Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
File: BTUhGbS6RwjxGeTR-0dSvIga9JM.mft (raw, json)
Hash identifier: a/UMDfe9cEZKu2LkfGbj8+nUFK1gnd7glPWSjX9eJNY=
Subject key identifier: 42:89:1A:6B:DA:EE:49:75:A8:F8:0B:ED:54:F4:CB:EB:33:69:D6:C3
Authority key identifier: 05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
Certificate issuer: /CN=05352119b4ba4708f119e4d1fb4752bc881af493
Certificate serial: 01A0D6F08D5B623A6E584BF6359861A79A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
Manifest number: 04E7
Signing time: Fri 25 Sep 2026 05:01:23 +0000
Manifest this update: Fri 25 Sep 2026 05:01:23 +0000
Manifest next update: Sat 26 Sep 2026 05:01:23 +0000
Files and hashes: 1: BTUhGbS6RwjxGeTR-0dSvIga9JM.crl (hash: XigfC+UXCnKQPO8xOYQRliSvIgd52lPsDYq2JSm726w=)
2: MqwnMxJ3SX6D7ivb5NpTk7JoAVM.roa (hash: slGMf+J7S5c/IJOgK2UJxKCeMt7lJeZUFKkTZVXCTAw=)
3: WiIkoz7nGtAVAxCnt1nF-uXTJsk.roa (hash: fspyFKIfZ6Cqhpk31ZCqwzmKWRYPSF+dYkvKaabi768=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:8d:5b:62:3a:6e:58:4b:f6:35:98:61:a7:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05352119b4ba4708f119e4d1fb4752bc881af493
Validity
Not Before: Sep 25 05:01:23 2026 GMT
Not After : Sep 26 05:01:23 2026 GMT
Subject: CN=42891a6bdaee4975a8f80bed54f4cbeb3369d6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:65:3a:91:07:4f:c7:51:a3:77:bf:7e:fe:
05:3b:d1:03:d6:23:10:d3:00:b9:38:ce:2f:d2:08:
a8:f4:d1:00:10:5d:d4:1f:de:9e:48:2a:ea:19:38:
f5:c6:08:75:23:29:80:0d:b9:93:35:dc:50:50:27:
09:98:03:a8:b7:88:07:e7:02:bb:e1:aa:7d:c8:1a:
27:3e:44:a9:0d:64:db:66:8c:75:98:64:f4:9f:8e:
7b:45:4e:a7:c7:e0:3d:1b:b5:ca:8d:4e:e5:ae:7d:
a8:0b:5e:72:fb:76:fa:2b:ff:cc:83:0e:15:53:65:
56:da:bc:ab:47:d5:78:84:4d:f5:97:cd:a3:60:57:
5f:69:9c:ac:cc:b7:a9:a2:f4:91:25:70:e9:6a:bb:
32:9a:69:13:0e:4c:cd:27:14:bf:60:1f:61:75:fb:
24:3e:21:f6:69:40:68:b1:7e:b9:c4:3f:6c:dc:0f:
4e:ce:f2:e9:58:ba:fb:54:af:72:dc:41:53:92:c7:
69:16:db:4f:25:f1:ce:73:40:98:7c:25:aa:9d:a2:
af:b1:4f:cc:96:c3:0c:a6:ad:55:5e:fd:2e:78:05:
45:53:e3:2d:4d:d1:86:e0:2c:6d:2d:1a:21:f2:3b:
49:26:0b:d2:a9:87:61:f6:ff:23:2c:18:7b:f5:aa:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:1A:6B:DA:EE:49:75:A8:F8:0B:ED:54:F4:CB:EB:33:69:D6:C3
X509v3 Authority Key Identifier:
keyid:05:35:21:19:B4:BA:47:08:F1:19:E4:D1:FB:47:52:BC:88:1A:F4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTUhGbS6RwjxGeTR-0dSvIga9JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aa30c8-157e-4844-8650-76803d82ce8e/1/BTUhGbS6RwjxGeTR-0dSvIga9JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ac:66:e7:44:1a:55:a3:4f:27:ed:33:25:eb:1f:b5:e4:35:
1c:08:e4:d1:44:5e:7c:f7:f6:f6:ec:23:76:94:19:b7:ce:7b:
30:48:3b:a9:6e:be:83:e7:35:52:19:37:26:d8:83:ac:49:51:
31:d9:76:84:f4:9f:d7:f2:74:da:46:4a:34:4f:a4:2b:fe:05:
32:6d:86:4c:ce:4b:c0:66:a3:52:64:ed:04:14:00:c1:43:11:
a7:cf:1d:6d:8d:27:ac:ca:37:4b:49:20:47:e2:89:3f:37:e5:
a5:02:2c:2f:d7:b0:6e:4c:22:6d:6d:e1:da:95:3a:75:7a:5f:
ec:1d:21:69:d8:e0:6f:53:31:19:a4:49:1b:b8:1c:71:6e:c6:
d5:ab:0b:74:c1:49:25:06:2b:d7:e8:98:e4:f3:a7:07:58:5b:
24:1b:fb:73:0c:d7:97:be:03:4e:67:58:03:6b:d7:f8:f4:86:
98:5f:7e:64:d6:28:cc:a0:ab:64:d4:c9:e0:e7:40:5c:75:5f:
af:cd:2f:28:7b:0d:21:cb:e4:52:5c:24:32:d8:35:6a:ac:07:
7e:d9:0c:16:20:9d:17:e1:99:95:14:d9:72:f1:6d:0c:a3:ea:
4e:38:07:53:52:f5:54:67:93:ce:1b:d4:5b:54:61:d6:35:81:
ed:e0:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:06:45 2026 by rpki-client