Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: 6FBFhZdcpWVNIhwP1IUSCgLQPjgG3hN//N88AKUu0SI=
Subject key identifier: 41:B0:AC:CC:AC:3A:67:8D:AE:72:73:76:D4:93:CA:B6:C6:03:10:E0
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 019D389C3B3B96723751AAD344A842E36ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 0563
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: VmT1Sho8ydxnIvte_UcEISrCOVY.roa (hash: JUbxvsuSh9DNNPxCyYh0gkLv8eHHl4hp0u9soB0vgC8=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: UcvaGakj5cFEyuzP5z8CZkMiewIEEY+QsBC4GGygb1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3b:3b:96:72:37:51:aa:d3:44:a8:42:e3:6e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=41b0acccac3a678dae727376d493cab6c60310e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:07:16:32:94:7e:66:6d:ac:92:dd:5d:31:
8f:ab:c6:c1:1f:77:90:c4:b9:66:94:cc:6b:1e:70:
61:bd:62:9e:06:a9:9c:42:b3:a3:91:e7:b2:d8:36:
c2:c8:79:df:36:d5:62:c3:f4:cc:25:68:13:45:21:
06:96:fc:0f:d5:5f:f6:4c:47:8f:73:ef:92:28:7a:
18:47:d0:a3:18:ee:1e:6f:4a:23:f5:31:ea:ee:f4:
61:7f:ff:72:d4:0a:d2:31:2e:6b:30:86:91:ee:8e:
50:59:fe:6d:ee:bb:3c:20:65:6f:cc:30:0d:47:29:
3d:05:33:45:4d:d8:d0:91:08:e6:51:3e:ee:00:b3:
62:39:87:2f:b8:e7:1a:41:fa:7d:27:34:31:bf:03:
65:e9:1b:34:f0:27:cf:71:7b:d3:2f:b2:a6:a8:b8:
9c:b6:85:ab:51:bb:a6:02:12:68:09:b5:df:e3:c9:
e2:19:21:91:c2:06:90:b1:0c:69:40:4e:6a:29:54:
00:e1:5e:92:27:6b:57:66:66:1b:c4:6b:87:1e:f2:
59:aa:69:2d:a7:bd:8a:df:da:60:46:c4:29:47:bd:
b8:10:84:37:41:bf:07:71:87:3c:d9:11:af:a6:51:
56:e7:ee:67:c5:81:55:89:1d:d5:8a:3d:7c:88:18:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:AC:CC:AC:3A:67:8D:AE:72:73:76:D4:93:CA:B6:C6:03:10:E0
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:05:a3:8f:80:a2:e8:ee:e7:6f:cc:0b:53:9a:1e:9f:89:23:
68:63:e3:67:c0:16:29:90:d9:70:b3:f8:ff:57:ff:db:ae:0c:
c1:23:cb:69:5c:1f:07:64:1c:66:6c:67:3a:bd:a3:d8:4c:5d:
40:e5:7d:3e:c4:be:fe:55:a8:b2:a6:22:2f:c7:7a:b9:f4:48:
41:91:b6:6a:b5:ea:ad:ad:da:e3:f9:c6:19:31:e9:ad:37:dc:
48:8d:c6:21:4f:f5:24:67:31:9f:d2:50:d6:d6:74:ac:27:c2:
0b:49:f4:5c:cc:cb:ce:d0:dd:fb:b8:fe:36:7d:90:97:98:db:
35:4c:0a:8c:d7:39:92:d0:ff:53:21:8a:fd:3b:42:c6:18:6a:
0a:fb:23:1c:ef:34:97:07:52:a3:17:9e:b7:47:c8:91:9f:5d:
e1:09:46:ea:d0:8e:9a:7a:0f:65:24:06:8c:91:8f:ad:48:b1:
c6:ec:33:7d:c4:cb:d5:56:77:a2:60:7d:f3:70:6d:2b:c3:60:
61:34:a0:ca:54:52:db:86:89:9f:01:3d:d1:e5:f7:c8:52:89:
cd:87:86:d4:71:02:5f:80:25:bf:ff:2c:7b:2c:91:3b:11:4a:
94:2b:cd:a1:4b:70:16:65:39:cb:19:3e:bf:bb:94:51:a1:f2:
42:b7:99:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDs7lnI3UarTRKhC427QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw
ZGFjNzgwHhcNMjYwMzI5MDgwMDU2WhcNMjYwMzMwMDgwMDU2WjAzMTEwLwYDVQQD
Eyg0MWIwYWNjY2FjM2E2NzhkYWU3MjczNzZkNDkzY2FiNmM2MDMxMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwHFjKUfmZtrJLdXTGPq8bBH3eQ
xLlmlMxrHnBhvWKeBqmcQrOjkeey2DbCyHnfNtViw/TMJWgTRSEGlvwP1V/2TEeP
c++SKHoYR9CjGO4eb0oj9THq7vRhf/9y1ArSMS5rMIaR7o5QWf5t7rs8IGVvzDAN
Ryk9BTNFTdjQkQjmUT7uALNiOYcvuOcaQfp9JzQxvwNl6Rs08CfPcXvTL7KmqLic
toWrUbumAhJoCbXf48niGSGRwgaQsQxpQE5qKVQA4V6SJ2tXZmYbxGuHHvJZqmkt
p72K39pgRsQpR724EIQ3Qb8HcYc82RGvplFW5+5nxYFViR3Vij18iBiYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGwrMysOmeNrnJzdtSTyrbGAxDgMB8GA1UdIwQY
MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et
YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5
LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAWjj4Ci
6O7nb8wLU5oen4kjaGPjZ8AWKZDZcLP4/1f/264MwSPLaVwfB2QcZmxnOr2j2Exd
QOV9PsS+/lWosqYiL8d6ufRIQZG2arXqra3a4/nGGTHprTfcSI3GIU/1JGcxn9JQ
1tZ0rCfCC0n0XMzLztDd+7j+Nn2Ql5jbNUwKjNc5ktD/UyGK/TtCxhhqCvsjHO80
lwdSoxeet0fIkZ9d4QlG6tCOmnoPZSQGjJGPrUixxuwzfcTL1VZ3omB983BtK8Ng
YTSgylRS24aJnwE90eX3yFKJzYeG1HECX4Alv/8seyyROxFKlCvNoUtwFmU5yxk+
v7uUUaHyQreZZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:09 2026 by rpki-client