Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier: uP1UOrSwt+T6EO6fAyFhb1XYBBs7u4pkBFkmdpRJu6Q=
Subject key identifier: 4C:09:9E:64:8E:B9:75:08:33:79:DD:51:B5:64:4B:C4:05:28:BB:10
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial: 019D329A21B501AB87ED14A3BD23C2AE1371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number: 0ECC
Signing time: Sat 28 Mar 2026 04:00:55 +0000
Manifest this update: Sat 28 Mar 2026 04:00:55 +0000
Manifest next update: Sun 29 Mar 2026 04:00:55 +0000
Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: kvNvBgsb62KN2Enk7mxmIL2Q1Sz8mUJfB39pKCQSULI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:21:b5:01:ab:87:ed:14:a3:bd:23:c2:ae:13:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Validity
Not Before: Mar 28 04:00:55 2026 GMT
Not After : Mar 29 04:00:55 2026 GMT
Subject: CN=4c099e648eb975083379dd51b5644bc40528bb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:51:96:82:b9:3b:bd:0d:fc:2c:05:60:9e:
90:55:c3:e7:37:f7:a5:5b:e8:73:8e:ca:07:89:40:
e8:2e:66:44:5e:25:58:a6:00:7c:27:85:f7:29:2f:
9f:e9:ae:e4:e6:1e:4f:11:04:d8:6a:eb:e1:53:18:
57:3b:28:cf:23:0b:ec:a2:bf:d7:25:e9:14:36:83:
36:f3:65:c1:28:65:53:2a:45:08:a8:76:30:82:94:
6c:e1:4f:15:ee:08:1a:7c:8b:ba:24:8a:45:f9:d1:
36:c3:31:70:bf:5f:af:be:62:30:7b:79:6a:40:4a:
03:68:5a:6c:1f:7f:df:5c:14:ea:0b:c4:7f:ac:f8:
1e:61:ad:9a:b1:5f:91:6a:e7:35:04:c4:b4:9b:a9:
67:8f:dc:2c:75:97:0f:61:d7:f0:15:7d:1c:d6:06:
1a:c8:6e:78:5e:41:1e:1f:3b:01:36:28:3d:bd:fe:
58:46:3b:ef:1e:77:2c:83:4a:26:7e:45:52:e7:a5:
ee:74:56:62:30:b0:9f:b2:09:e3:ea:cf:a5:d6:fd:
a6:f1:51:0a:16:fe:6b:2b:67:ed:ed:55:73:51:9f:
89:9d:28:91:cc:4c:6c:59:a7:cc:83:b2:80:4d:c1:
8e:3f:fd:dd:4f:a8:6e:ef:68:43:01:89:ba:5d:e6:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:9E:64:8E:B9:75:08:33:79:DD:51:B5:64:4B:C4:05:28:BB:10
X509v3 Authority Key Identifier:
keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2e:7e:b3:1c:a1:ea:ff:41:2d:b5:9b:bd:d3:4c:2e:3b:81:
69:10:5d:bb:1b:29:25:41:58:2d:31:84:9d:4c:f4:af:3c:91:
e8:13:e1:54:eb:fc:11:21:e1:36:bf:3d:c3:46:d0:8d:14:2f:
72:6f:03:60:a6:01:2d:c7:13:bf:cb:80:6d:89:87:fc:ec:9c:
b3:4c:d0:f3:3f:0e:6c:a0:ca:de:be:e2:c5:70:72:6d:43:5e:
39:f5:cb:20:c4:66:d1:35:68:98:df:39:5c:93:c9:34:c9:b6:
74:9b:72:ec:4a:32:45:9f:c0:54:e9:d1:c6:e1:47:94:f4:85:
41:8c:91:9f:7b:f7:9d:6c:05:6d:0d:b6:ee:10:5f:4a:99:52:
3a:e8:18:6f:c5:97:8d:24:74:55:80:ca:98:a4:3f:b0:ba:f5:
c4:ce:e7:58:67:aa:e0:35:ce:5c:62:09:29:e7:3e:8e:5b:7c:
9e:e5:d5:35:47:1b:7c:fb:18:f2:78:37:91:2e:aa:3a:ee:04:
58:a6:ce:3f:88:95:fb:28:6e:0e:6f:6a:05:2e:a9:47:a3:a5:
76:76:52:84:a2:e2:09:05:da:69:f8:8f:79:2a:a0:68:f6:0e:
02:c5:c2:16:71:0f:1b:0b:13:ad:2c:97:34:03:eb:46:22:cf:
4f:9d:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:11 2026 by rpki-client