Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: FaDJiXMg7H0AvaVK0TsU5+K9W+TptwuaxNBUhXm+2oQ=
Subject key identifier: 18:3F:09:E2:0E:3A:63:AB:81:20:17:A2:42:46:58:59:37:86:E6:DA
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 019D1F80FD205840B4F116F67F3614182511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1887
Signing time: Tue 24 Mar 2026 11:00:40 +0000
Manifest this update: Tue 24 Mar 2026 11:00:40 +0000
Manifest next update: Wed 25 Mar 2026 11:00:40 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: QlSlNUmhQH1vE826rxLUNBvDFMWXDmkl+qY26hpMZAk=)
2: M_A3e3R8jmuhb-5C7iHURiY1mF4.roa (hash: pposJ11ASLS11U+yEHFg+J1Wl26KYyJ65Lb1yj0wnLk=)
3: lymEYBnEsOOn3Gt3ofBUwjJiEh4.roa (hash: LpPWNCNkVyG5VQaWrVRu1QVmk/jU2fSetHMizIkYcOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:80:fd:20:58:40:b4:f1:16:f6:7f:36:14:18:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Mar 24 11:00:40 2026 GMT
Not After : Mar 25 11:00:40 2026 GMT
Subject: CN=183f09e20e3a63ab812017a2424658593786e6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:55:ef:12:0d:de:eb:09:d6:86:1e:bc:87:
03:c8:42:16:64:bc:a0:f3:20:4c:e0:a1:c1:db:94:
46:e7:10:1e:cc:ed:1c:06:b0:0a:1c:87:c0:8c:ed:
19:f2:34:af:d2:0c:54:58:32:dd:de:8d:56:da:41:
d8:1b:73:cf:47:bf:c7:1f:79:a0:41:cc:8f:c7:44:
cd:c2:0a:29:de:3b:8c:e1:10:28:8f:37:24:d2:ea:
6a:80:be:ab:41:3c:63:b8:35:f0:bb:16:f0:2e:b0:
88:29:74:ab:78:0c:29:e5:5d:29:d7:30:0a:1e:86:
4b:eb:8d:38:23:61:cb:09:52:1d:3d:dd:ae:df:31:
17:1d:68:27:f3:d1:dd:d2:51:b5:ce:23:ee:18:d9:
1d:06:5a:09:f9:4f:8a:54:65:88:7c:1d:7e:a2:76:
42:a3:4d:c4:92:44:7a:c2:f1:c1:ec:dd:5a:db:f6:
0d:b7:37:df:1a:3d:e7:18:c6:8b:e0:04:d8:0d:16:
57:27:aa:54:64:b5:8c:a8:d9:dd:1b:04:0c:6c:5a:
0d:4d:00:26:03:16:33:10:55:93:25:a3:cb:75:b4:
06:09:9e:94:30:ce:48:48:22:8a:65:74:3a:a5:fa:
9c:ee:13:16:d8:f2:e6:5c:af:3d:4a:b6:ae:5d:0c:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:09:E2:0E:3A:63:AB:81:20:17:A2:42:46:58:59:37:86:E6:DA
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:67:95:de:2f:38:e1:f7:d5:5a:6c:c3:0f:88:81:89:94:2c:
b9:21:66:95:48:2b:18:fb:cf:ec:60:2f:6d:f3:40:5f:34:6c:
de:3f:ce:48:e9:b9:d1:96:8f:85:29:dc:39:5e:81:62:f9:ca:
2c:6a:32:44:69:9f:30:3b:67:f9:99:81:2e:67:ce:0d:3c:f2:
15:4b:ba:a0:9a:3e:b1:d7:52:c9:c4:5f:53:d1:ff:2c:fe:b2:
01:3e:a1:af:f9:87:ac:22:e4:85:66:31:26:8b:93:f4:2e:6a:
04:bb:14:70:64:90:e7:1f:32:ba:48:1e:83:c8:2d:fd:1a:b9:
35:a0:36:6f:45:78:67:f2:12:0b:8d:91:d4:5c:ef:33:8c:55:
bd:51:05:fa:41:06:bd:05:48:96:40:5b:73:14:ce:9a:28:df:
df:78:a4:20:b8:32:b1:01:b0:0e:0b:3a:e7:1f:be:62:6a:41:
be:a9:90:0e:34:1b:cb:c1:0f:46:e8:7e:4d:ca:15:e6:f1:c1:
91:08:72:ea:bb:ac:89:97:ea:de:53:94:c0:04:6c:4d:80:af:
33:82:b4:ad:f7:59:ed:1d:11:2a:30:f0:3a:6c:fa:49:62:73:
0b:05:1d:11:ef:b8:c4:21:8d:f4:f5:a4:67:c5:51:1b:18:12:
68:32:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 21:19:55 2026 by rpki-client