Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier: SyTtJhTVU54Jm+zZMOrCCKUVqck8h7LpU45f8PqWeIE=
Subject key identifier: D3:3A:44:BC:07:E7:40:B5:93:A4:05:D5:1D:FD:65:E8:EE:F8:67:A6
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 019CAD59E8564518A7C6722F4902AB41EE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: HwzAtGQJF/DF5ecFNDXoBqVt/YDv73Uq9JHaEXUExNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e8:56:45:18:a7:c6:72:2f:49:02:ab:41:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=d33a44bc07e740b593a405d51dfd65e8eef867a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:c2:21:58:60:77:3a:f0:63:3d:7c:30:bf:
ee:7b:1a:fd:91:43:56:a6:5a:1d:e0:5c:4e:83:f6:
1b:25:30:29:ae:e0:23:03:4c:63:4b:78:76:72:b5:
51:d6:a5:fc:ba:4d:5f:88:bb:3b:ba:26:c8:90:58:
02:81:ce:de:55:d9:06:37:0b:88:39:08:43:83:16:
11:42:eb:4e:4a:b6:69:c3:d5:00:75:1f:b8:3c:12:
1e:05:80:c0:fb:fb:c8:f5:95:ff:ab:38:96:dd:33:
ec:b0:14:7f:69:9b:a3:0b:1d:9a:e1:f3:c7:27:86:
6d:c1:ea:6f:ce:51:6b:2d:7c:ea:dd:63:cb:d6:af:
a0:5b:0d:12:a8:c3:2c:1c:9d:4a:73:14:73:c1:11:
a0:69:df:06:eb:35:78:0d:77:a5:74:6e:fe:0b:53:
99:a3:e5:0a:9e:b2:0f:11:88:c1:e3:ea:8e:da:75:
85:32:e9:c7:0c:b4:9f:19:8b:b9:59:ed:80:c3:27:
af:76:bf:97:30:4b:b8:6e:df:96:e5:6d:69:c6:e1:
8b:a0:33:cb:fa:98:a1:3a:10:2f:2d:dd:de:f4:c7:
f5:e4:d3:fd:d5:1d:66:cd:4b:e0:0e:17:05:6a:7b:
90:53:c2:3d:78:8b:ea:9d:c2:3c:20:4c:57:10:0b:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:44:BC:07:E7:40:B5:93:A4:05:D5:1D:FD:65:E8:EE:F8:67:A6
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:22:be:21:53:36:7a:6d:99:f6:8b:4b:b8:64:63:ab:70:22:
6f:44:02:ce:77:e8:b1:2c:f1:c7:cc:2e:45:04:04:e9:21:ef:
57:70:56:2f:43:9b:a1:5b:9b:79:a9:75:07:1d:b2:c0:5b:4c:
0c:4d:fe:d0:2a:50:50:37:2b:37:04:96:c7:b3:5a:72:8d:3a:
80:b6:15:81:5b:3c:c1:c7:0a:a9:8c:aa:6a:d6:80:0e:1b:94:
c7:56:dc:0c:83:16:81:be:96:6d:52:8d:a3:0a:ca:72:78:29:
36:da:bd:be:d3:a0:c2:ca:58:32:b8:08:3e:6c:b7:a0:39:fb:
08:dd:56:04:e1:88:79:25:0c:ad:55:b5:aa:a5:eb:6c:de:2a:
80:16:4a:51:21:d0:84:84:49:4f:be:16:8a:ec:b8:2a:24:99:
b7:9d:37:bc:4f:34:75:d4:e7:15:77:ea:16:78:f3:36:40:5f:
85:10:e5:10:ef:2c:1c:32:1e:a3:c1:be:dc:21:8e:db:4b:81:
67:dd:78:a8:23:0f:bd:00:85:6e:f0:39:46:68:66:71:f1:c6:
b8:2b:49:ff:3c:cc:9f:4e:55:bd:14:95:b9:71:4f:8c:77:b9:
95:03:a4:55:56:5a:11:ce:d8:ba:48:c2:b0:46:23:dc:44:ff:
db:11:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:33 2026 by rpki-client