Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
File: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft (raw, json)
Hash identifier: usHhUTjwiTH8XifyZ4Vkd4bQVvA6NjvfllFyhN41pk8=
Subject key identifier: 02:64:2F:45:CC:6F:71:09:31:D5:FA:AB:06:12:0D:3A:C9:02:FA:1B
Authority key identifier: 6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
Certificate issuer: /CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Certificate serial: 019DA4C1DEC0AF5158DF906C1E7B5744F357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:01:02 +0000
Manifest this update: Sun 19 Apr 2026 08:01:02 +0000
Manifest next update: Mon 20 Apr 2026 08:01:02 +0000
Files and hashes: 1: _Y3KWPgW5g7tWbAn0IxId-tYvoE.roa (hash: aYg7tkOr0lKYUUmicpFlbnWgT/KohMLQLxFqgfb/dJo=)
2: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl (hash: 99z+h2Pee0uiZLAjlVFuugBRwLX5/83b6LmcZd95VFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:de:c0:af:51:58:df:90:6c:1e:7b:57:44:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Validity
Not Before: Apr 19 08:01:02 2026 GMT
Not After : Apr 20 08:01:02 2026 GMT
Subject: CN=02642f45cc6f710931d5faab06120d3ac902fa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:72:35:36:68:8c:b3:b2:0a:50:bf:7e:57:
62:a8:1c:27:3c:b0:75:40:77:49:5f:29:96:41:24:
bd:c1:23:2a:63:66:bf:ce:d1:a1:6c:5f:e3:36:98:
14:ce:23:4d:5d:fd:e8:4b:85:55:0d:6a:05:02:eb:
0b:f1:9e:a2:1e:42:21:d7:33:7b:64:f8:58:40:50:
2c:30:c3:96:44:8f:7e:b6:16:a9:1b:e1:b4:de:76:
89:4b:e5:c8:14:04:51:b3:50:47:54:6d:fb:99:fc:
0f:c3:b1:1f:ba:91:e7:26:2d:c4:d0:e2:8e:f6:e4:
5e:2f:c4:bc:fb:61:f5:66:d7:58:76:c6:8c:82:04:
07:94:92:31:ef:f8:fc:36:be:d3:9b:d8:30:80:f4:
28:dc:28:54:6a:12:73:28:23:fe:a1:c2:a9:13:e7:
98:02:ba:fd:5d:16:ec:0d:11:b9:e9:d6:d6:4b:a9:
5d:ac:dc:b9:47:8b:12:71:ea:15:d6:77:42:6f:ce:
49:ec:eb:d2:f7:59:eb:17:1a:3e:ee:cd:57:9a:01:
7e:4f:78:63:1e:85:d5:45:9e:03:70:90:c9:83:2e:
33:9c:87:7d:fc:2f:6a:5a:9c:21:d3:b1:ac:a5:4c:
c1:49:c0:99:30:6e:bb:c2:aa:e4:ae:be:5a:31:b3:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:2F:45:CC:6F:71:09:31:D5:FA:AB:06:12:0D:3A:C9:02:FA:1B
X509v3 Authority Key Identifier:
keyid:6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:8c:5a:4d:2d:19:c6:b1:07:f5:b3:d8:c7:1b:af:c6:fb:
b6:3e:a4:68:75:77:54:71:8c:57:47:a0:f7:f8:1b:c7:bb:83:
71:a6:5d:b9:24:26:26:85:68:e1:36:95:f5:3e:37:83:05:7c:
1f:94:97:3f:0e:25:3b:8b:aa:c3:a5:45:07:c8:a1:4d:de:43:
29:3f:2a:79:75:4e:3d:df:04:b7:b8:35:99:d0:3a:96:9f:40:
69:7d:8e:92:bf:ca:74:c0:8f:76:86:f2:ee:a3:45:fe:fd:9b:
9c:cd:57:d7:e6:21:61:16:8c:c6:80:5f:d7:47:50:33:97:b9:
b7:62:b1:21:f5:2d:f0:be:00:7f:66:28:a1:bf:ad:f2:10:d2:
07:81:44:32:63:f9:1f:a3:d2:79:2d:d5:c7:e1:fd:c2:7d:e1:
66:ea:65:b6:d5:93:6e:f9:4e:dd:04:fd:9a:89:ff:67:ea:73:
fa:fe:a3:14:49:43:92:74:46:c3:fb:8b:68:de:85:cd:d3:2a:
31:0c:d6:9f:a1:0c:14:64:60:5e:48:8c:d1:7b:b5:2c:0c:fd:
68:53:0b:db:f7:f9:cd:fa:a7:c4:e8:99:10:06:c2:92:fa:c0:
8d:38:70:fe:89:3e:4c:16:f7:1f:1d:e0:c7:15:77:bc:8e:03:
18:41:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:08:02 2026 by rpki-client