Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: wJq+31Vu1e7wZ0ulFqsM1Ujjx+B/RuEnUT4A8Gf9BdA=
Subject key identifier: 62:48:CA:FA:DD:B9:B6:DA:3F:A6:0D:58:36:8B:7A:0A:7D:B6:D9:7C
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019F18306D2CD5F21A2DFA32760C4B84E269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 18D7
Signing time: Tue 30 Jun 2026 11:00:54 +0000
Manifest this update: Tue 30 Jun 2026 11:00:54 +0000
Manifest next update: Wed 01 Jul 2026 11:00:54 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: FoO+K0vFS29GL0S+uvfOgNDy3lI+I0/2ZHt2cFBA99U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:6d:2c:d5:f2:1a:2d:fa:32:76:0c:4b:84:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Jun 30 11:00:54 2026 GMT
Not After : Jul 1 11:00:54 2026 GMT
Subject: CN=6248cafaddb9b6da3fa60d58368b7a0a7db6d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:1a:cd:95:0e:3d:95:05:af:cf:52:3c:14:
1d:b5:18:10:5f:7e:2f:f0:e1:93:4f:f2:c4:d2:48:
d8:a4:c3:0f:ab:1f:88:e2:02:67:31:ef:94:89:16:
d2:41:0c:be:69:8c:25:fc:bc:11:14:e7:90:fa:fd:
fc:44:1c:13:cc:24:db:0f:7b:4c:39:b5:56:3b:27:
0f:ad:96:ae:ec:1e:11:22:e6:e7:8d:ba:ab:0f:74:
0b:56:09:e3:71:fe:be:f7:cc:8a:e8:f7:f6:9f:9f:
fc:2f:18:da:79:e0:5b:9b:d6:ea:71:43:02:69:67:
0a:5f:b5:d8:7b:07:0c:e0:fe:86:a5:6e:fd:ac:c6:
c6:e7:53:ad:6c:67:8a:31:43:58:5a:c3:6a:6c:9e:
54:35:18:6e:88:20:40:8d:e4:b1:00:54:68:02:05:
73:34:b7:31:ed:fb:52:09:5c:4e:17:67:24:4b:4a:
19:ca:6e:aa:1a:8e:a7:38:1d:cd:c2:b4:ab:fa:f9:
54:46:b3:3d:55:d8:79:a0:0b:9e:9e:57:2b:3d:84:
03:12:c4:eb:22:21:d2:85:11:1d:ee:3a:f9:3e:9d:
be:7e:a6:24:cd:7e:6c:fe:0a:83:3d:15:88:8b:ab:
74:94:30:e1:19:c7:d6:2f:a7:1f:ac:43:5f:50:e5:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:CA:FA:DD:B9:B6:DA:3F:A6:0D:58:36:8B:7A:0A:7D:B6:D9:7C
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:4a:aa:c6:e5:65:a2:80:ed:4f:34:f4:9f:d9:d3:e6:8a:
a5:38:35:f3:eb:41:5e:88:cf:4d:21:26:70:81:a7:c9:59:4b:
25:fc:31:82:ad:30:aa:bb:ad:90:30:71:8e:57:1b:0f:6c:1b:
a6:49:11:a0:26:07:37:76:bd:26:ef:f5:bd:5c:fb:8c:44:b3:
3b:f4:e2:19:b9:58:c2:d3:e7:ba:31:c0:05:38:0a:45:11:cd:
e2:87:34:04:58:de:ab:d6:5d:0c:18:33:8c:ef:67:bc:71:b1:
3b:7b:19:14:ff:e2:d7:03:93:2e:90:ca:90:92:67:6e:05:ca:
27:7d:df:63:0d:5e:89:ff:72:b3:1a:5c:49:41:8d:3e:87:de:
76:db:62:69:21:7b:10:f3:e8:84:38:22:cb:18:b2:69:97:fa:
bb:23:9e:d0:09:f0:94:4f:2b:d3:47:b2:94:bc:15:79:62:0c:
61:b0:c9:cd:f8:6e:e1:88:dc:df:39:de:07:50:68:b8:a3:e6:
e9:a6:ea:20:48:43:ee:ff:60:4a:cd:1c:a1:7b:1c:04:8f:da:
a7:98:2a:a8:eb:67:86:fb:7b:f9:e7:b5:a9:8b:6e:3b:4c:2e:
89:e1:38:14:d6:10:c2:12:be:a9:91:cc:69:87:6c:14:3d:8c:
22:84:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:01 2026 by rpki-client