Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
File: BTUhGbS6RwjxGeTR-0dSvIga9JM.mft (raw, json)
Hash identifier: /9pQ7FnVxPg1+FZWbtPBCScePytPH6ey4J0aSmPdnoA=
Subject key identifier: B6:83:13:4C:9E:22:E6:26:23:17:19:CC:CD:20:6D:D0:56:7A:F4:CB
Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493
Certificate serial: 01A0404E1C5ABF28BA74FC96FDE98C26466C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
Manifest number: 0499
Signing time: Wed 26 Aug 2026 23:00:55 +0000
Manifest this update: Wed 26 Aug 2026 23:00:55 +0000
Manifest next update: Thu 27 Aug 2026 23:00:55 +0000
Files and hashes: 1: BTUhGbS6RwjxGeTR-0dSvIga9JM.crl (hash: V0Uk/RGukyk3k2d7JllShGPKnk3+UrPLKac6tpIHDiI=)
2: MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa (hash: slGMf+J7S5c/IJOgK2UJxKCeMt7lJeZUFKkTZVXCTAw=)
3: WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa (hash: fspyFKIfZ6Cqhpk31ZCqwzmKWRYPSF+dYkvKaabi768=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:1c:5a:bf:28:ba:74:fc:96:fd:e9:8c:26:46:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493
Validity
Not Before: Aug 26 23:00:55 2026 GMT
Not After : Aug 27 23:00:55 2026 GMT
Subject: CN=b683134c9e22e626231719cccd206dd0567af4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:74:e0:82:33:be:ff:30:20:e4:d4:4a:eb:
be:c2:03:11:12:c4:0c:67:b8:e4:03:a4:d4:42:1f:
d6:a6:eb:b0:a1:bc:0b:db:51:ef:b2:04:fb:61:5a:
a9:87:df:e3:bf:cf:3d:1b:89:98:ea:b5:9f:67:92:
0a:8f:a3:64:25:ba:44:0b:40:53:44:f9:c8:83:64:
c4:80:98:84:4e:d3:42:14:b1:16:90:a4:ed:1b:c1:
17:57:f8:35:33:d5:1c:ce:fc:19:2e:ff:53:1f:2f:
24:6d:82:7f:12:6b:06:38:06:01:ec:1c:be:18:7d:
22:f1:cd:ef:fa:1b:48:69:cd:67:d0:de:be:66:73:
c9:1f:2a:91:43:60:67:f2:e4:ab:a9:7d:02:7c:3f:
ea:a0:15:3e:1d:48:6f:84:77:5f:b1:f6:9b:23:dd:
37:e1:7b:f3:fc:e5:ab:2c:49:04:96:9e:46:fc:cc:
e0:68:49:63:57:4b:53:e3:a8:9b:4f:c1:86:3d:12:
b9:b9:42:94:4f:1b:4c:79:a4:bf:22:81:ef:f7:46:
ff:ea:6a:26:2f:a2:25:5a:63:c9:aa:f0:04:ee:6b:
0b:f6:a1:3a:cb:31:0c:6e:d7:3c:0a:26:de:a5:12:
6b:ae:90:85:1d:7b:d0:47:e8:b9:96:40:64:3c:17:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:13:4C:9E:22:E6:26:23:17:19:CC:CD:20:6D:D0:56:7A:F4:CB
X509v3 Authority Key Identifier:
keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:22:2e:91:cf:c3:cc:49:3e:da:9a:00:de:b5:e8:44:f9:4d:
9a:e9:5c:5e:37:73:3e:49:f9:7f:70:3d:a8:fa:d3:d6:37:29:
44:23:0a:48:8b:02:e3:42:53:c2:09:6a:77:78:c1:1e:02:f4:
e5:3c:69:45:ca:df:1e:35:75:7f:07:db:6e:ed:4b:55:ea:9f:
f1:ab:2c:c3:07:9e:66:99:06:31:99:7d:81:81:da:d7:a0:23:
fc:1b:13:90:3d:33:eb:ec:7e:4c:8f:0d:b4:ea:d1:31:40:3c:
9c:9c:3c:d0:b9:b0:ed:24:d7:d7:90:95:c9:ad:50:bc:ce:fe:
f6:1d:d7:2f:a7:fd:39:c7:29:26:8f:f8:23:c1:31:8c:62:87:
03:24:07:30:c9:a9:4c:5d:c3:4b:ee:bc:14:de:a9:36:1f:c9:
b1:4e:dc:fa:80:e9:9f:3c:9d:2b:43:72:30:52:8d:b2:8e:03:
31:7d:b4:c0:be:4f:87:bb:04:ca:e6:6f:5a:0f:e7:d0:39:5a:
3b:ae:0d:47:e0:d8:dc:e5:2e:b8:4d:b0:14:a3:89:ec:0d:b3:
08:9a:84:a0:6b:4e:40:f4:c8:ef:c2:52:45:33:e1:a9:68:2e:
21:e4:cd:a5:a5:e5:71:0f:9d:5c:41:66:81:0b:0e:41:f2:f0:
bf:3e:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:16 2026 by rpki-client