Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: wlQZA/eHbexmHYwsQu+Vjodkj2SreYpDfhTsFPnGbuw=
Subject key identifier: 98:CE:DF:C7:6D:C8:50:72:D9:56:B6:88:46:AB:13:A2:7B:93:06:D1
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 019D216FF06C3A5F81029D9DC5B32671FE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1888
Signing time: Tue 24 Mar 2026 20:01:17 +0000
Manifest this update: Tue 24 Mar 2026 20:01:17 +0000
Manifest next update: Wed 25 Mar 2026 20:01:17 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: RgyFnV3xdjKiF4e8dWgRBpox8cT304t5CDszBIeU9gw=)
2: M_A3e3R8jmuhb-5C7iHURiY1mF4.roa (hash: pposJ11ASLS11U+yEHFg+J1Wl26KYyJ65Lb1yj0wnLk=)
3: lymEYBnEsOOn3Gt3ofBUwjJiEh4.roa (hash: LpPWNCNkVyG5VQaWrVRu1QVmk/jU2fSetHMizIkYcOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:6f:f0:6c:3a:5f:81:02:9d:9d:c5:b3:26:71:fe:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Mar 24 20:01:17 2026 GMT
Not After : Mar 25 20:01:17 2026 GMT
Subject: CN=98cedfc76dc85072d956b68846ab13a27b9306d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:50:9e:29:39:f2:9a:f3:ff:bd:d3:53:ea:
b1:56:95:ad:cd:4a:29:27:e6:ca:52:76:49:15:65:
28:92:80:95:53:0f:72:da:c0:93:2d:51:9b:c1:4b:
43:f0:e6:83:b1:0c:e4:a5:f9:15:1c:b5:4d:de:26:
a6:00:6c:fc:fc:46:cc:ef:54:b7:5d:d4:28:93:5c:
ad:c9:b1:5c:f1:01:f6:48:af:a8:92:df:97:94:b8:
07:e6:e9:5d:9d:30:57:61:53:bc:e4:2d:83:c6:c9:
8e:56:91:1c:f6:83:b0:da:ae:91:ba:1c:f9:27:6e:
a4:80:de:cd:b4:77:be:16:7f:7e:6e:8d:29:66:6b:
31:fc:cf:ae:62:36:31:df:54:82:e5:de:f1:04:d6:
49:b6:91:a9:0a:8b:95:b8:96:10:e3:62:82:62:bc:
1a:69:22:ee:72:fe:81:10:11:97:19:22:75:cd:39:
c4:22:52:a2:c3:59:1b:0d:a1:55:01:f5:d1:9b:46:
aa:6b:ca:dd:e5:c7:e6:e1:7b:2e:9b:1c:c3:21:9e:
46:13:af:b4:97:67:99:39:57:04:34:ab:89:1d:7e:
b2:ee:16:74:ed:8d:01:a0:22:dc:69:a4:dc:9a:c9:
46:79:45:3e:51:92:65:2e:8a:6d:51:91:c3:f1:af:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:DF:C7:6D:C8:50:72:D9:56:B6:88:46:AB:13:A2:7B:93:06:D1
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:84:3e:32:54:67:60:cb:8e:10:ba:ad:65:4c:15:a7:8a:33:
b2:00:5b:63:90:36:43:66:cb:f9:74:b6:91:94:54:75:e5:ec:
61:7d:b0:29:07:09:1e:ff:de:5e:5a:1d:ba:42:e8:9e:73:65:
41:d4:a1:ad:86:4c:09:b2:42:ac:c7:68:67:13:1c:9d:44:4f:
00:11:5c:63:57:7a:5d:cb:d7:b5:c8:2a:ac:46:af:fd:f8:8e:
00:2c:54:5e:7c:8a:60:01:73:43:9d:83:92:d2:11:1b:1c:37:
5c:44:98:b4:cc:51:81:d9:c8:87:ee:a2:ad:2b:39:a5:74:4f:
90:58:3e:93:cd:64:68:1d:26:f8:af:f1:17:81:36:b5:9d:8f:
75:a8:e3:f2:ab:5a:33:9f:51:fe:9e:d4:ad:48:42:8b:a0:92:
85:74:71:ad:cb:58:1e:60:51:5f:8a:65:db:d0:b0:26:ba:84:
ce:76:da:f3:b7:6f:9a:55:fc:f4:56:ac:cf:fb:0a:4a:22:6a:
a8:f4:c5:0e:38:4a:d7:de:f2:5d:df:91:87:4d:e8:32:69:a3:
87:ed:20:a7:e8:38:9d:1e:e8:e5:4a:a1:cd:e6:26:9c:61:fc:
03:1f:98:c6:81:e4:99:00:bd:0a:f4:52:0d:b8:2c:25:79:48:
c2:55:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:36:28 2026 by rpki-client