Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: 6IqmlOs4X9zkPT1tUXAYTCd/vtXNxlTPspWF+LNHrRw=
Subject key identifier: 5B:A9:2D:7A:CA:BA:DC:5C:07:4B:CD:FB:26:5C:09:99:C6:55:35:B6
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 019D9A0723D1AC9D171597660AB4E430C2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 1777
Signing time: Fri 17 Apr 2026 06:00:52 +0000
Manifest this update: Fri 17 Apr 2026 06:00:52 +0000
Manifest next update: Sat 18 Apr 2026 06:00:52 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: opbtUM6H9bW6HMDXRno9Ur7yRR1D/6cIfahD5ZPQ5AU=)
2: lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa (hash: CREAI2bwdzAy9LxcYU7uoPR2XEXd4CUfcjb+D4ZYEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:23:d1:ac:9d:17:15:97:66:0a:b4:e4:30:c2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Apr 17 06:00:52 2026 GMT
Not After : Apr 18 06:00:52 2026 GMT
Subject: CN=5ba92d7acabadc5c074bcdfb265c0999c65535b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:25:8e:69:72:82:0d:1b:99:92:33:dc:c5:
d1:c6:e8:45:58:b9:75:09:21:25:2d:fd:8d:f8:6b:
44:97:9c:53:36:75:09:f1:ab:4e:5d:0d:c4:c4:c3:
0a:38:b4:e8:95:9b:52:ce:9b:6d:fc:56:33:f4:db:
6d:ab:5c:ad:ac:a0:6a:6f:b1:1d:66:05:f9:ea:7a:
b3:e3:26:e5:ec:08:cf:da:4c:64:cc:d3:b3:5d:f5:
dd:10:e4:e4:17:e2:8a:68:1d:85:0a:7c:87:11:28:
35:08:15:7b:df:a9:47:f7:9a:34:04:a3:d6:a9:87:
69:f0:c8:11:9a:17:05:48:81:bc:7f:4f:b9:02:d0:
e5:c7:58:f4:3d:48:cb:8a:06:67:ee:73:10:70:77:
28:02:17:74:c3:56:08:0d:00:e8:61:a4:c3:a6:9e:
f9:eb:2d:0a:6d:57:39:38:7f:f1:b6:63:f8:cd:92:
d8:b1:3d:48:60:51:5f:ec:00:19:4e:24:d0:5c:38:
07:89:12:8e:54:9b:1b:8f:62:e5:59:f3:c4:8b:3f:
17:bc:d3:2b:a9:e3:d2:cf:48:da:b0:78:60:39:e7:
e0:2d:ff:de:98:06:7c:bd:e9:db:1a:06:f6:32:dc:
77:a7:f5:ba:0a:9a:92:9d:b0:f0:2b:9a:4c:0c:d5:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:2D:7A:CA:BA:DC:5C:07:4B:CD:FB:26:5C:09:99:C6:55:35:B6
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0b:e2:f4:3c:3f:d5:8f:a5:ab:99:bd:81:4c:dd:51:9c:82:
4c:30:fd:c9:00:7b:71:b6:50:d3:71:35:0c:2c:aa:85:1f:dd:
be:d2:4c:fe:34:1a:d7:4b:b0:b5:9b:96:28:fb:ea:85:8f:37:
12:18:85:15:10:57:9c:ba:4b:2a:ce:65:5e:a2:94:bc:1c:4e:
11:fb:49:aa:c6:fd:fa:2a:1a:68:61:a3:43:86:97:e3:e1:e8:
3f:9c:12:69:5d:1a:d1:14:7e:da:3d:f3:43:e3:e5:06:97:4e:
d7:29:f4:b3:3d:d2:ee:b1:06:8d:32:ba:8c:34:44:4f:53:b8:
2c:2f:56:82:45:14:48:1a:1c:23:44:7a:96:3a:f4:b2:c2:8f:
f7:c5:b9:79:17:70:44:2c:33:ec:60:ba:8b:0a:1a:24:d4:c3:
2e:d9:61:5c:50:4b:07:1a:40:48:8c:97:ae:9d:10:c1:d4:3f:
7d:e9:d4:a5:c8:31:9b:04:58:f1:a3:43:a4:9f:3f:1f:32:db:
a4:ac:84:25:cf:88:e3:9d:33:26:7c:cc:2a:62:e0:db:79:5e:
aa:a2:ca:35:8c:58:b7:84:9a:4e:10:43:98:eb:2f:2b:25:cf:
fb:29:0b:e9:34:1e:19:91:6b:20:35:34:ac:ec:cf:8b:48:c6:
73:47:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:15 2026 by rpki-client