Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
File: BT37s2MBCw33p8otbR9yl1il9VQ.mft (raw, json)
Hash identifier: zv5jzAKS3tWqOnENxef/EMzDMihXvC+9VKoLjSi4I7I=
Subject key identifier: 52:3B:BC:44:2D:43:CE:5B:32:15:64:8A:B7:52:54:AF:36:5F:D7:AE
Authority key identifier: 05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
Certificate issuer: /CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Certificate serial: 01A04129A574A0F81F4510DE48211EADA20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:00:43 +0000
Manifest this update: Thu 27 Aug 2026 03:00:43 +0000
Manifest next update: Fri 28 Aug 2026 03:00:43 +0000
Files and hashes: 1: BT37s2MBCw33p8otbR9yl1il9VQ.crl (hash: ct7PkMBW1vk4WBxMTrOhDtLuc5Gbb/3IurIGwzaGJag=)
2: rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa (hash: K9+yeHMyCMe7ixPfjQR9+OVohi0uFghFyjSd0m5FsQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:a5:74:a0:f8:1f:45:10:de:48:21:1e:ad:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Validity
Not Before: Aug 27 03:00:43 2026 GMT
Not After : Aug 28 03:00:43 2026 GMT
Subject: CN=523bbc442d43ce5b3215648ab75254af365fd7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:da:0e:63:e3:d2:5a:ce:3a:cf:cc:ae:90:
ec:a3:aa:e3:92:96:f8:e2:ab:57:b6:7a:60:9b:7d:
e2:39:6e:10:23:da:cf:24:c3:fa:ee:39:f9:66:de:
c4:15:4a:00:41:eb:ca:ac:e9:ee:4d:d6:aa:f5:ef:
48:9a:b4:44:a3:d0:80:33:8e:05:f9:e0:f2:56:70:
3c:85:ae:2c:4b:73:02:5e:2b:d1:c8:60:f1:a1:1e:
78:2d:1e:1d:86:db:2a:46:41:27:a8:c5:6b:7d:9e:
14:06:30:4f:03:3d:39:3b:e6:7a:10:22:44:a3:64:
9a:d2:6b:c6:19:2e:0a:05:d5:63:40:ea:c5:9d:7e:
54:b6:3b:a8:68:39:98:e4:ae:07:24:99:c7:ea:58:
77:42:53:06:e6:d1:e2:e0:a7:d3:af:b6:5b:20:02:
a8:f5:c6:d0:1a:22:21:69:2c:c4:e8:df:41:e8:44:
1b:03:22:2e:f6:1b:e6:c3:ba:94:b7:4a:5c:ec:49:
13:04:66:bf:e8:31:eb:9b:e6:6f:c9:2f:fd:58:3b:
a6:d6:5c:70:43:a5:ea:c5:e1:fa:ac:17:84:85:87:
6c:1c:e6:ed:26:1d:40:ef:bc:d0:c5:ec:88:82:ca:
69:f2:8b:60:94:a7:76:56:6a:4c:83:85:ae:15:c8:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:BC:44:2D:43:CE:5B:32:15:64:8A:B7:52:54:AF:36:5F:D7:AE
X509v3 Authority Key Identifier:
keyid:05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:07:df:0b:72:93:3b:6c:9b:7f:9f:6a:7c:04:4a:09:77:
f6:1d:1b:90:c4:af:52:4a:a3:7a:e2:2c:ad:4d:8e:61:6c:2d:
c8:89:e5:a4:e6:08:f7:21:8f:49:37:f7:fa:21:1e:6b:82:c1:
37:e8:c3:a3:e7:31:3f:80:f0:de:fd:8d:a4:35:27:d7:6d:f5:
74:04:de:cf:fc:24:84:e3:6e:0b:a2:d4:80:43:c1:dc:7e:ff:
b7:f4:55:0b:2d:d9:0b:aa:ce:8a:92:db:5f:ad:b8:44:2f:eb:
3b:7d:a2:32:85:5c:a0:fd:88:19:79:4f:2b:01:35:68:13:92:
d7:7c:81:de:8c:b9:c0:85:d9:2b:ac:a9:2c:66:4e:73:b6:28:
95:64:f8:af:96:31:d1:b3:e9:33:59:e7:32:4f:58:df:4e:a2:
a7:52:71:7a:74:83:15:ab:e5:d3:22:8a:80:ad:d4:bd:d1:10:
d3:31:69:90:f4:7f:39:a3:9e:92:c4:e0:ce:0e:0e:e1:4a:dd:
64:21:6c:e8:30:8b:36:5f:e7:a3:21:e8:81:61:80:14:60:d7:
12:b0:96:f0:67:ec:bf:ed:2c:5a:8c:62:60:75:ce:14:0d:fe:
62:db:a7:16:6d:0d:e0:9a:9c:e5:ce:e7:9a:92:ad:e6:f1:9b:
f6:b9:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:14 2026 by rpki-client