Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: F8hhPshm4lFHRSYvxH7bV/6wClWPEyFPRxAr0fgiP14=
Subject key identifier: 32:62:40:20:99:8E:65:7E:C7:49:3E:F8:2B:04:A6:CD:8D:AB:8D:73
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 01A102B7308F001B8ECAAF7A7D85E0325638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 19D5
Signing time: Sat 03 Oct 2026 17:02:02 +0000
Manifest this update: Sat 03 Oct 2026 17:02:02 +0000
Manifest next update: Sun 04 Oct 2026 17:02:02 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: 0ePpvnqbqpUpdqzvU2UFLhmaTIZ7rxms+e7tGzNvJ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b7:30:8f:00:1b:8e:ca:af:7a:7d:85:e0:32:56:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Oct 3 17:02:02 2026 GMT
Not After : Oct 4 17:02:02 2026 GMT
Subject: CN=32624020998e657ec7493ef82b04a6cd8dab8d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:95:dd:0c:98:f4:6f:e4:a4:38:e3:35:de:
29:82:94:69:7f:62:2f:d6:2d:7d:fd:85:c9:6b:e3:
00:73:cf:da:18:1f:24:6b:12:d4:e8:7c:59:49:73:
36:0b:46:07:de:9c:99:eb:f4:a0:c1:97:01:9b:2f:
3c:af:18:39:6f:a5:5b:c8:f1:52:1c:ea:51:e6:9f:
ad:31:a7:a8:88:36:a7:a2:ee:2c:ec:5c:76:0a:ff:
15:34:34:35:5c:b4:08:34:3e:f9:ed:3e:0e:cc:dc:
4e:87:57:29:15:39:0f:76:9d:0e:04:9d:5a:99:02:
ac:c5:63:89:ae:4a:17:41:32:e6:0e:64:fd:12:ff:
58:23:1f:1e:1f:c1:9c:36:24:73:ed:bb:f0:ae:69:
6c:31:ee:d1:c1:c2:fb:c2:6c:e5:e3:3b:75:fc:2e:
95:41:87:a8:8e:a3:9f:a3:1b:c1:dc:69:79:0b:66:
f6:f5:8f:1e:85:2a:17:18:f0:5d:26:7e:d3:91:42:
b1:69:b5:d6:d1:d0:d7:58:f5:92:59:0c:88:03:1a:
40:2d:37:21:1a:36:1f:cc:31:84:0e:cb:8c:cf:af:
92:60:e1:4b:78:ab:84:9d:d1:98:f1:14:a9:6c:9f:
7d:24:7e:c9:bf:38:6c:6e:3b:41:ad:a7:c7:b9:7e:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:40:20:99:8E:65:7E:C7:49:3E:F8:2B:04:A6:CD:8D:AB:8D:73
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:38:0e:bc:63:26:7a:f3:f5:a9:34:6a:ae:7f:fd:d9:ae:3a:
53:d9:db:1f:dd:08:71:e2:b1:42:d6:64:06:c5:8f:d6:6f:f8:
3b:36:10:70:ef:7c:c6:03:45:14:e2:ba:23:f5:16:27:a3:94:
80:f4:1e:0b:72:56:ff:53:71:dc:15:b6:97:88:f7:50:46:1a:
15:6f:64:f4:e7:c3:32:0f:11:4f:c9:13:3c:b5:ac:dc:8d:87:
00:b8:14:bd:81:97:d3:eb:5c:4c:c5:37:ca:4b:43:85:1e:3d:
e7:78:14:48:de:a6:92:83:ed:fb:21:ff:30:a3:af:2e:5c:1c:
70:46:a5:a8:c7:62:5b:55:4e:f6:07:87:75:d0:3a:85:73:78:
01:58:e8:29:93:e2:c5:26:39:8b:24:9f:7f:df:e6:10:0a:1c:
09:50:83:58:c4:8f:53:96:0b:99:fb:9e:26:93:08:ff:35:83:
c4:fd:3c:5c:bb:8e:d6:11:c9:48:44:bb:68:e6:d3:3f:40:86:
1d:9a:96:7b:f8:37:46:e4:b6:66:33:84:51:e1:12:27:97:b7:
38:04:a0:d0:df:a7:0a:0c:a0:dd:1e:5d:4c:d9:a8:0b:d9:51:
f5:71:3b:84:89:2c:8a:30:ff:f2:80:d9:bf:6b:76:98:08:80:
12:cf:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:35:45 2026 by rpki-client