Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: hEbeP6VrFgnX2gz0LigUvzc5tBTnoYvOQFP9zLlis38=
Subject key identifier: 8A:59:78:D0:32:87:32:10:B3:DC:BC:3B:27:AA:52:D9:48:60:6C:6A
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 019D2A72A0BF04E21F20F3321C627205A42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:00:48 +0000
Manifest this update: Thu 26 Mar 2026 14:00:48 +0000
Manifest next update: Fri 27 Mar 2026 14:00:48 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: 2nEH5V64SCopvC1Kj3JweP4zsvNzeaufGwpuiDpFdlI=)
2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a0:bf:04:e2:1f:20:f3:32:1c:62:72:05:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Mar 26 14:00:48 2026 GMT
Not After : Mar 27 14:00:48 2026 GMT
Subject: CN=8a5978d032873210b3dcbc3b27aa52d948606c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:4f:2f:96:5d:30:4b:a0:e7:06:9e:28:58:
5f:33:29:8e:b4:3f:2c:a3:d5:65:8c:3a:2b:9e:b6:
f7:24:74:77:ae:ce:6a:ef:aa:01:92:cb:a1:a4:6b:
7a:7a:7a:66:e9:d8:45:29:72:84:3a:ce:c3:36:d6:
34:9b:36:47:f6:a3:29:59:56:f8:59:eb:01:17:a0:
49:79:e8:66:3e:df:bf:fa:87:98:51:f7:a0:af:cc:
02:a4:fd:4b:04:c1:8d:8d:41:ee:57:91:06:cb:09:
e2:0a:8c:43:79:7e:56:53:e9:7b:a7:49:72:fa:24:
f4:88:7c:6a:7c:da:a1:76:d4:c4:27:af:61:ae:aa:
30:e2:88:5b:c9:0c:41:95:f2:f5:1e:ad:98:0f:ae:
18:09:9b:31:0a:6d:5a:cb:ce:b8:fa:df:e4:e0:55:
7e:f1:ed:b6:45:3a:6b:43:b5:df:cf:93:91:1a:db:
6c:95:e4:f0:bc:64:b4:85:20:20:d2:1e:ec:ae:fb:
97:fd:86:be:0b:9e:30:de:de:f2:8e:d6:c0:d4:46:
8c:fa:63:98:ac:0f:c1:c3:1a:13:cd:3c:09:c2:c5:
59:22:d8:f7:e1:75:da:e6:ea:fe:8e:29:f7:b9:ba:
23:59:a5:d8:b4:35:61:94:3b:a1:b7:75:c9:a6:4c:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:78:D0:32:87:32:10:B3:DC:BC:3B:27:AA:52:D9:48:60:6C:6A
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:12:1b:ef:a2:2c:d3:00:41:79:6f:06:71:ea:7d:64:18:9b:
6a:9f:46:9b:ee:14:19:66:95:6d:12:a3:c5:64:91:5f:82:fb:
3e:34:05:f9:6c:f6:2b:94:4b:27:f2:cd:97:79:c8:81:02:6d:
70:d9:1e:b8:04:95:34:3d:b0:db:76:f8:a5:23:09:bd:89:2a:
3a:8a:2c:75:06:28:9b:54:3c:37:16:57:31:05:09:58:42:80:
41:fc:d1:c0:e1:9e:3d:1a:c5:3b:84:79:56:02:46:e7:da:80:
8b:05:c9:0e:45:08:11:18:ab:af:55:e6:44:e8:94:7c:1d:fc:
28:71:3b:85:13:be:25:0c:f7:c4:93:d5:e2:e4:72:c5:f4:c6:
bf:34:7f:99:c5:51:05:ac:35:4d:e2:06:0c:dc:52:85:b8:a8:
b0:3d:30:02:e6:61:63:3b:ae:a1:56:44:0c:22:55:ae:4d:38:
6d:74:ac:38:87:13:2a:ea:f7:c8:c7:cc:a6:90:98:19:60:66:
dd:ed:ce:df:67:7d:ef:c4:32:b3:ff:2e:a5:8b:20:12:5c:e4:
49:97:d2:5a:7c:ba:76:cc:28:9a:e3:3b:0d:21:27:1d:a3:b2:
c9:c7:e5:35:db:db:67:0a:3c:f0:3f:c8:9e:47:7c:59:3a:4a:
94:ca:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:27 2026 by rpki-client