Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: p4G/cUsZGtUZVJKK0Yzui7smsLFv4BN90eSKwsgSQ0M=
Subject key identifier: D0:17:81:D8:1A:A5:CF:E2:E4:B9:8B:69:A3:5A:11:99:36:29:27:5F
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 019CAC472B996AEF9EDBFBFD9EEE9DDB8D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1796
Signing time: Mon 02 Mar 2026 02:01:11 +0000
Manifest this update: Mon 02 Mar 2026 02:01:11 +0000
Manifest next update: Tue 03 Mar 2026 02:01:11 +0000
Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: wMbjI4Y+pyPrk8Oi3K9fnVK7ZpLC56kd4rnS88RggCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2b:99:6a:ef:9e:db:fb:fd:9e:ee:9d:db:8d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Mar 2 02:01:11 2026 GMT
Not After : Mar 3 02:01:11 2026 GMT
Subject: CN=d01781d81aa5cfe2e4b98b69a35a11993629275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:46:08:69:be:47:0b:bc:03:67:28:4b:3a:
60:3a:89:ae:3a:fa:17:36:4b:4e:26:cd:1c:75:05:
e5:5c:97:92:aa:0b:5e:d3:16:ee:6f:6f:e1:fc:d1:
4d:ec:82:a7:ce:53:16:6c:9d:e3:02:bc:20:e4:7a:
45:1e:29:f3:fa:02:67:29:69:64:e0:ff:de:73:b0:
11:71:70:7f:7c:43:59:46:87:c6:c1:91:4c:78:a4:
ac:d8:e4:3c:96:c4:95:d6:6c:97:80:45:35:51:86:
97:ed:f6:fe:40:22:5d:1c:a5:99:ad:e3:f1:45:e1:
f6:30:da:f2:9a:ab:e7:01:b4:36:a4:0f:f4:70:70:
9e:d9:3f:bd:1c:44:d2:03:68:7d:3a:73:cf:cc:ba:
70:9f:1e:87:6a:d4:0e:44:b1:33:57:c7:3a:8a:9f:
a5:e9:af:0c:24:ab:6a:4f:58:49:e8:12:2d:97:96:
9e:bb:ca:00:a7:e1:4b:25:98:10:f2:4d:6b:6e:1d:
a3:09:16:2c:9e:2e:05:21:07:25:fc:e1:94:7b:a8:
ea:63:58:ba:4d:22:b5:3c:6d:97:94:63:18:6c:48:
7f:22:8f:ba:c8:dc:2f:d3:59:6a:3b:94:df:5b:9c:
97:0c:ac:ea:b1:1b:fb:6b:f5:66:b2:0a:a6:25:be:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:81:D8:1A:A5:CF:E2:E4:B9:8B:69:A3:5A:11:99:36:29:27:5F
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:83:f3:5d:fb:dd:26:9a:f9:c0:a9:a9:18:7d:fe:2d:0c:
0b:d4:48:42:02:a3:a2:b4:b6:b0:34:4b:ea:26:06:8f:a5:f9:
67:c4:11:be:ac:1c:43:95:47:1f:8f:2d:b8:3b:6f:75:0e:17:
b0:72:42:00:95:48:24:5b:cd:40:eb:1c:b8:4d:d7:16:2b:ad:
6d:86:ac:98:1d:6f:ae:16:73:f1:9f:56:6a:7e:ae:87:b5:4e:
55:1d:5b:81:44:76:7e:c2:86:09:a9:e3:59:91:ab:f2:45:98:
2d:0e:62:c4:a7:fa:c9:a2:eb:5b:f8:43:d5:aa:77:19:ad:1f:
38:2d:97:d1:c0:94:5a:73:7c:db:a9:fd:b7:bc:2b:12:09:01:
15:45:a8:c0:8e:c7:51:cd:fa:82:ca:6e:d6:0d:68:04:86:0b:
4e:5c:ff:69:60:3b:e5:e1:ef:48:1e:26:87:b1:46:62:d5:d9:
31:b7:de:4d:9b:e5:38:9b:f6:71:47:11:5b:8e:6c:e7:e7:01:
b0:01:f8:89:3e:72:e5:4a:9d:86:c9:ec:e1:68:ca:18:ed:b4:
65:d4:20:e6:97:aa:47:e4:57:c8:b2:f0:0d:07:e9:4f:f4:02:
61:5a:52:7b:2e:7e:62:70:f8:f9:92:78:85:66:7e:f1:dc:fd:
8d:2d:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:38 2026 by rpki-client