Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: /r3k5ZK2Ppf0phBmbgBNt+SuFIRNhwluTMa4vjs1Rnw=
Subject key identifier: E4:6B:19:E0:A8:3B:96:BA:DB:25:34:1D:85:F3:28:05:34:C3:CF:C7
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019D29CDD264D5E858EF1A8C14AC1DD77363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 17D7
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: ENP9WyUKM9KTxA/pO6wMGBL1AaCMo+7QanRGPlg7dEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d2:64:d5:e8:58:ef:1a:8c:14:ac:1d:d7:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=e46b19e0a83b96badb25341d85f3280534c3cfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:00:e6:94:8f:a4:be:0f:8a:26:80:ff:69:
83:f1:1d:ff:2f:8e:4d:f9:64:e5:72:86:a7:40:f6:
51:2b:e9:ae:3d:e0:51:36:d9:54:2b:09:2d:d8:e4:
c2:1f:8d:67:53:65:10:02:b2:65:ed:e0:fe:58:a7:
85:44:03:94:01:f3:96:57:c3:3b:df:8f:51:23:03:
58:34:ea:56:90:98:73:b7:ec:0d:2a:40:6e:76:9c:
8d:60:84:34:7e:f1:9c:9c:ef:e2:94:97:66:2f:c0:
4d:34:36:ab:d5:f0:e5:c0:d0:54:0e:f0:2b:5e:53:
6c:8d:aa:05:27:bb:33:38:b7:eb:d2:f7:5a:a9:7a:
05:cf:3e:05:79:2a:4b:75:8a:32:07:16:c7:1a:df:
6f:29:83:3b:d4:80:6e:12:60:8c:5f:2b:69:fa:8c:
f9:c7:22:b6:6b:2f:36:8d:eb:b9:8f:37:99:c1:e0:
d9:d3:b5:09:85:9f:3a:37:54:5f:2b:f9:20:0c:99:
d1:06:db:98:ea:7f:7a:bc:b5:38:8b:0c:46:28:21:
1a:ef:23:83:9f:fc:ec:b9:2a:d5:0f:9e:c5:eb:73:
2b:81:1c:47:31:b4:e4:c2:ff:26:98:c7:7e:73:04:
ca:06:ff:ff:41:d4:10:22:74:6a:09:12:32:67:2e:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:19:E0:A8:3B:96:BA:DB:25:34:1D:85:F3:28:05:34:C3:CF:C7
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:11:8e:47:88:f1:da:f7:6f:de:9c:53:02:c8:9c:4b:da:1b:
e2:7d:ca:3a:1d:0e:f0:17:c6:08:da:89:25:97:c3:7a:b5:ab:
23:ca:9a:96:fc:1b:a6:d3:c4:84:03:f7:68:37:62:9d:3d:f2:
b1:a0:7e:23:15:f9:9d:37:4c:e1:3f:ce:22:27:50:32:b6:d7:
e1:6c:dc:9f:ee:4d:c3:45:9b:96:d5:0c:d4:f7:4b:92:86:3b:
1d:db:34:23:d5:72:ab:d7:62:e6:84:1f:64:89:2c:5d:bb:a3:
17:1d:fe:d6:a0:67:a9:58:6f:09:89:3f:9c:10:b7:a4:b9:6a:
aa:fb:9c:6c:b6:a3:cb:99:3f:e8:2b:96:35:57:fc:35:1f:88:
a0:aa:70:98:1f:32:1f:be:26:12:7d:64:70:90:28:2a:31:49:
57:2f:3e:40:a0:12:ba:9a:a4:6b:ab:06:6b:40:cc:bc:9c:44:
22:d0:83:ab:81:cc:21:b7:65:69:dd:b8:a1:9f:03:ca:9c:9a:
07:df:6c:9e:71:44:59:b1:eb:c4:8b:3e:7b:5e:65:57:05:83:
e0:95:90:55:d9:8c:77:45:31:9e:a4:0f:fa:62:5f:df:49:b6:
59:1f:e1:36:ac:70:97:2b:f7:4e:25:80:9b:63:a0:96:1e:39:
9f:b8:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:12 2026 by rpki-client