Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: EGU9oMeFqOUz6ZesUjrPNMHynQVkM6Xz86IhCrQxCSQ=
Subject key identifier: FF:EE:65:AA:0E:F4:91:EF:98:D4:02:32:E1:8F:DF:BA:00:60:6B:89
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019FAAF620922B114486E636ED8F9A5C6FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: NUpB5z6/djVtEkc+fb5zlL5RSzpj7kLVgYGJoU8CcRg=)
2: C_AvtSnRCKwvl2SpLUtFVcIH_w8.roa (hash: Ey0Vszsa81W+PEv7/mryXgBI5kc8rCJJuGeJRL0U9AY=)
3: vRgORVIgzFbgx9kOiETjJtMLghA.roa (hash: Uf5SkSIOo28qZJtGrvXdFP718QNyditb6xU5BtcR6CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:20:92:2b:11:44:86:e6:36:ed:8f:9a:5c:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=ffee65aa0ef491ef98d40232e18fdfba00606b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:06:05:a9:de:34:28:d1:be:2f:cf:46:af:
c7:dd:d1:67:39:28:5e:a9:f5:da:6f:3f:b0:df:c8:
49:36:03:7c:b8:cf:04:c7:ea:20:4b:bf:08:66:34:
18:2e:25:d4:3f:31:84:8d:2c:e1:d7:64:a9:e3:50:
3f:3d:d0:73:47:5b:f6:05:8e:83:aa:7a:c9:bc:0d:
5a:a4:95:1b:15:b5:84:8b:57:0b:31:11:70:32:d9:
44:7e:c6:66:d6:d9:6c:10:e7:15:d9:53:db:db:63:
33:43:b9:3a:e1:b8:c3:b5:a9:dc:97:aa:8a:94:a5:
45:56:f3:6e:47:bd:59:1c:9c:49:a4:7b:cf:ab:d5:
67:95:dd:8b:8d:60:27:d4:93:c2:7f:32:3c:87:eb:
e2:38:48:a9:4c:ce:47:fe:eb:5c:1a:d3:98:80:fb:
db:00:61:79:fb:21:b0:e3:48:58:24:08:a8:5e:6b:
db:f2:25:d3:98:85:b7:77:0b:98:cb:f4:8c:7c:5e:
6e:ce:22:07:f0:74:f2:88:d6:c3:90:40:d5:fa:3b:
99:83:c6:24:92:90:f9:22:73:67:2e:c0:d0:97:bd:
02:65:7d:2d:13:c1:a1:e9:b5:20:40:a8:94:45:1e:
4f:10:7b:f7:b2:d1:c5:f9:da:96:0e:6b:a3:5e:95:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:65:AA:0E:F4:91:EF:98:D4:02:32:E1:8F:DF:BA:00:60:6B:89
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1e:64:b5:47:b2:85:a3:38:4d:c6:8e:be:6a:69:46:d7:85:
fa:86:29:bf:4a:2b:0e:38:59:c9:ea:39:f3:53:3d:10:3b:c5:
b6:2f:c2:cf:45:78:1e:1b:5f:b2:eb:a7:b6:32:ab:69:79:dd:
0a:fc:77:3d:15:84:09:dc:fe:d1:2e:06:19:2c:f0:93:c2:39:
db:04:0b:71:3a:95:f3:73:e4:4b:b6:6c:1e:dc:79:3e:23:22:
21:a7:4b:35:e8:d2:49:32:2a:95:8a:ae:41:e1:6e:6c:7e:47:
65:2b:c3:19:44:88:ed:2a:a1:ae:90:56:2e:43:df:dc:93:cf:
4a:31:30:e6:5c:94:8b:77:ce:25:9e:1d:2f:4a:fb:16:76:b3:
74:9e:17:a6:49:ef:61:71:cf:74:28:78:7e:c3:7b:50:9b:19:
f6:35:41:cb:9f:e0:83:05:cb:71:1a:19:fb:d4:0b:5f:14:10:
bb:d7:22:47:58:42:9b:00:37:09:91:b3:4e:c9:03:df:e9:b3:
3c:2a:96:b5:86:53:5f:60:6e:0c:ad:3f:cc:77:fd:e4:72:41:
e5:39:17:e8:9c:94:9e:ec:e3:ae:0e:05:3f:9f:1a:cf:a9:1c:
24:91:bb:cc:cd:a3:a0:e2:73:86:39:50:d2:58:23:76:b5:3a:
0b:17:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:35:48 2026 by rpki-client