Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
File: BT-EaexiUgmHiW2JJsFyKKe8-z0.mft (raw, json)
Hash identifier: mb3tkJ0ch2yPJwYigGUS+/fCaqyfCdsqTU4etj6eEc4=
Subject key identifier: F3:06:80:D5:E0:2C:3D:D1:68:57:EC:50:7A:1C:B6:63:98:80:A2:33
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 019D29974A0B7AD4921C6604688D44E0C59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
Manifest number: 1335
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: BT-EaexiUgmHiW2JJsFyKKe8-z0.crl (hash: lvenkghIVUz6wV18ID+E+chsVSnCMOkT5lTJEZBQnW8=)
2: CDyO9jxGLeWnKi1oYro8zSOZ6J8.roa (hash: DGs9MBH9WSDg0RygkGFz7r1uMcCMHw3eINfD0pYmxrk=)
3: zNSZogebh91OuVEeY5zQNX0A5Ic.roa (hash: 2eN5NFfRRB29QtCtsqn2i6PCdLwZTn0MMIEPVRBBMcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:4a:0b:7a:d4:92:1c:66:04:68:8d:44:e0:c5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=f30680d5e02c3dd16857ec507a1cb6639880a233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:2f:92:12:0d:85:64:5e:1e:7c:16:b8:52:
c7:e9:00:ef:9d:a1:65:e7:59:44:dc:10:63:a0:b9:
4c:97:a9:4c:de:60:71:3e:33:17:7e:46:88:20:f4:
46:f0:81:33:90:c5:bc:b8:b5:89:63:00:9d:fc:e2:
90:70:33:82:ba:ef:c1:80:b8:56:d8:9d:3e:ee:8c:
66:66:b0:ff:a2:02:59:90:3f:e5:0b:98:be:8f:db:
ff:69:46:c2:3a:3b:68:50:a1:6a:e9:24:2c:5a:45:
9e:b5:40:85:42:aa:ae:e4:db:ab:e4:15:18:3b:35:
73:d8:46:98:06:3c:05:75:ad:ba:af:63:11:03:8a:
23:12:42:c7:c4:2f:9e:ca:94:44:0a:39:7b:5c:03:
38:e3:7a:80:34:9a:55:4c:2e:82:0a:4e:de:7d:ea:
a6:22:d7:39:41:0a:39:5f:d7:90:20:44:79:8e:d8:
8b:3a:b0:ca:5b:6c:5a:be:eb:f6:0a:b8:5d:e0:6a:
e4:42:40:51:e6:68:f6:b2:78:39:81:67:3b:27:b4:
b8:78:10:a7:6b:c5:18:db:b1:a0:f4:77:90:5b:0d:
69:8e:fb:72:64:39:67:5d:45:c0:7d:96:62:37:35:
77:fc:a2:f2:03:54:89:5e:c0:e0:23:ae:93:3e:a6:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:06:80:D5:E0:2C:3D:D1:68:57:EC:50:7A:1C:B6:63:98:80:A2:33
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9b:c0:2b:5c:1d:53:21:70:af:7b:52:cc:ef:4e:a8:35:3e:
98:c7:75:7c:3b:2a:55:41:64:6e:17:98:29:63:1d:b6:4e:34:
2b:f3:75:49:02:b5:52:97:50:71:43:ed:9a:02:68:62:8d:4d:
a8:74:51:bc:1c:d8:08:90:07:24:32:b3:45:67:55:c1:2b:39:
a6:57:8c:aa:19:8a:8d:39:1c:ed:56:d3:df:bc:81:f0:53:bf:
6e:84:85:cb:25:05:de:71:9e:b4:0a:64:db:15:86:af:26:2c:
bc:c8:5c:f9:c4:4a:bd:b1:2c:21:b8:da:14:fb:01:c4:b1:a2:
fd:3b:0b:d8:4d:13:a6:b1:24:21:dd:e7:e4:7a:7d:dc:a9:ac:
15:07:e0:01:2b:f1:1d:25:f1:75:9a:fa:3a:4f:8e:fa:41:5d:
83:9e:f8:b4:9d:a8:da:cb:b8:e4:eb:e2:19:b4:12:64:f7:35:
b8:7d:74:b7:50:5d:9e:a4:da:5d:69:19:0a:10:fe:23:87:69:
f0:11:a4:d6:a4:45:64:51:54:7a:c2:ec:ae:cb:bf:a2:39:51:
d2:be:18:61:4e:b5:64:ab:fb:d1:8e:fa:1e:ec:10:79:9a:d3:
f0:96:f1:37:b2:e7:d9:01:4e:32:43:ab:27:12:8a:18:1a:36:
93:ab:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:01 2026 by rpki-client