Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
File: BTUhGbS6RwjxGeTR-0dSvIga9JM.mft (raw, json)
Hash identifier: TxNMdufOlnF/xQYQmH90WbaUgYJa0WPWm5yra+v1tJQ=
Subject key identifier: 2D:09:05:CD:1A:32:A6:4A:BB:78:28:47:D5:BA:BA:FC:25:7D:B7:4D
Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493
Certificate serial: 019D269619951568D9368C383F9D11880B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
Manifest number: 02FE
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: BTUhGbS6RwjxGeTR-0dSvIga9JM.crl (hash: sUEEvoX/0J9QNQoPMjIotyOliVbSjSLn8T/3XPpCMWM=)
2: MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa (hash: slGMf+J7S5c/IJOgK2UJxKCeMt7lJeZUFKkTZVXCTAw=)
3: WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa (hash: fspyFKIfZ6Cqhpk31ZCqwzmKWRYPSF+dYkvKaabi768=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:19:95:15:68:d9:36:8c:38:3f:9d:11:88:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=2d0905cd1a32a64abb782847d5babafc257db74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:9d:d7:25:c2:7e:c4:ca:bc:48:4c:c9:fb:
15:a9:ca:65:4a:6a:7d:92:07:7f:f9:24:8e:5e:41:
0c:a5:f4:93:12:cf:50:9b:07:0d:c6:46:34:9b:58:
fa:aa:44:d0:1c:3c:50:e0:7f:a1:ce:89:02:12:80:
9f:3d:5f:35:87:05:82:a5:85:20:75:a3:7a:51:64:
13:92:15:bf:d4:7e:76:b7:36:df:5a:9b:02:b6:f1:
81:e2:c6:a1:f5:d3:72:e2:25:40:5b:56:6b:fb:df:
28:29:19:10:42:d3:d4:78:96:12:39:96:16:81:10:
87:72:a7:0d:ef:c8:c7:59:28:9f:a7:60:ba:22:91:
e4:34:96:af:6c:b9:02:e0:4e:40:29:27:c6:dd:5d:
95:37:1c:2e:ac:44:ae:32:c4:3b:b2:6f:62:28:7c:
b2:01:e4:bf:cd:9e:5a:ec:45:61:88:82:f1:f6:9f:
4c:5e:a7:c3:32:e7:ea:7c:26:6b:b8:f5:b1:61:e5:
ff:7d:d4:41:67:e4:e1:0d:6c:ee:0d:ab:0a:83:80:
6d:1a:0c:13:ad:74:40:20:4c:49:3a:05:62:14:8e:
13:56:42:d2:4c:e0:56:fb:cb:c3:e2:69:4b:1c:a7:
f9:10:12:97:3a:b7:67:f2:e4:1a:f7:65:e3:d6:a3:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:09:05:CD:1A:32:A6:4A:BB:78:28:47:D5:BA:BA:FC:25:7D:B7:4D
X509v3 Authority Key Identifier:
keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ab:ed:aa:8a:cd:b7:a8:d9:33:14:c6:4e:b3:d7:79:e3:b7:
13:7f:84:c1:9f:39:cb:a3:19:9d:c5:69:4c:15:51:e2:e5:ad:
18:24:82:b0:cf:47:a7:20:8d:c8:9e:52:af:24:8d:29:cd:01:
b1:ee:60:04:f5:b0:11:71:df:54:46:b6:a7:9d:04:32:b6:cc:
84:70:72:5d:d0:21:26:f0:4c:14:89:94:b9:0d:71:47:7a:2d:
56:cd:00:c6:82:8d:1a:60:a0:b3:7e:79:20:84:2e:b3:20:af:
06:45:6b:8d:50:df:cf:ce:44:97:3f:0d:14:bf:81:e6:ca:a1:
11:55:fc:b6:b3:56:cd:f7:4f:68:23:7a:92:e8:15:da:6b:9d:
6f:ef:57:cd:a6:1c:04:e5:aa:02:ba:6a:ac:18:01:71:d0:ce:
37:6b:f7:51:70:a7:1e:3c:57:96:b9:1a:68:04:7b:d3:e1:70:
8c:22:06:fa:b9:31:3b:ea:06:8a:c7:b3:9a:74:89:29:46:a2:
49:be:20:f2:fd:6c:ae:3f:cd:41:0b:22:bd:e9:cd:b0:f4:4d:
ea:64:eb:0b:8d:d1:d3:76:a1:31:2d:fc:2c:34:88:c3:03:71:
cd:76:af:d3:f2:4d:ab:31:7b:6d:c1:bf:b4:1a:1f:9a:b5:9f:
f2:27:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:51 2026 by rpki-client