Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier: LpvMSNcrWZ+01NJpLcETHkVCXMaeu8FeDxmdmCmI5tA=
Subject key identifier: 87:BD:74:06:B3:D7:54:BB:E1:52:FE:01:80:85:B8:9F:B4:62:43:32
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 019CACB4AC05782D88E868675CFB7E26E7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:00:47 +0000
Manifest this update: Mon 02 Mar 2026 04:00:47 +0000
Manifest next update: Tue 03 Mar 2026 04:00:47 +0000
Files and hashes: 1: 7JIJlTfBX4PS77oE0Mx0OejSM24.roa (hash: fNa36vATsrsor3PYEeM7hTNfoNAesQKtpUagqEla5bc=)
2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: C5reXxrzr1gH6+pS1mqksD26uWe5Z6ZEnEhMN/eGhN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ac:05:78:2d:88:e8:68:67:5c:fb:7e:26:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Mar 2 04:00:47 2026 GMT
Not After : Mar 3 04:00:47 2026 GMT
Subject: CN=87bd7406b3d754bbe152fe018085b89fb4624332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:3e:a4:08:c2:a7:28:30:7f:65:6f:7c:56:
86:34:d6:8a:15:ea:ca:c0:53:aa:56:5e:12:92:77:
44:bc:e9:3c:b4:f7:eb:9e:1a:f4:2a:a1:0a:c4:b5:
7f:28:8a:b0:2e:b1:ee:65:5d:78:e9:4c:91:a8:80:
ce:3b:1b:c4:57:43:8c:2f:cc:39:e0:af:69:ff:92:
05:ba:06:95:9e:b2:55:cd:71:44:f4:45:3d:29:31:
0f:4f:8b:7c:fe:d3:9b:68:5d:e6:76:27:17:e2:c3:
5b:0c:15:cc:ee:dc:f0:98:0e:1c:a3:32:10:8f:02:
f5:3e:a9:86:42:ff:7a:2a:d1:01:7f:12:4b:86:d8:
8e:95:a0:16:36:48:f9:dc:66:7b:5d:08:9b:78:57:
8f:09:a6:fb:f8:ea:55:b2:2c:45:5d:cc:78:df:78:
c6:06:ae:8c:c8:6d:ea:b0:c4:c1:79:ec:9e:8f:18:
8f:5d:7a:1c:34:e6:d8:5e:f5:f3:67:de:46:d7:68:
a1:73:a3:23:8a:89:41:c2:be:f6:5a:bf:f8:4b:44:
aa:9a:08:f9:00:d2:ec:9b:c6:4e:d5:9a:d2:dc:26:
c9:eb:73:ab:a3:7f:0d:af:9a:d3:b5:64:a2:73:f1:
16:7a:c0:aa:f3:7f:89:f2:89:79:96:66:a6:7f:bb:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:74:06:B3:D7:54:BB:E1:52:FE:01:80:85:B8:9F:B4:62:43:32
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5d:d7:89:0c:71:06:b7:7c:ff:77:64:6c:60:82:f1:2b:1a:
56:86:37:0a:e1:eb:7f:13:b5:22:8b:e9:c5:f6:77:fd:62:21:
71:07:79:56:64:19:f5:b4:fe:4a:8a:ef:14:1d:bc:07:76:6e:
c7:03:13:56:ce:12:c0:12:cc:91:64:7e:58:87:c2:11:2c:26:
30:ee:2c:a6:fb:c9:81:b8:f3:82:9f:4f:41:55:b1:ff:9c:b1:
a5:86:f1:43:c0:58:53:0c:34:e2:26:49:2b:97:c1:cd:09:19:
f4:bc:ba:19:cc:9a:92:b2:96:5b:87:6c:2d:57:f6:5b:0d:63:
fb:14:54:66:38:67:e6:37:87:5a:dd:76:3e:39:46:1a:47:44:
a7:82:b2:07:00:b9:00:86:25:83:ec:f5:75:53:d4:43:23:84:
6d:64:ce:d3:6d:19:cd:bd:43:ec:f6:40:fa:9e:08:e0:b4:44:
dc:b9:d3:23:6e:76:d9:c7:ce:5f:c6:2e:4e:c1:76:37:1e:cb:
b3:76:d4:92:af:5e:b5:e6:ea:66:66:0b:32:01:d9:24:5a:be:
21:25:d4:1b:88:b3:ea:09:99:b1:76:5f:12:6f:ac:61:b4:c2:
52:96:17:39:5f:df:ce:b2:fe:9a:77:6d:74:38:09:5e:f1:67:
94:93:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:17 2026 by rpki-client