Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: DMenqKMRBvwtmfiY1McTDd/IL6QVJV3dd5JLUeJhhPo=
Subject key identifier: FD:FA:1F:57:1A:FA:A9:91:97:92:38:E7:1C:95:B2:5D:94:FB:41:28
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 019CABA1F8D281E0810DEE21FAD9D9021D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 051A
Signing time: Sun 01 Mar 2026 23:00:44 +0000
Manifest this update: Sun 01 Mar 2026 23:00:44 +0000
Manifest next update: Mon 02 Mar 2026 23:00:44 +0000
Files and hashes: 1: VmT1Sho8ydxnIvte_UcEISrCOVY.roa (hash: JUbxvsuSh9DNNPxCyYh0gkLv8eHHl4hp0u9soB0vgC8=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: CrHrrVzjCYK9B3wvrD/K95H6wIPDLZw4mJhbi9yYH5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f8:d2:81:e0:81:0d:ee:21:fa:d9:d9:02:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: Mar 1 23:00:44 2026 GMT
Not After : Mar 2 23:00:44 2026 GMT
Subject: CN=fdfa1f571afaa991979238e71c95b25d94fb4128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:0a:eb:d8:3a:97:16:79:d9:b3:6a:ae:52:
8f:ef:f7:4e:a4:72:55:f8:97:47:ed:69:88:57:c4:
13:60:a7:bf:9b:fe:04:63:98:14:08:62:a4:ca:12:
da:25:fa:c6:d1:41:67:67:a8:c7:1c:37:42:e3:1c:
88:5d:47:ed:0d:42:eb:ad:21:76:58:00:ff:c6:d4:
bf:e0:13:87:d4:a0:c5:cd:9b:4d:69:02:18:8f:8e:
3e:5b:a4:b3:9c:c4:40:25:9a:91:04:03:e9:85:01:
77:f8:12:46:aa:bb:62:83:ee:fa:db:6f:72:69:0f:
f6:2f:73:b5:dc:30:52:5c:e1:7b:92:a3:54:04:a8:
9d:89:0b:07:b5:78:11:65:9b:c1:80:3f:2f:45:6e:
32:72:86:ab:d5:85:38:3e:7c:17:49:b1:70:0a:a3:
a1:20:77:24:fb:7a:ca:0c:dd:6a:57:fd:d9:b2:f0:
6b:54:66:04:75:14:4d:11:3f:9e:fb:7e:21:5d:a7:
cc:68:80:2c:80:69:da:20:ae:7c:d5:69:ec:66:d2:
d4:f3:c6:ad:fc:47:a6:75:e4:3b:62:02:31:5c:9d:
6a:6a:1b:e8:b2:95:05:1c:d8:89:21:f7:32:a6:61:
f0:70:8a:3d:34:ae:ee:d7:d7:90:71:2b:cf:0d:02:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:1F:57:1A:FA:A9:91:97:92:38:E7:1C:95:B2:5D:94:FB:41:28
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d6:40:84:08:3a:ac:17:80:b0:53:78:dc:c7:b9:aa:83:2a:
09:5a:86:f0:92:40:3d:92:0b:6f:06:c2:e8:39:75:bd:b4:12:
1c:75:a5:9e:59:55:e0:4e:22:64:74:ff:68:d0:56:18:4f:92:
01:b5:50:ea:fb:41:ca:af:cb:92:88:71:e3:9e:12:61:22:de:
1e:03:78:ec:3b:ed:d4:04:f5:31:32:0a:5a:b2:c2:5e:6a:82:
04:4b:ce:65:31:1a:a4:d1:a1:7d:5f:d9:7f:87:eb:db:6f:99:
dc:97:8a:44:42:88:08:80:3c:1b:03:88:fd:75:e1:2a:41:a9:
e5:11:2e:0b:f8:eb:84:cb:74:35:15:ad:f7:b3:ff:63:20:62:
f7:d1:24:7d:66:3b:bc:10:ca:30:e5:3d:ea:a4:f7:b7:f6:06:
c1:23:0b:7f:49:7e:0f:b3:34:d6:bf:a1:08:f6:cf:fc:10:12:
68:1f:5c:7d:9b:c3:17:e8:bb:81:19:c8:42:b1:67:b2:d2:ce:
4a:cf:a5:90:50:88:37:2d:48:62:46:e2:6e:d7:4b:96:d7:c7:
96:e4:1c:9e:52:3a:78:18:29:47:15:e5:f4:32:83:c4:b8:50:
cc:e8:14:1e:99:c0:f5:c5:c5:47:aa:18:19:2c:37:78:b0:a4:
5d:21:45:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofjSgeCBDe4h+tnZAh2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw
ZGFjNzgwHhcNMjYwMzAxMjMwMDQ0WhcNMjYwMzAyMjMwMDQ0WjAzMTEwLwYDVQQD
EyhmZGZhMWY1NzFhZmFhOTkxOTc5MjM4ZTcxYzk1YjI1ZDk0ZmI0MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx4K69g6lxZ52bNqrlKP7/dOpHJV
+JdH7WmIV8QTYKe/m/4EY5gUCGKkyhLaJfrG0UFnZ6jHHDdC4xyIXUftDULrrSF2
WAD/xtS/4BOH1KDFzZtNaQIYj44+W6SznMRAJZqRBAPphQF3+BJGqrtig+76229y
aQ/2L3O13DBSXOF7kqNUBKidiQsHtXgRZZvBgD8vRW4ycoar1YU4PnwXSbFwCqOh
IHck+3rKDN1qV/3ZsvBrVGYEdRRNET+e+34hXafMaIAsgGnaIK581WnsZtLU88at
/EemdeQ7YgIxXJ1qahvospUFHNiJIfcypmHwcIo9NK7u19eQcSvPDQLD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP36H1ca+qmRl5I45xyVsl2U+0EoMB8GA1UdIwQY
MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et
YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5
LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNZAhAg6
rBeAsFN43Me5qoMqCVqG8JJAPZILbwbC6Dl1vbQSHHWlnllV4E4iZHT/aNBWGE+S
AbVQ6vtByq/Lkohx454SYSLeHgN47Dvt1AT1MTIKWrLCXmqCBEvOZTEapNGhfV/Z
f4fr22+Z3JeKREKICIA8GwOI/XXhKkGp5REuC/jrhMt0NRWt97P/YyBi99EkfWY7
vBDKMOU96qT3t/YGwSMLf0l+D7M01r+hCPbP/BASaB9cfZvDF+i7gRnIQrFnstLO
Ss+lkFCINy1IYkbibtdLltfHluQcnlI6eBgpRxXl9DKDxLhQzOgUHpnA9cXFR6oY
GSw3eLCkXSFFxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:23 2026 by rpki-client