Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: G+Lt1rQp6x01Kw5mw0i40RM8lfNp3AtYMaUS+jmfP80=
Subject key identifier: DA:40:7A:69:E0:F6:98:39:22:72:AC:2C:9D:D9:39:1B:91:B8:09:41
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019F93C8EFC5D9FFA76D7260EDB7996976C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 11:00:47 +0000
Manifest this update: Fri 24 Jul 2026 11:00:47 +0000
Manifest next update: Sat 25 Jul 2026 11:00:47 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: KCXZD0YRM7sNgoLbAnQ0Sw9crKBy/tHfNuoeb3Dd0do=)
2: C_AvtSnRCKwvl2SpLUtFVcIH_w8.roa (hash: Ey0Vszsa81W+PEv7/mryXgBI5kc8rCJJuGeJRL0U9AY=)
3: vRgORVIgzFbgx9kOiETjJtMLghA.roa (hash: Uf5SkSIOo28qZJtGrvXdFP718QNyditb6xU5BtcR6CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ef:c5:d9:ff:a7:6d:72:60:ed:b7:99:69:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jul 24 11:00:47 2026 GMT
Not After : Jul 25 11:00:47 2026 GMT
Subject: CN=da407a69e0f698392272ac2c9dd9391b91b80941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:2a:78:94:2e:61:cf:55:cd:67:cd:e2:cb:
4e:12:a6:04:18:03:f4:3a:f0:ae:95:53:1e:79:83:
dd:c3:2e:71:fa:0d:36:8f:a5:10:15:d8:8e:23:5c:
e4:ca:8b:cd:33:37:14:81:f1:25:9d:25:a5:bb:39:
20:f3:d6:ad:4f:63:ad:c3:5d:92:cb:02:35:f0:c7:
ba:a6:96:37:8c:38:bd:a5:35:9f:74:81:bb:c3:27:
ae:dd:2e:f5:6c:14:ba:20:e5:85:67:1c:01:30:a4:
e8:2e:36:40:ca:d0:b1:3c:46:dc:c1:4f:96:ca:62:
01:ea:87:b9:10:e7:8b:8b:0e:58:9e:5a:c3:3c:3c:
37:44:ae:23:61:ea:45:b2:52:77:8f:91:f2:81:f2:
99:09:49:d1:a6:ce:13:3a:db:b6:34:0c:7c:52:bf:
3c:69:38:c9:8a:97:c4:ce:8f:dd:2b:17:7e:71:0f:
c6:49:bd:b5:3e:94:cb:d2:aa:1f:44:3e:4e:9a:7e:
43:d2:9f:63:f7:bd:19:a8:b0:4d:3d:40:93:19:2d:
b4:e7:ba:39:77:59:f5:bf:4f:97:fe:b2:3e:12:16:
60:59:51:95:d8:07:49:9c:b6:9d:9d:de:6e:17:07:
bd:1b:65:79:bb:c3:9d:bc:13:09:4c:f3:42:7f:19:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:7A:69:E0:F6:98:39:22:72:AC:2C:9D:D9:39:1B:91:B8:09:41
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:4d:9d:0c:f8:5e:98:f8:11:2c:41:b2:42:24:be:3e:ff:
50:73:27:6f:b9:c1:37:4c:94:3c:04:06:ff:8e:45:c9:1c:5d:
b1:ea:f3:92:5a:16:5c:3f:ea:4a:6f:8a:90:da:27:db:ff:f2:
9b:02:12:fc:a6:e9:1a:45:d5:f5:e7:34:74:3c:3c:67:aa:96:
e8:89:d5:79:e8:4a:b2:37:15:11:53:b1:9c:fa:1f:13:e6:76:
ca:6b:5a:e3:ca:7b:2d:76:5b:8b:ff:c8:e5:3a:b8:b8:ff:5a:
03:60:91:7f:3d:8f:73:31:94:e7:d1:4b:50:c9:73:2f:dc:d2:
30:7a:0f:bb:d9:d8:36:15:db:47:d9:2f:9e:bd:df:fa:7a:2a:
a3:58:45:8a:a7:18:1b:2f:31:86:bc:a3:eb:fe:c6:f7:bc:c1:
b0:0e:37:eb:1c:d8:90:26:bf:de:03:08:ea:3a:df:03:37:6f:
aa:31:58:ae:50:a4:dc:58:13:d6:a6:42:f4:34:70:a0:db:52:
64:a9:eb:88:28:7e:ad:f8:c5:b7:bf:53:4c:9e:6c:37:f3:17:
5b:1f:3d:29:a2:3b:d6:ff:87:d5:b5:9c:66:2a:1d:c6:9e:e5:
33:97:0a:ec:73:9e:2f:4b:ee:fb:7d:b7:b4:ee:27:7b:4f:e5:
2e:2d:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:22 2026 by rpki-client