Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: /2uuc5xXUHsVfW32YzoeRAKOwj1gZzH/juyi2eqMMBM=
Subject key identifier: 3F:32:B2:D1:A4:64:41:86:26:AD:F2:0D:51:B6:3A:A3:CA:F3:97:CF
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 019D254C2FBB2E1FE49D0CBF48EE9E565A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 0559
Signing time: Wed 25 Mar 2026 14:00:43 +0000
Manifest this update: Wed 25 Mar 2026 14:00:43 +0000
Manifest next update: Thu 26 Mar 2026 14:00:43 +0000
Files and hashes: 1: VmT1Sho8ydxnIvte_UcEISrCOVY.roa (hash: JUbxvsuSh9DNNPxCyYh0gkLv8eHHl4hp0u9soB0vgC8=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: 5GKVpXR7+9w6vVsnoGMfzRFIwXv5E/N2JdfzS7IgR6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:2f:bb:2e:1f:e4:9d:0c:bf:48:ee:9e:56:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Mar 25 14:00:43 2026 GMT
Not After : Mar 26 14:00:43 2026 GMT
Subject: CN=3f32b2d1a464418626adf20d51b63aa3caf397cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:01:6b:96:cb:02:f7:5b:7b:b7:0c:bf:8a:
db:69:86:6d:57:25:bb:5a:3e:5c:b3:c1:0e:42:26:
a4:c8:27:6b:b8:dd:68:82:81:48:56:85:e8:3c:21:
b5:c4:3f:2e:a3:55:13:15:13:b6:da:36:0b:08:ac:
e1:fd:13:b8:9a:02:12:a4:ca:4b:a6:09:76:24:91:
73:be:90:6b:1f:54:99:0e:60:24:b3:b5:19:7a:cd:
55:8b:e1:a4:2e:30:58:93:6a:50:6f:8b:e7:68:d4:
bf:75:6c:3e:50:5f:fa:f6:bf:a9:fc:c7:de:2d:b3:
3f:e2:9f:53:1d:f0:37:7e:af:b9:f1:d6:b6:13:c1:
88:a9:53:87:b2:8d:22:1d:92:0b:ed:f8:07:e2:df:
31:eb:2c:cd:b6:14:6e:0f:9f:29:89:10:9b:38:d5:
20:5f:86:26:52:a3:94:d3:b9:54:e9:e0:2e:f3:3e:
4b:9b:11:ba:4e:fe:a7:79:b2:c1:2c:12:75:87:e3:
75:77:e5:04:bf:7e:47:83:76:b1:bd:fa:cb:58:6b:
75:7b:cc:2c:0a:aa:96:fb:e2:75:d7:ab:de:51:00:
2f:dc:cf:b3:07:b4:e6:5d:a5:dd:3d:47:a0:5b:b0:
20:65:92:44:8e:10:19:05:e2:e1:05:10:6b:fb:05:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:B2:D1:A4:64:41:86:26:AD:F2:0D:51:B6:3A:A3:CA:F3:97:CF
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f1:48:ac:a2:88:dd:8f:d2:96:e1:9a:7f:3d:e3:ac:db:f5:
9d:c7:cd:ee:99:97:c5:99:6f:d6:f9:9f:70:42:49:25:78:77:
f8:bb:88:bc:6e:37:4d:44:65:67:a7:87:61:7b:6d:92:e9:b4:
a8:3c:12:2a:af:5f:03:8b:b3:50:e8:c6:ed:02:72:ca:0f:95:
64:96:7b:49:4d:dc:41:d9:83:d0:ed:10:73:30:6b:14:5a:6a:
56:ca:5a:bf:95:b2:59:b0:13:d2:f9:ad:c1:e8:a8:07:f0:79:
22:58:5f:b0:9c:8b:4f:10:29:f2:65:47:21:8b:b3:fc:91:cf:
ba:e9:51:97:a4:47:72:90:a5:0c:cf:06:9a:50:3f:f3:c5:85:
c6:55:a0:78:72:43:7f:fb:44:7e:c9:6d:7c:18:b3:6a:07:b5:
1f:71:84:22:eb:72:c0:2b:95:b3:e6:7e:32:c1:ba:36:0e:08:
46:40:e7:b7:f9:81:b4:78:07:4b:c2:4d:1e:4f:98:0b:ee:82:
95:37:06:8b:87:8f:94:cf:2c:38:e6:4f:ab:13:81:4d:d0:1a:
d7:38:1a:f3:b4:d6:dc:50:b9:ac:d7:f1:5c:62:3a:09:5e:d5:
43:b5:51:09:02:23:ea:2b:2c:15:fe:61:90:29:4e:df:8b:1a:
0a:23:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:07 2026 by rpki-client