
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier: jzNf5XMQBUCyIezVKySemaMnOzYA7G48JazKTcEj5ck=
Subject key identifier: E8:E9:5C:A7:64:D8:07:3A:94:06:AD:58:38:6B:C2:27:58:D0:71:BF
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer: /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial: 01A0C7EAC1158A8BFD58F95253350FE388D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number: 1A63
Signing time: Tue 22 Sep 2026 07:00:45 +0000
Manifest this update: Tue 22 Sep 2026 07:00:45 +0000
Manifest next update: Wed 23 Sep 2026 07:00:45 +0000
Files and hashes: 1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: FrOMKU8ERrIyd3kkn4kU7gRaJDFcbdPCsTgQXhls670=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c1:15:8a:8b:fd:58:f9:52:53:35:0f:e3:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Validity
Not Before: Sep 22 07:00:45 2026 GMT
Not After : Sep 23 07:00:45 2026 GMT
Subject: CN=e8e95ca764d8073a9406ad58386bc22758d071bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:35:4e:74:9d:8b:a1:bd:82:41:8b:5e:14:
6c:54:c0:05:ca:f5:f9:4e:ef:b4:63:28:1f:44:03:
6b:4e:15:f1:db:35:d0:f7:d2:36:87:4d:33:bf:7c:
59:78:66:80:07:f2:37:c3:67:c6:49:52:d2:e9:6d:
3e:2c:dd:8b:96:2f:c8:a3:04:83:03:4b:1e:bf:d0:
be:f3:80:9b:b5:a9:6a:1e:37:7b:da:8c:fe:08:04:
7a:00:82:0f:bf:15:e8:69:1c:bc:2b:8c:55:06:f5:
63:e6:7a:2c:b4:68:ca:18:5d:cd:86:c7:55:97:0b:
b1:9f:05:76:b8:ee:5b:9d:c3:5a:b7:e3:47:16:4f:
aa:7e:19:d3:39:df:de:cb:cb:fc:e8:fa:57:e8:84:
e5:d1:c6:4f:71:23:73:8b:e1:ad:1d:3c:9a:9c:10:
db:54:18:a2:87:6c:0f:fa:54:20:8e:96:33:81:01:
d6:05:79:9f:c7:b2:23:09:01:1a:4e:5f:8a:44:5d:
f0:01:c4:bc:bf:d4:9d:62:ef:65:a4:80:9f:09:35:
ab:06:63:8f:92:e8:76:06:53:96:90:84:bb:9a:8a:
2d:90:32:73:95:c0:ea:03:7f:29:92:98:1f:ea:01:
93:f9:05:08:45:a2:bb:01:37:4f:2a:09:4d:a2:cc:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:5C:A7:64:D8:07:3A:94:06:AD:58:38:6B:C2:27:58:D0:71:BF
X509v3 Authority Key Identifier:
keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8e:5d:d5:58:43:4b:38:68:14:56:f5:10:da:80:e1:ba:b6:
c7:1e:33:31:34:70:4d:15:b4:90:22:85:f0:63:64:39:2e:82:
da:f7:84:6f:64:50:93:48:01:b7:e2:67:71:6b:f4:ac:18:01:
f5:73:bc:f0:96:0b:84:de:2c:b1:07:84:5e:0b:e2:75:eb:50:
cd:4f:ee:b9:5d:29:90:00:dd:a7:80:75:0b:02:b2:28:c7:b4:
5e:e2:fb:de:9b:a7:b1:6e:12:d8:c5:9d:8c:44:f7:7b:3b:f3:
09:31:94:ee:12:a7:8c:bf:d8:88:07:90:f0:e9:58:33:cc:f4:
29:5b:ae:61:ed:4c:6e:3d:e9:cc:ef:05:bc:81:0d:b2:50:da:
fc:b6:9f:0e:a5:14:9a:30:82:9d:20:27:c5:4c:8b:51:91:57:
e1:77:00:69:75:86:d7:04:37:ce:96:82:b0:29:fd:f6:48:3f:
87:b6:b3:c5:a3:4d:b4:37:92:a0:22:cc:6e:15:f4:db:2a:3e:
b0:20:e2:7f:ed:9b:61:af:ac:05:60:f6:ea:97:c2:d5:96:9b:
a4:06:f1:ac:13:4e:b2:ed:3f:bc:d1:ea:b7:f8:f4:14:f3:f9:
31:4d:5e:f1:11:e8:76:52:a1:9e:7a:20:0e:a7:13:9d:95:54:
a4:43:02:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6sEViov9WPlSUzUP44jTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZWY5YjVmMmVmMTA0M2MyZGYzMTdmODZjOGI5Mjk3MjIx
ZjhkYzMwHhcNMjYwOTIyMDcwMDQ1WhcNMjYwOTIzMDcwMDQ1WjAzMTEwLwYDVQQD
EyhlOGU5NWNhNzY0ZDgwNzNhOTQwNmFkNTgzODZiYzIyNzU4ZDA3MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwU1TnSdi6G9gkGLXhRsVMAFyvX5
Tu+0YygfRANrThXx2zXQ99I2h00zv3xZeGaAB/I3w2fGSVLS6W0+LN2Lli/IowSD
A0sev9C+84CbtalqHjd72oz+CAR6AIIPvxXoaRy8K4xVBvVj5nostGjKGF3NhsdV
lwuxnwV2uO5bncNat+NHFk+qfhnTOd/ey8v86PpX6ITl0cZPcSNzi+GtHTyanBDb
VBiih2wP+lQgjpYzgQHWBXmfx7IjCQEaTl+KRF3wAcS8v9SdYu9lpICfCTWrBmOP
kuh2BlOWkIS7mootkDJzlcDqA38pkpgf6gGT+QUIRaK7ATdPKglNoszyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjpXKdk2Ac6lAatWDhrwidY0HG/MB8GA1UdIwQY
MBaAFAbvm18u8QQ8LfMX+GyLkpciH43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgt
OTFiZWI5Yjg5MDhjLzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgtOTFiZWI5Yjg5MDhj
LzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm45d1VhD
SzhoFFb1ENqA4bq2xx4zMTRwTRW0kCKF8GNkOS6C2veEb2RQk0gBt+JncWv0rBgB
9XO88JYLhN4ssQeEXgvidetQzU/uuV0pkADdp4B1CwKyKMe0XuL73punsW4S2MWd
jET3ezvzCTGU7hKnjL/YiAeQ8OlYM8z0KVuuYe1Mbj3pzO8FvIENslDa/LafDqUU
mjCCnSAnxUyLUZFX4XcAaXWG1wQ3zpaCsCn99kg/h7azxaNNtDeSoCLMbhX02yo+
sCDif+2bYa+sBWD26pfC1ZabpAbxrBNOsu0/vNHqt/j0FPP5MU1e8RHodlKhnnog
DqcTnZVUpEMCNA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:55 2026 by rpki-client