Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: FAfx0GgKsWu7MSRE1fQTOetj/lMAg/Af35/NfVKDS7s=
Subject key identifier: 48:BC:33:E2:51:17:2B:0A:A3:70:AF:33:61:47:1D:71:37:26:54:1A
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 019D390994FE0493B3107C71EE4EE4ABF4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 133D
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: K7mk41+olgLPw3GIaxPMaRAZWt0xyihLWiazlL6xHYM=)
2: CDyO9jxGLeWnKi1oYro8zSOZ6J8.roa (hash: DGs9MBH9WSDg0RygkGFz7r1uMcCMHw3eINfD0pYmxrk=)
3: zNSZogebh91OuVEeY5zQNX0A5Ic.roa (hash: 2eN5NFfRRB29QtCtsqn2i6PCdLwZTn0MMIEPVRBBMcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:94:fe:04:93:b3:10:7c:71:ee:4e:e4:ab:f4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=48bc33e251172b0aa370af3361471d713726541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:17:cf:93:a8:d5:02:e5:0d:1d:c2:68:5b:
2d:95:0d:d5:c0:93:67:58:2f:99:3b:60:25:c5:57:
94:08:af:e4:5f:85:85:2d:f8:13:30:a0:fb:05:9b:
d4:53:d8:31:0a:61:4e:04:af:a7:ac:bb:7c:9f:f3:
6e:7d:c4:c1:d0:84:27:44:69:b3:22:22:61:ca:04:
48:39:67:bb:16:56:78:d3:5c:cc:4a:a2:5c:b2:72:
96:e0:58:99:87:f8:39:6d:16:71:14:9d:d9:fa:63:
f1:76:ca:be:fc:f5:ed:ab:27:26:82:d2:b9:0c:92:
c0:a1:7e:21:9b:d9:8e:7b:8d:3e:5a:a7:54:87:6c:
82:e0:bb:77:8e:09:7f:01:eb:29:42:d9:64:9e:ea:
5d:ed:72:9c:84:4e:8c:cc:1f:e0:a2:1b:a1:f7:41:
d3:2c:fc:7f:70:6b:d9:8a:f7:7f:75:49:c6:cd:c4:
32:6c:75:cd:e7:9f:29:e5:a9:3e:d6:3e:66:9b:60:
10:d9:a4:a5:bd:ba:bf:16:e3:3a:e7:f5:1e:49:39:
9e:0f:a5:17:d9:89:63:35:45:5f:fe:ac:8e:5c:8c:
9c:2c:15:12:0f:2b:55:1e:97:ef:0c:42:db:66:37:
42:cd:aa:b2:72:b8:62:4b:14:e5:17:d8:00:e1:10:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:33:E2:51:17:2B:0A:A3:70:AF:33:61:47:1D:71:37:26:54:1A
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:e2:d8:03:0d:79:89:86:4c:ac:cb:5f:03:1e:20:28:72:
3e:76:6a:cd:a5:ba:6a:57:10:19:79:0a:c8:88:0f:af:30:cf:
e1:6a:fb:bb:b1:96:c7:28:fd:0c:cf:39:8e:d8:2e:41:95:ac:
e5:53:a0:72:12:17:15:14:ae:b6:03:54:0c:b5:5d:6c:91:dd:
60:cb:5c:95:69:2f:e5:07:ad:36:10:be:8a:f4:ce:59:12:57:
75:93:65:d9:19:0f:94:f2:be:a0:6c:8e:60:f5:3b:77:c1:67:
e1:30:6f:2f:e5:af:be:85:06:e7:9d:90:59:46:79:28:b0:12:
4f:2d:c7:2b:91:6c:ff:72:a8:d3:ee:e9:63:3a:8e:dd:e6:54:
67:4d:b8:aa:c6:2d:ee:ee:0f:4c:c5:d0:cc:4f:76:06:13:00:
f2:91:55:5b:df:57:77:49:22:d7:dc:40:cd:b3:66:8b:ab:27:
89:00:07:a2:fd:3f:0a:10:49:df:4b:c6:29:59:39:07:18:71:
c2:ea:2c:10:6e:a7:65:50:9c:76:31:cf:cc:68:d1:94:2c:50:
3d:1b:35:f4:f8:41:be:f5:45:e5:f1:67:0c:6f:5e:57:3e:42:
28:37:50:82:19:4f:2a:f1:e1:97:d6:37:41:4d:36:71:9b:a9:
0b:e1:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:20 2026 by rpki-client