Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: bIlsqFO6Ygscq76paktbuKqdADNTGMqkiiS9jDFtXrI=
Subject key identifier: C4:B5:73:CB:1A:D1:47:D7:06:3A:30:BE:06:1C:E7:91:B9:8D:B9:5F
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019FA90786FDFEF50597D88FBE489F0B9BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1922
Signing time: Tue 28 Jul 2026 14:01:10 +0000
Manifest this update: Tue 28 Jul 2026 14:01:10 +0000
Manifest next update: Wed 29 Jul 2026 14:01:10 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: ij6kUU4txVn0TUP6+21yrZKHpZ4wgn5d97mcrDMVVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:86:fd:fe:f5:05:97:d8:8f:be:48:9f:0b:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Jul 28 14:01:10 2026 GMT
Not After : Jul 29 14:01:10 2026 GMT
Subject: CN=c4b573cb1ad147d7063a30be061ce791b98db95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:c6:76:cc:cc:8e:c4:22:0c:ae:34:95:67:
f7:5d:07:d7:1b:d3:0d:ea:fe:53:68:84:c1:cc:fe:
76:69:4d:93:3d:31:b0:80:bb:9f:b7:54:4e:da:40:
7d:27:d1:63:72:51:87:e1:48:af:c4:c9:58:5a:a1:
3c:74:98:c3:8f:21:e2:ad:56:bd:42:5d:18:e0:70:
07:df:35:88:af:c4:e7:30:b3:e0:a7:34:ee:78:46:
6d:48:92:98:7b:5e:69:70:b2:78:c0:d5:2b:30:13:
c6:75:09:ae:43:fa:ee:c8:ae:41:89:f6:71:32:c7:
2c:b0:c4:31:64:20:3d:42:c4:ef:17:97:34:2d:d6:
a2:8f:b1:3c:c6:d8:63:3a:6f:9f:08:42:84:d7:b1:
b9:8a:a7:05:3f:c3:57:3c:2c:0f:0e:3b:34:65:ed:
9c:3d:20:82:1f:7b:a8:97:10:d8:28:21:ae:94:dd:
76:80:fd:9e:82:0a:be:fd:8e:36:19:94:b2:77:48:
a7:60:2e:1e:bd:24:16:a0:bc:54:ac:1d:20:ed:61:
07:7f:04:07:16:7e:47:3c:9c:f2:a7:f4:5f:7f:9e:
ad:69:33:be:2b:2c:63:b3:2b:52:aa:c6:77:b4:14:
79:54:8b:ac:33:fc:25:b5:08:19:b2:2d:66:ca:7c:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:73:CB:1A:D1:47:D7:06:3A:30:BE:06:1C:E7:91:B9:8D:B9:5F
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bf:12:55:13:9c:c6:2e:ba:d7:90:d1:01:0a:12:50:78:a2:
d6:25:9e:4d:14:77:9a:70:82:71:b0:c2:7b:1b:b0:bf:67:58:
08:31:3f:e3:47:58:fc:be:82:6c:75:f4:a9:58:31:35:f6:1d:
2e:82:69:17:58:21:c6:f8:8e:15:24:bb:f0:3f:14:63:4c:3b:
ae:64:07:41:2d:ec:bc:75:38:15:17:a4:ab:f8:3b:ab:cd:6b:
a4:f2:90:a2:54:bc:4e:ac:aa:d5:db:c3:e9:c1:e8:23:d2:87:
8a:e4:7b:6b:43:5e:6e:0e:70:1f:0a:19:c9:e5:ef:49:a7:5b:
ad:49:df:0b:a9:84:3f:bd:1f:c1:84:4e:7b:81:1a:72:39:61:
6c:11:22:49:83:0e:6b:4c:8d:c7:0b:88:0a:e4:0b:51:6a:43:
f7:79:70:96:80:80:11:81:dc:ef:36:99:8d:b0:cd:31:e9:1c:
72:d0:6f:0b:d2:be:21:19:7d:30:f1:40:f8:d7:66:c6:33:68:
63:da:05:45:68:56:fb:c7:df:20:5a:f2:dd:34:05:aa:1c:ab:
78:3a:2a:0f:77:95:cf:d0:38:79:1e:ea:92:1f:2e:50:50:6f:
32:9c:37:42:ce:e5:88:43:2d:cf:c9:7a:22:42:9c:80:c9:c6:
96:83:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:04 2026 by rpki-client