
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier: wqwfsUxkuiupyDe28Dik/kxdEBy/hJO/z5ChXXnPFWk=
Subject key identifier: 5B:B3:AC:5B:FE:4E:BA:37:90:FC:36:D7:8F:5E:6F:1E:D2:C2:A7:EE
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer: /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial: 019D38D3C953E804C78E95AEE01BDD0DB6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number: 0BB2
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: ZCV/TtWPXvQohVnDSdmSYHgZ6c8ov9/YG1n7CpJ1lmg=)
2: pY7lepz5HDLGPMLul3xF8ZoLGb4.roa (hash: xUY7XApdCCskYdTx86cHtQLmN8N5m7zUQqjbzI7nUzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c9:53:e8:04:c7:8e:95:ae:e0:1b:dd:0d:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=5bb3ac5bfe4eba3790fc36d78f5e6f1ed2c2a7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:4b:c9:73:6c:f3:c1:4e:40:9d:60:cf:69:
79:b9:98:12:c4:bc:ea:79:24:86:44:bc:41:78:f2:
47:a7:cd:0b:03:9b:de:10:40:76:51:19:66:79:ad:
a6:46:5e:ed:95:94:7b:c8:08:b3:1f:c0:e1:a2:02:
64:d1:40:fa:05:fd:0a:76:1a:6f:ab:06:41:65:35:
56:2f:af:5e:5d:54:fb:3c:ae:1e:c8:10:70:fc:58:
c3:84:69:e0:92:c4:26:a8:f5:72:36:34:11:d1:08:
26:74:2a:e1:c4:e6:78:ed:c8:f1:a6:c6:c1:cf:0d:
d4:8c:f5:33:71:ed:86:49:82:d4:e5:0e:6c:76:f1:
4c:c3:68:eb:df:a2:c0:e1:01:1f:0e:ca:9f:bb:e0:
a9:36:a4:57:1e:ec:c5:cd:f1:55:7e:52:ae:a6:2b:
6e:f8:32:e3:1f:3c:f5:f4:a0:ab:b7:54:ea:55:fc:
7c:86:37:5f:fd:53:04:2c:4e:b2:2c:b9:5d:31:bd:
e7:f2:60:30:ed:30:fa:0a:5b:ed:30:0c:a4:bd:b6:
91:66:ba:ab:18:bb:e5:89:d8:31:62:dd:7c:9b:50:
12:57:88:0a:f4:50:68:d9:cd:70:fd:94:72:1f:95:
fe:b3:5f:f9:2f:ea:f1:fd:8e:41:8c:82:16:73:cc:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:AC:5B:FE:4E:BA:37:90:FC:36:D7:8F:5E:6F:1E:D2:C2:A7:EE
X509v3 Authority Key Identifier:
keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0b:a5:ac:eb:11:28:97:a6:ee:bf:25:9b:d1:c1:8f:19:4f:
6d:54:ac:ad:d1:cc:15:cb:56:24:96:96:43:7e:ab:78:2a:66:
c8:8a:49:3d:7a:ac:60:67:9c:bf:d8:f8:e4:f0:2f:68:19:17:
1a:9f:3c:9e:6e:70:70:32:a5:cc:c6:24:e0:82:c3:b5:ef:da:
c2:dc:63:59:59:34:e0:61:d4:2a:a4:88:58:6c:00:70:b8:5b:
d9:d6:83:9c:9f:d9:31:fc:1c:57:ad:de:47:17:05:dd:c5:cb:
06:3d:b1:38:98:09:72:54:93:65:6b:34:d6:a5:1f:55:d2:2e:
e2:73:58:cc:23:35:86:70:01:6c:6c:ca:e5:15:96:a1:d5:cf:
f5:c4:9e:b3:ab:28:4d:ad:e4:a7:c8:20:70:0a:b9:d4:40:06:
15:2f:1c:00:68:2c:74:ac:a3:74:fa:a8:ae:2d:9d:71:fc:08:
cd:14:ac:71:00:d4:ff:76:3a:9f:47:43:29:e9:d2:78:0b:d3:
8a:bb:db:5d:3f:38:b3:5f:d5:5c:ac:99:14:c2:e4:58:ce:c2:
ae:dd:d2:7d:c4:53:39:58:c6:3d:32:72:f7:d5:07:e6:50:ff:
a5:96:53:b5:51:88:47:88:ee:ea:ef:f6:91:90:cb:83:03:2a:
83:ec:68:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408lT6ATHjpWu4BvdDbbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzMwNDhkNmZmNDI0YmYxOTIxNTc3MWNmMjU3YmMxNWI2
N2VlMTUwHhcNMjYwMzI5MDkwMTM2WhcNMjYwMzMwMDkwMTM2WjAzMTEwLwYDVQQD
Eyg1YmIzYWM1YmZlNGViYTM3OTBmYzM2ZDc4ZjVlNmYxZWQyYzJhN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlLyXNs88FOQJ1gz2l5uZgSxLzq
eSSGRLxBePJHp80LA5veEEB2URlmea2mRl7tlZR7yAizH8DhogJk0UD6Bf0Kdhpv
qwZBZTVWL69eXVT7PK4eyBBw/FjDhGngksQmqPVyNjQR0QgmdCrhxOZ47cjxpsbB
zw3UjPUzce2GSYLU5Q5sdvFMw2jr36LA4QEfDsqfu+CpNqRXHuzFzfFVflKupitu
+DLjHzz19KCrt1TqVfx8hjdf/VMELE6yLLldMb3n8mAw7TD6ClvtMAykvbaRZrqr
GLvlidgxYt18m1ASV4gK9FBo2c1w/ZRyH5X+s1/5L+rx/Y5BjIIWc8wZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuzrFv+Tro3kPw2149ebx7SwqfuMB8GA1UdIwQY
MBaAFAUzBI1v9CS/GSFXcc8le8FbZ+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRNRWpXXzBKTDhaSVZkeHp5Vjd3VnRuN2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZTQ4OTktYWFjYy00ZWZkLTkzZGYt
YTYxYTk4MzU5YzRhLzEvQlRNRWpXXzBKTDhaSVZkeHp5Vjd3VnRuN2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZTQ4OTktYWFjYy00ZWZkLTkzZGYtYTYxYTk4MzU5YzRh
LzEvQlRNRWpXXzBKTDhaSVZkeHp5Vjd3VnRuN2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAulrOsR
KJem7r8lm9HBjxlPbVSsrdHMFctWJJaWQ36reCpmyIpJPXqsYGecv9j45PAvaBkX
Gp88nm5wcDKlzMYk4ILDte/awtxjWVk04GHUKqSIWGwAcLhb2daDnJ/ZMfwcV63e
RxcF3cXLBj2xOJgJclSTZWs01qUfVdIu4nNYzCM1hnABbGzK5RWWodXP9cSes6so
Ta3kp8ggcAq51EAGFS8cAGgsdKyjdPqori2dcfwIzRSscQDU/3Y6n0dDKenSeAvT
irvbXT84s1/VXKyZFMLkWM7Crt3SfcRTOVjGPTJy99UH5lD/pZZTtVGIR4ju6u/2
kZDLgwMqg+xoOA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:14 2026 by rpki-client