Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: j2sOscg9Ddr8gRiEH6+EdP5ekGueH3BMxaC89hh0GSg=
Subject key identifier: E7:9C:2C:93:E5:02:E7:C3:E2:3B:18:8A:7E:A3:1F:69:88:8A:4F:9E
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 01A13F3979777B01AAB0E2CD0643E1A90EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 11:01:33 +0000
Manifest this update: Thu 15 Oct 2026 11:01:33 +0000
Manifest next update: Fri 16 Oct 2026 11:01:33 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: 02RDYnlaVlCItuOTtp4oZKtbU+uOijSH1bQtD1yGZbE=)
2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:79:77:7b:01:aa:b0:e2:cd:06:43:e1:a9:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Oct 15 11:01:33 2026 GMT
Not After : Oct 16 11:01:33 2026 GMT
Subject: CN=e79c2c93e502e7c3e23b188a7ea31f69888a4f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:e3:95:bc:67:4e:33:c7:ee:59:39:24:0e:
a4:ab:72:50:ad:b8:05:b3:b6:f1:a6:24:7e:13:db:
83:29:9e:cc:8b:fa:3b:a7:4a:62:64:85:c4:8e:15:
d9:9b:24:91:4e:25:fe:cc:3d:9e:aa:34:db:70:60:
6a:7f:a8:59:d8:27:e4:4c:eb:2e:25:09:c2:9c:b4:
e0:5d:1f:68:a7:dd:60:67:64:06:39:5f:b4:d6:0f:
cc:12:56:3c:9e:73:81:00:ce:81:e5:ee:24:cf:26:
45:6a:33:c1:bb:5f:f0:80:55:95:83:20:ba:ad:80:
d0:65:1b:30:13:06:01:fa:1a:94:39:0f:b1:87:b0:
d6:2f:bc:7a:41:c9:3c:be:14:28:ff:d7:9e:b4:34:
07:ca:97:ed:30:13:77:3d:a3:5d:f8:78:84:eb:84:
c1:39:29:77:e2:45:60:e8:54:9b:ad:3d:c1:aa:19:
06:76:38:57:eb:e3:61:0f:03:f7:c5:f9:ce:50:ea:
06:33:a2:80:43:51:0b:d8:c5:76:30:f7:a9:91:c3:
74:47:f2:85:b5:30:32:13:2e:e6:c6:19:0d:78:71:
12:b4:c7:3a:e1:83:93:c3:37:19:34:ed:24:64:8d:
9e:26:27:af:72:5e:6c:68:05:20:94:2b:61:38:eb:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:2C:93:E5:02:E7:C3:E2:3B:18:8A:7E:A3:1F:69:88:8A:4F:9E
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:74:f4:5b:1c:bc:c7:f6:72:e3:e4:f1:68:1a:da:cb:b3:
b5:6f:2c:7b:cb:14:44:31:0d:e2:b0:28:37:74:8a:f8:71:21:
72:4d:5d:54:d3:09:da:e0:d8:f3:c7:bc:94:e0:12:d0:08:c1:
9d:82:01:e8:f6:b4:ed:10:5c:b5:b5:90:b0:28:78:09:ca:7b:
7d:b6:01:f3:ad:ba:db:a7:05:a1:28:8f:be:77:3f:9f:16:51:
b1:ec:3d:8b:c5:d0:37:3e:1d:89:d9:c7:4f:85:c1:41:3a:e2:
d5:70:1a:01:42:97:81:87:74:9c:a9:3c:c8:74:92:b6:0b:a3:
96:5e:60:bd:da:8b:b3:d0:6f:ee:f2:4c:a5:67:d3:fd:2b:dc:
cf:33:d9:40:ce:3e:9f:24:70:70:05:8d:ef:24:bb:4c:30:9f:
25:36:69:ed:f3:29:71:04:4e:11:25:f0:eb:99:e5:92:c0:d4:
1e:76:04:d9:a5:31:db:2e:ec:58:87:2c:83:79:cd:59:1f:bc:
0e:e9:69:4a:0d:dd:c6:ea:7e:44:e1:92:cd:d4:1c:9f:cb:89:
4e:4e:89:48:af:61:88:9f:c1:ac:68:79:7c:5f:6b:7b:a9:35:
a0:21:9f:16:90:78:da:1b:e6:af:60:df:21:3f:ba:ae:04:c7:
66:d5:c9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OXl3ewGqsOLNBkPhqQ75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZGVmYTEzMTFmNTNmNmM0NDE0NjNkYThmYWIzNDAzYWQ2
ODgwMTEwHhcNMjYxMDE1MTEwMTMzWhcNMjYxMDE2MTEwMTMzWjAzMTEwLwYDVQQD
EyhlNzljMmM5M2U1MDJlN2MzZTIzYjE4OGE3ZWEzMWY2OTg4OGE0ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l7jlbxnTjPH7lk5JA6kq3JQrbgF
s7bxpiR+E9uDKZ7Mi/o7p0piZIXEjhXZmySRTiX+zD2eqjTbcGBqf6hZ2CfkTOsu
JQnCnLTgXR9op91gZ2QGOV+01g/MElY8nnOBAM6B5e4kzyZFajPBu1/wgFWVgyC6
rYDQZRswEwYB+hqUOQ+xh7DWL7x6Qck8vhQo/9eetDQHypftMBN3PaNd+HiE64TB
OSl34kVg6FSbrT3BqhkGdjhX6+NhDwP3xfnOUOoGM6KAQ1EL2MV2MPepkcN0R/KF
tTAyEy7mxhkNeHEStMc64YOTwzcZNO0kZI2eJievcl5saAUglCthOOudOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOecLJPlAufD4jsYin6jH2mIik+eMB8GA1UdIwQY
MBaAFAbe+hMR9T9sRBRj2o+rNAOtaIARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYt
NGY4OTEzYTkxNWQzLzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYtNGY4OTEzYTkxNWQz
LzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0909Fsc
vMf2cuPk8Wga2suztW8se8sURDEN4rAoN3SK+HEhck1dVNMJ2uDY88e8lOAS0AjB
nYIB6Pa07RBctbWQsCh4Ccp7fbYB862626cFoSiPvnc/nxZRsew9i8XQNz4didnH
T4XBQTri1XAaAUKXgYd0nKk8yHSStgujll5gvdqLs9Bv7vJMpWfT/SvczzPZQM4+
nyRwcAWN7yS7TDCfJTZp7fMpcQROESXw65nlksDUHnYE2aUx2y7sWIcsg3nNWR+8
DulpSg3dxup+ROGSzdQcn8uJTk6JSK9hiJ/BrGh5fF9re6k1oCGfFpB42hvmr2Df
IT+6rgTHZtXJBQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:15:51 2026 by rpki-client