Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
File: BT37s2MBCw33p8otbR9yl1il9VQ.mft (raw, json)
Hash identifier: kioUIQYo1+5UYzvVEQYNeatYmCZssppIG+hciBMNG4I=
Subject key identifier: 4D:47:86:4C:16:95:BF:EE:ED:7A:23:48:39:CA:44:3C:04:DA:A1:B4
Authority key identifier: 05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
Certificate issuer: /CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Certificate serial: 019F8F7EA4E980353B24B97335B3A8A1B8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:09 +0000
Manifest this update: Thu 23 Jul 2026 15:01:09 +0000
Manifest next update: Fri 24 Jul 2026 15:01:09 +0000
Files and hashes: 1: BT37s2MBCw33p8otbR9yl1il9VQ.crl (hash: 1BhhnyBh7X1QPhcxpoPfJBfDTnXt8PhWn/FGk2vXZJ8=)
2: rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa (hash: K9+yeHMyCMe7ixPfjQR9+OVohi0uFghFyjSd0m5FsQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a4:e9:80:35:3b:24:b9:73:35:b3:a8:a1:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Validity
Not Before: Jul 23 15:01:09 2026 GMT
Not After : Jul 24 15:01:09 2026 GMT
Subject: CN=4d47864c1695bfeeed7a234839ca443c04daa1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:50:99:71:d0:24:80:89:56:52:45:e1:90:24:
fd:b7:ac:6e:99:3a:59:f9:88:41:3f:de:6d:5c:da:
c1:f1:bb:5f:43:53:a3:d7:fc:45:be:ac:97:41:1a:
e1:37:a4:7b:24:79:8e:4e:44:c2:2f:3d:9b:b1:82:
71:5a:5d:d6:41:b5:c1:7c:15:77:7c:99:c3:59:ba:
50:e3:f3:c6:ba:25:ed:55:fc:d3:30:d5:de:12:27:
fb:16:09:f2:4c:52:29:65:46:e8:b5:82:64:24:da:
7c:33:2c:45:81:20:c1:2d:ff:5d:63:c7:bf:d9:fd:
53:e4:11:47:fb:40:79:2f:0c:5c:e5:27:05:75:09:
49:e3:a2:8c:51:b0:d2:e6:6a:46:82:4c:87:d5:e3:
bf:a5:c3:44:da:7a:29:7e:0b:ae:f7:b3:19:2b:b7:
31:ab:dc:01:a9:af:0e:97:99:a8:4c:65:1d:17:52:
bf:96:ed:06:8f:d5:d2:3d:ce:0d:1b:05:ed:28:64:
1f:7f:3e:83:78:01:2b:14:29:20:ac:b8:e1:84:60:
da:cc:22:eb:dc:86:55:0b:90:eb:78:5a:ce:7b:5b:
e0:0e:b9:09:8d:65:4d:f6:68:0c:af:c8:5c:9c:2d:
90:9d:43:e0:1d:ba:ef:03:6d:0d:6d:dd:c9:d9:6a:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:86:4C:16:95:BF:EE:ED:7A:23:48:39:CA:44:3C:04:DA:A1:B4
X509v3 Authority Key Identifier:
keyid:05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a3:c3:0e:7b:bc:b8:6b:0d:f1:e7:c3:84:cf:76:b7:ea:53:
06:20:87:0b:7a:49:18:7a:04:e9:23:bb:c6:9e:4c:3d:0a:da:
fc:73:6e:b1:03:2e:8a:15:50:91:77:b0:18:54:bf:76:b6:91:
11:65:3c:65:c6:16:cb:52:ca:19:13:ec:b6:0d:47:37:a4:f6:
32:21:fd:5e:8b:72:dc:92:72:98:d0:47:4c:90:6e:ea:d2:c3:
31:35:06:74:b3:d1:49:b4:82:e3:93:a8:d4:2a:4a:28:01:e1:
dd:bd:a3:32:3f:0a:6b:9c:0d:2b:d5:4b:46:88:b9:99:ad:06:
d5:6c:3a:a3:7e:2a:e4:2b:6d:60:05:73:eb:be:3a:1e:03:d6:
4a:ba:7b:1b:87:f3:8d:f0:74:67:55:c8:57:9b:48:71:70:1d:
2e:de:ce:e9:ce:a1:7f:10:0b:48:44:dc:45:ad:60:76:37:a1:
b4:41:de:15:cd:54:4a:bb:8e:7a:ce:e3:c8:d1:3b:16:4a:7e:
ae:bb:4d:d2:be:c5:9d:26:15:f7:31:63:97:84:23:90:7f:4c:
23:13:b4:7d:54:f0:91:b3:16:3d:24:53:e2:5d:16:9e:d4:3e:
12:27:02:1e:6b:26:e1:04:6e:c7:b4:0a:d4:bd:6e:8f:d8:42:
0f:b9:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:58 2026 by rpki-client