Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.mft
File: bTr7aI9kFamxLbQx65CIxDJcpNs.mft (raw, json)
Hash identifier: 7KC3k+VENmK5vZLj0RL8cA7bG1Z9TxRoS93mn2sel1w=
Subject key identifier: 43:15:A1:24:4C:9D:BE:2E:30:D1:E5:4A:48:55:67:34:BC:A8:BE:55
Authority key identifier: 6D:3A:FB:68:8F:64:15:A9:B1:2D:B4:31:EB:90:88:C4:32:5C:A4:DB
Certificate issuer: /CN=6d3afb688f6415a9b12db431eb9088c4325ca4db
Certificate serial: 01A1916807F6AA50FD8352C429698C8F1DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTr7aI9kFamxLbQx65CIxDJcpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.mft
Manifest number: 20
Signing time: Sat 31 Oct 2026 10:01:16 +0000
Manifest this update: Sat 31 Oct 2026 10:01:16 +0000
Manifest next update: Sun 01 Nov 2026 10:01:16 +0000
Files and hashes: 1: SaLyrzOVkPMNcUgJ-agcEtNN_wE.roa (hash: n/lhDwiBc2IlpI9ji0jtmUdFOMimdU+g53JEQ9lVips=)
2: bTr7aI9kFamxLbQx65CIxDJcpNs.crl (hash: Fs9hS9/vrdKk+FjfXVnJY3HO+8zC79td91pNasKsldc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTr7aI9kFamxLbQx65CIxDJcpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:68:07:f6:aa:50:fd:83:52:c4:29:69:8c:8f:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3afb688f6415a9b12db431eb9088c4325ca4db
Validity
Not Before: Oct 31 10:01:16 2026 GMT
Not After : Nov 1 10:01:16 2026 GMT
Subject: CN=4315a1244c9dbe2e30d1e54a48556734bca8be55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:c5:6b:aa:df:4e:3f:da:6f:37:f1:b6:0c:
7b:05:7c:ce:4b:55:04:59:12:4e:97:5c:39:5b:16:
20:89:22:07:6d:e5:37:b4:87:93:34:d5:a9:6a:d8:
d3:0a:27:9a:51:95:20:21:fb:30:99:8b:1d:83:7a:
42:af:6b:87:28:6c:42:a5:bf:2d:ef:62:cb:e7:72:
52:5f:f4:ec:36:d1:cc:cd:33:b9:6d:ec:94:51:49:
ca:da:81:d6:09:ee:8d:92:44:51:e9:94:2b:5d:f1:
ca:91:1d:0e:b0:98:e6:e3:eb:6c:b6:73:7c:82:e8:
c3:6b:cb:d7:f8:19:cf:e6:82:27:6d:2a:f1:18:af:
1b:46:c2:ca:7f:82:8c:0f:80:49:7c:f3:e8:1f:4a:
c6:a9:7e:5e:ea:15:33:b8:ae:17:e8:76:c9:b2:29:
83:16:16:8e:8a:ca:ff:ff:e2:7f:a4:d4:a3:f9:59:
e5:89:05:49:27:a9:d9:3d:ba:5e:df:92:e0:9a:56:
6f:8e:a0:7e:5d:e9:56:15:e2:38:30:0a:ee:47:cd:
7c:a3:5c:a2:3f:c0:6b:5b:05:85:33:37:ce:78:83:
4e:2e:eb:c1:8c:af:77:9d:f3:1f:0d:a3:ae:59:c1:
7c:00:7f:e0:72:56:3e:63:0c:a0:75:26:0c:4d:c7:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:A1:24:4C:9D:BE:2E:30:D1:E5:4A:48:55:67:34:BC:A8:BE:55
X509v3 Authority Key Identifier:
keyid:6D:3A:FB:68:8F:64:15:A9:B1:2D:B4:31:EB:90:88:C4:32:5C:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTr7aI9kFamxLbQx65CIxDJcpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6b18a2-d555-48a9-945d-217d5087cdc7/1/bTr7aI9kFamxLbQx65CIxDJcpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:25:ee:ec:68:07:51:6d:77:bb:5d:28:d1:14:f5:52:8a:
7c:32:c5:64:51:53:6a:8b:98:66:95:ac:54:20:c5:99:04:32:
95:bc:8d:cb:b4:da:d3:9a:7a:99:01:64:ce:11:bf:ef:d2:74:
b3:6e:8a:89:fb:28:14:26:44:ee:8d:9e:c0:75:a2:f9:8d:b4:
dd:be:20:4a:45:b0:e2:f4:9f:f5:97:a4:3d:20:15:a7:44:61:
95:8f:25:2c:7c:61:61:a3:42:e7:f1:e4:1a:8c:6f:ce:73:e3:
3c:83:5e:2f:35:bc:c6:3a:f7:da:33:71:36:c8:45:11:bf:08:
fa:21:2c:d8:f0:b8:66:33:63:1a:60:ce:ab:ef:7d:c4:cd:d0:
54:25:40:eb:bd:8c:f2:de:c6:2e:f5:ac:7c:22:af:db:22:5c:
fd:ff:5d:07:08:74:e0:28:4b:17:ca:14:b5:b1:df:27:e4:30:
33:09:7b:9c:78:cd:52:9e:e2:8c:42:ed:f5:81:2c:47:67:db:
d1:70:db:55:77:97:2a:d2:b4:49:21:f8:39:a4:b8:36:e1:3a:
45:c8:95:44:b1:86:65:85:bb:ba:05:c7:f1:d7:30:7f:9d:35:
e9:b3:fa:9c:ab:bb:1c:46:b5:d8:2c:12:77:4c:d1:6f:28:bf:
14:11:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 16:36:25 2026 by rpki-client