Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: ZVjjg2NlV6HSS1d5qetDUZFLG/1F/WDoE5hrb6PC5DY=
Subject key identifier: 13:9B:32:0D:0D:C3:2E:10:B3:D2:24:54:9C:3B:9C:CC:BD:8A:A5:F6
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 01A001DD3F9D3CE4E7D165707ADAC94139F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1950
Signing time: Fri 14 Aug 2026 20:01:11 +0000
Manifest this update: Fri 14 Aug 2026 20:01:11 +0000
Manifest next update: Sat 15 Aug 2026 20:01:11 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: 5Wky8f2Jpg08WzarO9gebmIPOdoS4pPV8VMNqvjIu0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3f:9d:3c:e4:e7:d1:65:70:7a:da:c9:41:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Aug 14 20:01:11 2026 GMT
Not After : Aug 15 20:01:11 2026 GMT
Subject: CN=139b320d0dc32e10b3d224549c3b9cccbd8aa5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:6d:83:fb:04:1e:01:7d:9c:1d:6b:6a:10:
98:1c:6b:f1:11:7e:47:8f:a6:ad:16:f7:08:64:07:
1b:05:fe:2d:7b:1d:13:0f:92:b4:8a:ce:2a:76:79:
1a:8c:bd:5f:ca:ad:e1:e5:9b:df:ff:34:a9:83:43:
81:9e:83:d5:4c:a1:ec:15:94:a0:6b:ec:82:35:71:
65:f2:68:fe:ce:b5:ca:a6:2e:f0:db:12:8a:91:fa:
d8:87:85:96:29:8f:cc:09:18:c1:a5:5a:cf:1d:42:
a3:5b:3a:6e:6e:38:e7:36:bd:6a:b7:70:13:db:b0:
75:ba:2f:3b:6b:d8:8f:b2:dd:53:0f:b1:52:7d:51:
63:7a:b3:79:59:29:7a:1b:c6:f4:03:70:0b:bf:24:
8a:b6:61:9f:2c:b2:f2:1a:f9:66:dd:5a:6b:cb:0f:
3b:57:11:da:ce:de:24:d0:fd:95:54:f1:c4:8b:22:
6a:0c:f5:05:35:ca:a3:95:ec:aa:ba:af:9d:50:73:
4e:ba:ac:5b:64:c2:10:36:92:6e:a8:be:e9:10:b4:
c5:dc:50:4f:02:15:0c:9f:3e:5e:c8:c2:23:4c:c2:
9a:82:41:1d:9f:6c:d1:5f:6e:1c:0a:ef:f5:a1:34:
8e:5d:d0:38:ef:44:79:ed:5e:8d:14:1f:0c:19:d5:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:32:0D:0D:C3:2E:10:B3:D2:24:54:9C:3B:9C:CC:BD:8A:A5:F6
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cb:6d:3f:d4:20:77:e1:f9:74:8d:6c:cd:7e:a7:91:d3:41:
ac:75:fa:44:8f:5a:8c:dc:ba:af:4a:32:3b:d3:f4:59:1b:7d:
07:7c:f2:1d:e0:ba:14:e2:ff:c8:c1:03:93:ec:9f:0a:0d:ce:
d2:19:00:b1:ba:c8:78:9c:87:27:55:fe:13:07:eb:d3:e7:de:
70:1a:53:d6:0b:76:2a:5d:59:a3:ab:62:c1:6a:c7:f3:43:07:
ff:24:55:7e:40:75:15:e2:af:9f:ab:91:d8:52:c3:0c:bc:58:
94:cd:e6:5f:61:1c:a3:7b:b1:02:dc:fe:00:89:a0:80:7d:52:
e4:60:1f:ff:c4:ac:50:bb:8b:94:4d:fd:4a:da:7a:71:60:e4:
d8:d9:9e:d5:5c:e5:ac:bb:84:99:9d:1e:7b:1d:18:70:c2:3a:
fe:75:b0:57:ce:1a:75:d8:90:49:17:a2:09:cb:14:1c:93:99:
3f:9a:2d:54:65:64:78:34:ff:0a:8b:88:f1:e6:48:74:d0:ed:
25:5e:39:63:a6:ab:82:2f:17:44:0d:ad:dc:5e:7c:26:98:cd:
ce:af:66:22:37:05:12:2b:b7:8e:fe:90:be:0b:a1:1e:28:25:
45:28:b7:27:61:5f:27:e7:07:5e:b6:89:ee:26:c1:ee:eb:6d:
51:9d:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:23 2026 by rpki-client