Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: bjcnujPthbUi6HO0GAqqltpBH6Sp5de9HtmW+HKcSM8=
Subject key identifier: 69:E2:5D:FD:2D:7A:37:15:0A:87:92:7A:C9:48:C8:27:4A:43:81:38
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019D39418DBC3D30B96C98635264910AD4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 17DF
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: wm33g6CBoVD3+u7Vrmwq+3XsIWpkRXVNRatjlXIHIZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8d:bc:3d:30:b9:6c:98:63:52:64:91:0a:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=69e25dfd2d7a37150a87927ac948c8274a438138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:18:83:ce:91:03:6a:84:12:01:9a:1e:45:
80:bf:93:75:2d:b3:4a:de:8f:1f:8f:4d:6b:d9:be:
93:8d:97:90:0a:86:59:7a:92:b9:e2:97:21:38:b0:
c7:20:63:d1:a9:da:d9:40:5e:8e:79:88:c3:52:1a:
01:09:6c:fa:5a:8f:d5:74:30:ca:9d:13:ad:6e:e2:
47:1b:11:5f:60:6c:da:86:fb:4d:63:d3:56:50:60:
44:ee:1a:6d:0e:1f:b1:3b:d5:99:a9:2b:0f:52:a7:
f9:11:90:ec:2c:61:28:af:71:c1:bc:07:3b:4a:3d:
6c:29:ee:e1:38:f3:90:c9:6d:22:6e:0f:bc:c0:22:
64:09:7b:43:96:48:28:36:9a:97:42:24:3e:24:71:
c9:c3:d6:59:60:20:98:9b:df:05:70:85:08:e6:8c:
9a:90:ab:02:de:66:fa:d5:3c:b5:21:2f:c0:c6:73:
78:99:a7:eb:d3:d7:93:46:d8:4a:71:4a:68:26:3e:
a9:2e:5c:ca:b3:1f:d3:7c:f6:d9:ef:71:8e:5b:6b:
85:28:1a:b4:3e:5b:25:dc:29:ba:ef:1c:7c:71:a6:
e4:84:4d:6b:e9:92:30:82:ea:1d:9b:6a:93:8a:b8:
ba:4a:41:a1:3b:a1:55:c2:d7:3f:2c:b7:32:d8:a4:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:5D:FD:2D:7A:37:15:0A:87:92:7A:C9:48:C8:27:4A:43:81:38
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:49:aa:b3:d6:94:11:5f:2c:d1:2f:d0:a3:93:b8:8b:9e:75:
a1:ea:af:c9:a1:74:04:54:ca:b8:c9:4b:dd:a4:07:f8:b4:32:
2a:a2:1f:e0:aa:56:5e:7e:65:07:36:09:c5:c0:ff:ab:00:83:
87:a1:d5:1e:a9:76:12:c2:c9:2e:43:1f:0f:a5:a9:80:e0:9c:
95:6e:fb:b6:40:d7:d8:6f:88:dd:de:8c:c9:b5:ed:63:75:52:
ca:82:91:53:24:9c:69:91:38:5b:91:f0:b4:19:67:05:12:0a:
fe:51:a1:eb:89:3d:2b:30:5c:86:c6:34:7e:95:19:f1:11:c7:
01:2c:d1:c9:da:1f:98:39:2f:c1:5a:89:3c:31:46:2a:f6:88:
6c:7e:64:59:9d:58:20:c9:8a:a3:df:9c:af:5a:5d:6b:78:7a:
74:72:7c:c5:b5:0b:5b:65:83:5b:33:1c:45:ec:b1:eb:c1:0d:
45:58:2e:d9:9e:d2:3a:be:4c:77:3c:99:f8:ed:ce:17:77:0b:
1e:7a:56:f6:6f:21:69:4c:7c:84:ee:7d:78:ec:62:0c:93:7c:
da:e8:26:14:f2:4e:da:8e:5b:fe:99:07:a0:1f:96:8f:44:6e:
ff:86:6e:ee:e4:9f:32:b0:1f:77:03:74:09:4b:35:20:88:59:
3d:30:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:19 2026 by rpki-client