Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: dgj8uy6D/xouNdRJ+aVSz+iSmeRYbtLCzkSy73PryOo=
Subject key identifier: EF:E7:8C:28:CC:9B:19:39:24:60:56:95:53:C1:BF:0E:D4:1C:B0:F1
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019D382EA4FBBA03A4E9AE5203F13CF63F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: AwmDmb643WvdlkbYmY_2gHmqTqc.roa (hash: O5KzGeBVdBXIOC5DisowlXBHxvcBR+18w3kCmfDfci0=)
2: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: iWlSTMEwGHp3Uyq8Yfr4dCuK2eL2HzJT8Dt7A/Slhc8=)
3: C_AvtSnRCKwvl2SpLUtFVcIH_w8.roa (hash: Ey0Vszsa81W+PEv7/mryXgBI5kc8rCJJuGeJRL0U9AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a4:fb:ba:03:a4:e9:ae:52:03:f1:3c:f6:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=efe78c28cc9b19392460569553c1bf0ed41cb0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:4a:ae:f0:94:cc:01:75:de:ee:7a:a1:b0:
0b:06:99:6d:e6:ed:e4:9d:32:a8:d2:b3:9d:a3:ff:
a8:2a:bf:31:e1:a4:21:5b:d0:0b:6f:ef:71:e9:b6:
9b:8f:5f:b4:14:2b:11:4e:77:4a:7b:9d:4a:58:a0:
94:cb:51:4e:50:a6:81:09:a2:bc:25:84:ac:72:b2:
75:09:36:62:14:5e:59:93:9a:11:44:dd:6c:29:51:
22:70:38:6f:55:45:61:aa:91:51:54:33:70:ec:5b:
f5:2f:22:70:c8:52:80:a8:1c:cc:f8:03:fc:5c:ec:
6f:51:3e:60:f2:20:66:50:a2:2a:4d:6d:5f:f1:5e:
74:bc:91:71:25:8c:31:4d:51:84:c7:77:f7:eb:91:
51:ef:23:6c:e2:c5:e2:79:4a:0f:cd:15:ef:23:19:
29:38:19:34:82:79:a3:fe:36:1b:87:62:30:2f:c7:
cd:61:1e:41:ae:5d:56:7b:1d:4d:92:97:23:ef:27:
7f:46:62:f5:96:c1:4e:0b:53:e7:66:47:27:6c:dc:
f9:f3:d9:0b:59:fe:ab:44:84:56:78:0d:14:ea:f6:
d1:d8:8e:8d:a8:b1:fd:98:c8:ed:66:db:1c:8f:ee:
dc:12:07:bb:89:99:f9:00:6a:49:80:07:d6:1f:bb:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:8C:28:CC:9B:19:39:24:60:56:95:53:C1:BF:0E:D4:1C:B0:F1
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e0:38:6a:af:da:12:fb:46:c1:b7:71:16:6b:f9:be:05:80:
b8:c3:ac:94:d0:62:86:1d:af:f5:b9:c0:fa:fe:28:09:4f:2e:
5a:87:1d:33:10:2d:73:4b:09:14:48:72:bb:b1:8a:3c:4b:42:
5e:cf:74:0e:de:a3:0a:0f:26:77:96:88:e0:8a:1a:8d:44:30:
f1:80:76:af:c7:e4:a0:d6:d8:60:56:4d:53:89:12:82:12:59:
1b:61:c2:da:2c:1c:2f:f2:6f:36:4d:d1:54:c0:43:94:99:62:
38:5f:69:7b:5f:b6:c0:56:bf:a9:5b:f7:e1:e1:45:ff:62:98:
97:84:ee:16:04:59:06:af:73:18:0e:6c:cf:f3:54:31:66:ce:
51:e7:a6:ec:45:15:55:f4:72:79:ef:d4:32:f7:0f:f6:67:b3:
1b:be:0d:b7:14:78:bb:0b:02:9a:cc:36:f0:a9:df:5c:5c:d3:
b5:71:63:36:7e:db:c9:0b:4d:bb:f9:5a:e5:91:82:12:e3:0e:
69:05:f9:6d:61:d4:59:13:f0:ed:d8:66:91:83:95:8a:98:77:
5a:fa:65:77:12:c5:cc:ce:55:34:e8:6c:0b:38:d8:fc:8a:d3:
e9:e7:c6:5e:64:04:15:4d:fc:1e:a0:c8:4a:71:8b:79:97:99:
05:10:6c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LqT7ugOk6a5SA/E89j8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2QwNGU3MmJiMjQ5Yzc5ZWIxMTY4Y2YxZDQzYTNjYTU0
OGMyMDYwHhcNMjYwMzI5MDYwMTE0WhcNMjYwMzMwMDYwMTE0WjAzMTEwLwYDVQQD
EyhlZmU3OGMyOGNjOWIxOTM5MjQ2MDU2OTU1M2MxYmYwZWQ0MWNiMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dJKrvCUzAF13u56obALBplt5u3k
nTKo0rOdo/+oKr8x4aQhW9ALb+9x6babj1+0FCsRTndKe51KWKCUy1FOUKaBCaK8
JYSscrJ1CTZiFF5Zk5oRRN1sKVEicDhvVUVhqpFRVDNw7Fv1LyJwyFKAqBzM+AP8
XOxvUT5g8iBmUKIqTW1f8V50vJFxJYwxTVGEx3f365FR7yNs4sXieUoPzRXvIxkp
OBk0gnmj/jYbh2IwL8fNYR5Brl1Wex1Nkpcj7yd/RmL1lsFOC1PnZkcnbNz589kL
Wf6rRIRWeA0U6vbR2I6NqLH9mMjtZtscj+7cEge7iZn5AGpJgAfWH7uzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/njCjMmxk5JGBWlVPBvw7UHLDxMB8GA1UdIwQY
MBaAFAU9BOcrsknHnrEWjPHUOjylSMIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjIt
MmE4MTNkYmY0NTgyLzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zNTUwYjQtNTFiNS00NDhiLWFiNjItMmE4MTNkYmY0NTgy
LzEvQlQwRTV5dXlTY2Vlc1JhTThkUTZQS1ZJd2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuA4aq/a
EvtGwbdxFmv5vgWAuMOslNBihh2v9bnA+v4oCU8uWocdMxAtc0sJFEhyu7GKPEtC
Xs90Dt6jCg8md5aI4IoajUQw8YB2r8fkoNbYYFZNU4kSghJZG2HC2iwcL/JvNk3R
VMBDlJliOF9pe1+2wFa/qVv34eFF/2KYl4TuFgRZBq9zGA5sz/NUMWbOUeem7EUV
VfRyee/UMvcP9mezG74NtxR4uwsCmsw28KnfXFzTtXFjNn7byQtNu/la5ZGCEuMO
aQX5bWHUWRPw7dhmkYOViph3WvpldxLFzM5VNOhsCzjY/IrT6efGXmQEFU38HqDI
SnGLeZeZBRBslw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:24 2026 by rpki-client