Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: YkBD79E5jk5vIg+FCTmJn6BOmL2EWi+hIqOmHlUX5oI=
Subject key identifier: 62:8A:4C:39:26:EA:0B:7E:7F:C0:AE:F3:57:7F:E2:A4:DE:30:F4:2A
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 01A15F68A50CA4EB9AE2A4BC5E936AC75589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1A05
Signing time: Wed 21 Oct 2026 17:00:55 +0000
Manifest this update: Wed 21 Oct 2026 17:00:55 +0000
Manifest next update: Thu 22 Oct 2026 17:00:55 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: vPWfDVxcYQo/MONpFCY8zXyOu/451tBNhDSV/k7QYzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:68:a5:0c:a4:eb:9a:e2:a4:bc:5e:93:6a:c7:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Oct 21 17:00:55 2026 GMT
Not After : Oct 22 17:00:55 2026 GMT
Subject: CN=628a4c3926ea0b7e7fc0aef3577fe2a4de30f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:d0:86:7d:17:67:10:55:a1:78:7c:96:0a:
e1:0a:aa:9e:ba:7a:9d:53:d2:d4:32:f5:0d:f8:d5:
36:df:14:b2:75:63:94:b9:cc:d1:b6:e0:a4:5e:47:
bc:ac:f0:2a:ff:34:f8:90:a8:2c:be:c3:da:c6:ae:
4b:e1:d0:4d:a3:52:13:56:c3:73:28:7a:e5:ec:71:
3c:89:31:20:7a:2f:a9:5f:29:5a:c2:9f:ac:82:22:
7a:bf:2e:47:41:e6:f1:d5:99:ba:7f:57:b9:16:94:
fb:d3:02:9e:f1:86:4d:6a:c3:62:96:63:a4:42:4d:
2e:d5:2f:4d:95:0b:22:8d:7c:0a:9f:fb:24:04:69:
8e:5b:e2:5b:ce:44:52:c2:4a:d5:26:c7:34:64:4d:
98:af:0d:2b:55:e3:fe:ac:48:ee:a4:a1:fe:0f:8a:
78:3d:37:0f:ce:f5:75:65:c2:97:13:29:83:2e:36:
54:cf:fb:88:78:96:5d:5b:2b:35:04:fd:ba:0f:2c:
cc:41:93:b2:20:b1:8a:0c:0c:8f:f1:db:b7:37:7b:
76:05:d1:fc:93:8d:85:02:9e:d2:10:e1:81:8e:51:
fd:61:43:98:79:4b:2f:c4:2a:3c:5d:e3:8f:de:15:
46:7b:f9:b8:86:2d:72:7f:54:dc:65:e6:ef:98:44:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:4C:39:26:EA:0B:7E:7F:C0:AE:F3:57:7F:E2:A4:DE:30:F4:2A
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:71:94:a5:4d:13:c3:93:8d:9f:56:49:b0:8e:fc:42:a0:07:
70:95:bf:6b:8a:20:25:87:51:b7:01:ee:92:69:de:4e:8e:e7:
a4:a1:39:03:4c:e5:4b:ed:72:b0:07:3d:82:b0:60:34:e8:74:
e9:ae:d8:14:de:24:d3:97:35:fd:11:9a:cc:f0:e0:8b:29:84:
69:a1:64:02:3e:4b:43:d6:96:43:36:de:c6:05:ef:f1:af:de:
30:0c:0f:fb:5e:33:48:95:20:8c:0b:24:86:9a:24:d2:5d:0f:
54:d6:a2:60:90:a5:4c:47:05:2e:cf:38:c9:16:56:0c:ed:84:
02:0d:14:9e:9d:3e:11:e9:c0:57:d8:fe:54:23:a3:53:49:6f:
7f:e0:45:fe:65:d4:b0:b0:f0:6c:64:4b:53:c0:f8:52:25:2a:
f1:51:02:78:d3:8c:30:c2:62:95:dd:5c:83:d7:71:6d:a3:17:
e0:2d:5c:2c:dd:93:30:94:2e:3f:9e:d2:35:47:bb:f4:e4:98:
18:09:b6:cb:14:4f:41:48:3f:37:da:52:ba:1f:7b:c5:36:39:
1c:a6:d6:9d:65:b7:68:92:13:72:55:9f:4a:2a:ee:03:1b:57:
af:11:92:5e:fe:b4:99:aa:50:1c:26:ad:1c:6a:b3:f0:5c:97:
85:5b:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:30:53 2026 by rpki-client