Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: iqUlVYl9CsBpWnKLFevjFw4PBSE+RKqOsSWCHi1+DFg=
Subject key identifier: 04:07:BA:56:4B:EB:CC:BD:EA:D5:27:83:1C:88:B8:AA:3D:26:B7:15
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 019CAAFD96D859F4C054BA6E5EC40B5FA027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: 26eOuggUp2VKZdE7i2qyWwVe75zgw1moCuN1X0NbnSw=)
2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:96:d8:59:f4:c0:54:ba:6e:5e:c4:0b:5f:a0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=0407ba564bebccbdead527831c88b8aa3d26b715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:78:df:d6:be:1a:6e:5f:08:47:51:73:5e:
32:10:c5:c5:0c:87:22:02:17:f3:12:9f:dc:ae:a1:
24:2d:b1:32:5f:7d:f6:8b:e9:3d:dd:47:e1:6f:09:
55:70:bc:cc:c6:d6:77:87:60:8c:37:41:d2:11:43:
d9:37:ee:88:77:75:5b:c9:08:66:40:3e:a1:12:be:
a2:eb:33:05:5c:a2:df:8a:69:58:e9:f1:0c:d5:ca:
d0:aa:67:c2:9c:3a:cd:b8:6b:7d:86:83:8b:e6:1c:
2a:cf:59:2c:3a:ca:35:84:e0:a3:c0:a8:88:b1:ab:
d8:31:30:e3:15:10:d6:db:5d:ab:4a:19:16:4f:ec:
fd:48:e8:6d:0e:aa:24:50:f2:dd:4d:17:e0:4e:62:
c9:3f:e1:64:ad:08:64:59:a0:f5:e0:12:df:98:09:
b1:14:00:94:a2:01:94:d1:6c:f8:b1:ed:0a:f9:ad:
9b:35:3a:8c:f9:ad:18:14:15:be:20:21:d1:29:12:
fd:aa:3d:5f:b4:bb:16:d9:f9:47:0a:e9:9a:ba:f7:
ba:f6:3f:d1:e3:2e:bb:1e:55:2c:45:c4:31:9c:3e:
53:65:8b:ba:99:61:04:28:f7:03:46:ef:7b:bd:cc:
e0:30:34:05:94:60:25:40:95:8e:34:5d:30:ca:77:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:BA:56:4B:EB:CC:BD:EA:D5:27:83:1C:88:B8:AA:3D:26:B7:15
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6f:50:30:83:3c:1e:e6:f5:0f:14:44:da:1b:72:9b:4a:65:
9b:72:76:8d:99:b4:70:d8:57:be:3a:dc:33:bb:30:33:4b:77:
69:16:d2:90:9f:69:e0:62:a4:25:1b:4b:2d:2b:70:31:7c:ad:
75:cf:d8:6f:4d:93:35:52:5b:52:5f:49:39:0c:48:86:8a:d6:
db:16:c7:1a:45:08:59:28:28:55:32:b0:aa:64:2e:f0:77:b0:
c1:b2:fd:6a:61:4e:5b:88:6b:c4:e6:57:e2:91:89:b0:93:4b:
c3:65:18:0b:d9:2b:99:5b:87:62:cd:c4:35:a3:29:da:94:ac:
57:e0:fe:48:77:ed:33:19:7c:51:81:66:71:a2:32:69:93:ac:
25:15:c0:85:1a:a8:08:59:c8:1f:cc:e0:d6:57:1e:82:01:9f:
c7:6e:90:f5:35:19:59:c0:f5:4f:7d:e1:8e:ec:d5:de:fe:54:
5b:33:bc:5d:47:85:0f:de:6e:f7:07:46:c2:35:57:43:07:98:
00:69:af:12:2e:1b:a8:6f:fe:1d:f3:5d:da:f2:83:05:68:17:
cb:2c:43:c7:4c:b1:ef:ea:fb:17:25:8d:ff:b8:31:87:c1:d7:
70:9b:57:95:b9:0a:ae:e9:a7:b9:ad:9e:9b:87:a6:cf:a2:9f:
ac:f4:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:32 2026 by rpki-client