Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: Vy8PERtt1oZIDtcDzmBmjtORVdssE4WS5s6wI6vmNTI=
Subject key identifier: 7B:80:CB:26:E6:24:0B:BF:B3:BD:86:63:24:D1:50:0B:C6:B8:97:E4
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019D99D0171BD1877DF4159F5F307CFFD1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1811
Signing time: Fri 17 Apr 2026 05:00:44 +0000
Manifest this update: Fri 17 Apr 2026 05:00:44 +0000
Manifest next update: Sat 18 Apr 2026 05:00:44 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: L62pLty+WrLBkpgT//HhASgWrJ59LyG2+JsQsWonMKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:17:1b:d1:87:7d:f4:15:9f:5f:30:7c:ff:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Apr 17 05:00:44 2026 GMT
Not After : Apr 18 05:00:44 2026 GMT
Subject: CN=7b80cb26e6240bbfb3bd866324d1500bc6b897e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:1e:a7:77:99:5a:c8:e8:1d:c8:67:65:59:
f2:ef:e3:dc:3e:88:73:bf:15:3a:89:c3:40:24:84:
e5:08:c5:9d:2d:53:96:8b:84:b3:19:61:20:be:8a:
dc:79:aa:99:c6:18:68:52:5e:35:b6:62:9f:8b:9d:
0d:4d:81:2a:28:9e:2f:cf:23:54:18:ab:58:11:27:
1f:5f:9d:38:6d:66:41:84:84:88:dc:a7:6f:2d:16:
75:e8:73:f2:5e:d7:17:4d:a2:a4:54:e4:e7:0d:09:
76:ac:a5:a2:b3:8e:82:a0:74:48:ec:a7:b3:39:54:
ec:57:fd:0c:4e:49:ca:31:bc:af:46:eb:05:78:df:
77:5c:94:74:b6:31:3d:ba:f2:8a:1f:5f:3e:a5:f9:
09:f3:64:ef:3f:8f:cd:47:00:dd:a5:7d:e3:46:d4:
32:56:22:fb:1b:1c:c1:0a:8b:ec:56:f3:72:50:6d:
29:e3:3c:af:14:4a:cd:10:23:1e:09:36:d6:1b:c1:
fa:f3:49:e0:92:61:12:c8:0e:11:f2:7c:b4:a2:3c:
c0:24:cf:37:18:3f:85:e7:59:5f:2a:7f:84:21:5b:
e6:55:5a:97:8d:8d:06:d0:bd:3c:87:0e:07:f7:a3:
da:22:46:39:b6:c4:e1:10:79:a3:56:a1:ef:d5:86:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:CB:26:E6:24:0B:BF:B3:BD:86:63:24:D1:50:0B:C6:B8:97:E4
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e4:4a:1c:2c:62:9f:2f:25:0b:d7:c9:bc:f8:ac:f8:ae:d8:
0c:15:6f:49:cf:a6:64:4f:ac:d8:dc:6b:99:4f:e5:ea:04:98:
99:03:28:62:4d:18:2a:11:cc:76:f4:56:9d:2b:25:97:96:70:
6f:12:7f:e0:c4:f4:0a:fa:05:fa:c3:23:6d:f9:57:3c:2a:4b:
6d:55:c3:1f:fc:d3:78:e4:c4:93:5a:cc:cc:83:7a:64:c0:43:
08:fb:fc:e0:be:8b:49:c8:9a:9e:ac:58:a0:e7:2e:f9:4c:47:
a6:b6:db:b6:c0:68:5a:7d:43:07:fc:43:d4:22:42:21:e2:ab:
2d:ff:9c:40:46:f3:bb:d8:af:3a:f5:cf:a1:21:22:62:5e:aa:
72:52:5c:4c:b2:6d:a0:26:e8:68:02:7b:c1:fc:6b:d1:86:9d:
c1:1a:91:e0:34:19:82:09:b9:2c:07:0c:b2:19:4a:4c:c1:59:
f7:53:5e:29:0e:02:df:14:82:3d:0e:df:d7:20:0f:b5:08:75:
d6:35:41:3e:52:2f:1e:32:84:e2:99:72:0b:08:ed:97:2d:71:
a1:da:52:e4:b0:e1:d4:ce:95:9e:a7:12:94:11:c2:ce:41:a4:
21:61:9b:d4:c0:a8:af:f7:f5:96:fd:5c:c7:65:83:e0:01:bc:
2d:27:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:51 2026 by rpki-client