Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
File: sBTC9eALxnh9MoMbieoSTfYonkU.mft (raw, json)
Hash identifier: Jf1ESbmJHmHablDDshvAut4IEYhCpXuP9oScYnh+NNs=
Subject key identifier: 25:DA:4D:F2:AE:F7:57:BB:8F:7C:BB:41:18:48:D6:E2:56:37:E7:D1
Authority key identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45
Certificate issuer: /CN=b014c2f5e00bc6787d32831b89ea124df6289e45
Certificate serial: 019D273AC9EDC6D25F4701BC8B9AF79FE8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
Manifest number: 01DA
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: sBTC9eALxnh9MoMbieoSTfYonkU.crl (hash: yRWHWxKZHbibrSqeVAh2AG8oT5ym7hwjFinFM4weYHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c9:ed:c6:d2:5f:47:01:bc:8b:9a:f7:9f:e8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b014c2f5e00bc6787d32831b89ea124df6289e45
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=25da4df2aef757bb8f7cbb411848d6e25637e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:f8:52:83:ad:19:ef:93:70:b9:07:14:cb:
87:ce:29:6b:34:89:a1:e1:10:c4:39:86:de:78:a4:
fb:82:1e:56:cd:b3:e9:e8:d9:05:f2:f5:2b:39:b8:
4b:79:da:41:22:cf:d7:5f:ee:37:2d:d0:1b:0f:a3:
db:7d:cb:2e:96:34:d6:aa:2f:a8:73:f7:51:71:b1:
2a:ca:ff:9c:70:10:a8:cd:7d:38:55:9f:8f:b8:6b:
3e:09:69:10:9e:e4:cf:60:66:bb:d1:aa:3f:15:9b:
0f:5e:fc:b8:48:cf:57:fc:c1:e5:55:0c:a6:dc:9f:
ff:96:db:7a:02:f3:d2:a1:d4:c8:b4:ad:5c:f3:47:
bf:dd:53:d2:0d:56:a9:7d:4d:7e:1e:c8:5e:cf:c3:
b3:25:60:71:6a:3a:69:76:a8:71:55:80:35:b0:91:
62:21:2c:d8:0f:7b:6d:6d:67:fb:f9:e6:f8:55:1d:
1f:26:8e:f6:b1:c5:99:c7:30:02:25:56:6d:af:2a:
ca:09:d2:8a:ff:24:82:44:28:fa:e0:fa:59:74:96:
b4:f5:65:42:6a:00:3d:cd:44:47:16:1e:e6:eb:c1:
d8:e4:0b:f2:8f:cb:cf:67:01:0d:5e:35:56:8b:ba:
fc:9c:4a:e1:05:14:64:1e:53:c7:87:55:fd:7b:98:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:4D:F2:AE:F7:57:BB:8F:7C:BB:41:18:48:D6:E2:56:37:E7:D1
X509v3 Authority Key Identifier:
keyid:B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:25:ed:bb:81:00:24:db:4f:a8:2b:97:e4:25:53:1f:f4:0a:
d7:8f:d1:91:b9:f1:82:fb:ea:65:5b:89:7f:14:2e:85:2e:98:
4e:4c:2d:ff:75:f0:12:6e:62:40:7d:95:55:f2:b0:16:ad:f2:
1e:fe:2e:ce:5e:8d:4f:83:c1:ea:7b:c3:74:40:33:1d:3e:c8:
29:16:c6:4c:a1:e3:6f:cd:d8:77:e8:da:d7:95:a5:02:ae:3b:
f8:ad:f2:65:01:72:ea:6a:cd:e1:d6:9f:4c:18:af:4c:51:7b:
4b:23:89:58:02:2d:14:93:3a:05:15:66:b9:3b:a3:93:a0:0e:
e8:c3:3e:06:6e:18:29:c5:38:e1:31:a4:b0:20:1a:cb:f8:c4:
f1:91:68:36:db:21:6e:ba:bc:d7:ce:04:c0:ce:4b:80:39:9e:
c4:c3:89:30:17:81:1d:84:7b:cf:8d:73:cb:a8:f8:0a:17:f0:
8f:d7:e0:2a:fb:8f:b6:b3:30:55:f8:89:9a:da:5d:74:de:6d:
75:44:f2:0e:23:a6:16:d6:92:47:bd:3f:cc:b5:66:5b:6f:16:
19:f1:4d:50:d7:f9:9a:e8:1f:cd:b0:3c:1c:6f:f3:f4:1a:a5:
a3:01:58:10:e6:82:ce:3f:af:f1:ce:bc:f8:36:36:a2:7a:39:
e9:8f:68:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOsntxtJfRwG8i5r3n+i1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMTRjMmY1ZTAwYmM2Nzg3ZDMyODMxYjg5ZWExMjRkZjYy
ODllNDUwHhcNMjYwMzI1MjMwMDU3WhcNMjYwMzI2MjMwMDU3WjAzMTEwLwYDVQQD
EygyNWRhNGRmMmFlZjc1N2JiOGY3Y2JiNDExODQ4ZDZlMjU2MzdlN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM74UoOtGe+TcLkHFMuHzilrNImh
4RDEOYbeeKT7gh5WzbPp6NkF8vUrObhLedpBIs/XX+43LdAbD6PbfcsuljTWqi+o
c/dRcbEqyv+ccBCozX04VZ+PuGs+CWkQnuTPYGa70ao/FZsPXvy4SM9X/MHlVQym
3J//ltt6AvPSodTItK1c80e/3VPSDVapfU1+Hshez8OzJWBxajppdqhxVYA1sJFi
ISzYD3ttbWf7+eb4VR0fJo72scWZxzACJVZtryrKCdKK/ySCRCj64PpZdJa09WVC
agA9zURHFh7m68HY5Avyj8vPZwENXjVWi7r8nErhBRRkHlPHh1X9e5gGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXaTfKu91e7j3y7QRhI1uJWN+fRMB8GA1UdIwQY
MBaAFLAUwvXgC8Z4fTKDG4nqEk32KJ5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JUQzllQUx4bmg5TW9NYmllb1NUZllvbmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kMGI2YTMtNjE5ZS00YjEwLWE3M2Et
MzAzNTZhY2VlMDMxLzEvc0JUQzllQUx4bmg5TW9NYmllb1NUZllvbmtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kMGI2YTMtNjE5ZS00YjEwLWE3M2EtMzAzNTZhY2VlMDMx
LzEvc0JUQzllQUx4bmg5TW9NYmllb1NUZllvbmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCXtu4EA
JNtPqCuX5CVTH/QK14/RkbnxgvvqZVuJfxQuhS6YTkwt/3XwEm5iQH2VVfKwFq3y
Hv4uzl6NT4PB6nvDdEAzHT7IKRbGTKHjb83Yd+ja15WlAq47+K3yZQFy6mrN4daf
TBivTFF7SyOJWAItFJM6BRVmuTujk6AO6MM+Bm4YKcU44TGksCAay/jE8ZFoNtsh
brq8184EwM5LgDmexMOJMBeBHYR7z41zy6j4Chfwj9fgKvuPtrMwVfiJmtpddN5t
dUTyDiOmFtaSR70/zLVmW28WGfFNUNf5mugfzbA8HG/z9BqlowFYEOaCzj+v8c68
+DY2ono56Y9oUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:31 2026 by rpki-client