Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: w6HzBS+1uk3HoRk8wqRHuS9uEad2rEHsZgSSjAmyTIU=
Subject key identifier: 3E:85:2F:92:4B:0D:81:D7:65:48:F1:65:6D:52:C4:09:F2:11:10:E1
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019CEE94B0F4567231C8FF96A99109AA12C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 17FF
Signing time: Sat 14 Mar 2026 23:00:47 +0000
Manifest this update: Sat 14 Mar 2026 23:00:47 +0000
Manifest next update: Sun 15 Mar 2026 23:00:47 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: HZO3EEzMDGkzY/a6gxO56OERp7WUvFy+0ULGaXf5VWk=)
2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ee:94:b0:f4:56:72:31:c8:ff:96:a9:91:09:aa:12:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Mar 14 23:00:47 2026 GMT
Not After : Mar 15 23:00:47 2026 GMT
Subject: CN=3e852f924b0d81d76548f1656d52c409f21110e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:83:18:85:0b:ba:01:4e:0b:f4:83:8e:cf:
de:80:42:14:d9:ee:80:a3:47:50:5c:34:81:c2:f4:
f4:c6:ea:44:9e:c8:d1:42:69:39:91:0f:fb:16:f0:
9d:c0:93:5a:23:ae:46:72:94:10:df:76:15:16:85:
69:c3:0f:1b:c3:2a:3b:77:2c:a8:0f:16:71:e1:6b:
cc:17:a9:d6:f7:7b:39:9e:38:ed:be:9c:97:86:4c:
0d:d3:c3:ff:57:13:52:25:6f:59:16:6c:6b:56:a0:
8a:ee:ab:0d:aa:50:11:36:d1:d4:1b:0c:09:c6:9c:
3c:90:16:34:bf:7b:12:6d:2d:8d:08:7e:c0:f3:08:
4b:22:d4:aa:df:ea:d6:25:b9:73:99:73:f9:6c:c9:
1d:42:d0:b8:96:3a:95:aa:eb:03:b3:29:23:bf:e9:
e9:20:8f:9d:19:20:9c:99:1b:a2:03:20:f3:c3:8b:
b4:66:38:b7:f7:fc:91:9c:b9:a9:9c:9f:9e:c3:19:
0e:30:6d:ac:8a:d3:39:b2:fa:51:53:1a:1c:e6:69:
e2:82:e0:06:36:60:b3:66:8d:2d:77:ff:c6:1c:87:
f6:99:58:6c:ef:bd:4a:f4:ea:0e:b9:85:c3:3e:48:
97:11:50:d6:29:d9:b3:81:ae:5f:f2:34:dd:34:8b:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:85:2F:92:4B:0D:81:D7:65:48:F1:65:6D:52:C4:09:F2:11:10:E1
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b2:fd:c3:42:9f:da:97:8f:ac:8c:8b:98:ab:7d:22:ab:a6:
8c:5d:17:a5:29:20:0d:8c:a1:0e:e9:21:00:7b:49:68:05:9c:
da:97:5f:72:53:8b:17:b2:bd:01:8c:f8:04:0b:d2:b1:eb:a2:
db:18:15:9c:8d:1a:c1:f9:9f:3d:44:d1:79:f8:06:1a:3b:2a:
60:ce:30:65:b0:8c:97:89:d7:62:f6:af:60:1b:9e:77:73:c4:
a9:77:78:c7:49:b2:20:83:be:11:6d:e4:ad:9e:f6:5e:4a:8a:
9b:5a:87:eb:f5:84:82:75:5e:cd:fe:33:7d:63:8a:03:9e:96:
88:06:55:ba:34:aa:a2:4e:61:5b:89:ca:a9:9d:c3:3b:2b:85:
d8:98:fe:dc:7b:2c:22:9a:cd:fd:56:2d:b0:9f:fc:80:90:a7:
67:c9:f8:fc:46:4d:4a:fa:b8:fd:ff:79:09:48:86:52:1e:f2:
17:05:ce:9a:c4:d6:02:ef:e7:44:ea:f4:c8:2b:fd:6a:86:53:
0e:8b:c2:03:a1:5a:ca:fb:6e:14:f2:94:64:32:18:ae:8e:cf:
68:d7:71:00:35:ac:3c:1d:c7:a8:86:d6:47:8a:82:75:56:76:
c4:60:c0:c8:ab:b1:d5:ef:34:e5:a6:6f:be:08:b3:07:95:ff:
01:dd:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:24:10 2026 by rpki-client