:2f:
fd:0f:14:07:db:24:08:b9:ca:36:1d:12:83:f2:f1:
bb:d4:8b:c5:6b:23:a3:76:e0:db:04:3c:da:00:5c:
0e:1e:d9:1c:37:41:81:4b:c8:a3:ae:61:e2:34:ac:
bd:fd:23:a8:80:18:90:1a:30:de:5e:bd:92:95:07:
9f:81:5a:48:7b:cb:7a:31:7b:22:c3:17:de:5b:35:
7b:5d:28:c7:44:f5:a3:cf:1a:d6:ec:d9:e6:00:67:
b2:53:64:13:c8:37:f8:ba:19:d4:a0:89:1e:23:5a:
c5:7f:54:8f:d8:13:89:58:93:1d:58:e1:46:e1:53:
e2:eb:9b:0c:60:2c:a6:92:ed:01:31:e7:af:80:fe:
f4:cf:61:7e:94:28:70:22:99:fa:f1:2b:1b:c2:9c:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:DB:76:E9:DA:7B:9F:D5:DA:70:21:D6:24:94:60:E1:40:9D:55
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:86:35:4e:cd:5b:7c:e0:23:50:cc:b2:a5:0d:70:88:c7:7d:
68:04:bb:c5:a5:00:3d:33:bb:33:98:b6:65:e1:9a:e8:e4:80:
dc:87:a0:41:c0:cf:15:bc:fc:81:05:c2:29:e8:5c:c5:5f:86:
99:16:c7:1c:ce:d6:ef:de:bd:d5:27:38:7f:14:a6:87:e0:ae:
14:d7:92:43:c2:f7:65:77:d0:d2:bf:a2:c8:60:9b:ce:d8:0d:
36:8a:ca:9d:11:65:5b:b5:63:70:c5:63:99:e7:a5:07:04:e9:
ec:70:14:2c:18:fd:8e:f4:a4:d2:1f:50:78:e2:44:65:99:72:
5a:2a:f6:0d:ec:6f:f7:34:32:71:dd:2f:e9:9c:78:5e:25:f5:
8d:f3:20:07:45:d4:19:b0:bf:68:43:7c:99:bf:94:39:1c:c3:
ed:82:70:b8:43:44:ae:f2:83:a4:02:6e:fd:0f:bc:d3:00:ea:
fa:09:7c:d0:71:c0:cf:fe:8e:86:d4:67:ea:6e:5a:74:47:ae:
ed:33:7d:39:55:0c:ef:da:2b:bc:cd:fe:21:4d:ae:c7:60:5a:
8b:50:f7:65:27:54:fe:11:ce:99:3d:fa:e8:ba:2e:c1:85:98:
61:c8:62:c2:3d:f0:e9:26:1d:f0:bc:7e:ca:29:18:e0:5a:26:
40:4e:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:01 2026 by rpki-client