Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
File: BT37s2MBCw33p8otbR9yl1il9VQ.mft (raw, json)
Hash identifier: TqPQ02cEEuANAcpxmwzNGrlRdrRD5tUQhFI4btyXKhM=
Subject key identifier: 41:8D:3B:B8:20:60:7C:B5:03:3D:40:57:41:9F:54:B9:39:1A:33:B3
Authority key identifier: 05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
Certificate issuer: /CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Certificate serial: 01A0D012EB5384B3E4D25C49E22A47E841CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:35 +0000
Manifest this update: Wed 23 Sep 2026 21:01:35 +0000
Manifest next update: Thu 24 Sep 2026 21:01:35 +0000
Files and hashes: 1: BT37s2MBCw33p8otbR9yl1il9VQ.crl (hash: 10QgZlO40vfjZXrzRmmwhZTCaeEs8T5YxPW3PJshqi4=)
2: rE4lVl1SU9oN_55b8EP-DlA_0LQ.roa (hash: K9+yeHMyCMe7ixPfjQR9+OVohi0uFghFyjSd0m5FsQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:eb:53:84:b3:e4:d2:5c:49:e2:2a:47:e8:41:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Validity
Not Before: Sep 23 21:01:35 2026 GMT
Not After : Sep 24 21:01:35 2026 GMT
Subject: CN=418d3bb820607cb5033d4057419f54b9391a33b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:e6:8d:74:39:fc:a1:02:9d:87:db:01:50:
2d:b8:12:85:cf:43:7a:af:19:96:0a:25:58:f3:9c:
3a:1b:bd:b8:e3:c2:61:0a:57:70:c0:8e:fb:f2:57:
29:8c:bd:29:db:8f:e2:f6:b3:33:6e:fb:c3:b1:1e:
48:4b:62:d2:49:13:da:62:26:7c:60:68:ce:06:1a:
bf:8f:e7:b5:c2:c8:1f:71:21:a2:e9:45:55:18:fb:
de:ca:fd:13:8c:9d:09:0e:90:6c:d1:31:f4:ea:24:
ec:a5:1e:44:b6:a0:33:10:9b:c4:7a:a2:2e:7b:3d:
b0:c3:6a:03:e6:77:f6:e7:f5:9c:04:72:e0:d3:1a:
a0:b3:26:40:d4:0a:26:f5:b7:43:f1:51:49:b4:42:
fc:9a:f8:bf:c1:03:43:24:21:e5:ce:b8:53:f3:2b:
23:36:cd:18:cc:59:3b:e2:50:bb:99:02:d2:58:f3:
c8:ad:b9:0b:0b:46:a2:ea:1a:ef:0b:d4:a8:8a:b2:
b4:06:29:cc:92:c4:18:f3:7b:cc:b8:99:80:67:1e:
f7:a6:98:55:23:c7:04:cd:23:57:bc:25:4f:ee:3c:
7a:5d:95:bd:c4:1c:3b:c2:55:3d:50:69:10:02:6d:
13:58:cd:40:c4:1b:5f:5e:b3:ad:a0:3c:d6:4a:14:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:3B:B8:20:60:7C:B5:03:3D:40:57:41:9F:54:B9:39:1A:33:B3
X509v3 Authority Key Identifier:
keyid:05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:21:2b:cf:71:de:eb:60:81:dd:4a:95:28:ef:18:c2:bf:89:
7d:d2:15:1b:73:51:00:51:d5:d9:9e:3f:12:9f:80:07:cc:f5:
09:ef:e3:11:1a:57:1f:42:6a:05:87:49:4e:52:11:e7:5b:82:
36:17:ba:5d:9d:e2:87:a6:ad:46:e4:d7:4b:26:1d:18:8e:32:
89:b7:a5:55:b5:98:90:b5:9a:7e:60:60:2e:4d:e9:af:58:87:
66:b1:1d:f8:f8:42:f7:68:80:5e:03:75:68:7e:39:d5:1b:c8:
d8:3f:18:9b:6c:1c:6b:d3:e8:36:8b:dc:7e:72:d7:d1:c3:85:
51:27:28:19:34:43:c8:e0:be:dd:42:0c:6b:f8:33:f1:6c:d8:
5a:a5:cc:eb:5c:4d:5c:2e:af:57:79:f0:e9:b1:76:a0:5b:de:
ec:aa:a0:7e:12:3d:e4:c6:bd:8a:0b:33:9b:c5:89:2b:fa:50:
b1:5b:a5:fb:1f:99:03:0e:fd:4d:09:a4:66:46:30:a2:70:16:
fe:9e:e9:79:52:26:71:e8:dc:b6:bf:1a:dc:da:2e:91:87:d0:
24:26:84:10:a4:96:94:86:26:46:7b:c6:b2:9c:fd:07:73:cc:
98:b1:c0:4b:5e:20:dd:dd:bb:a2:02:59:03:36:60:59:27:d9:
22:cb:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:46:22 2026 by rpki-client