Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: dn1bB1dc8b+qCBo4G4a4vKUD60g16vkU0U7NrvxLhVo=
Subject key identifier: 67:64:D3:BE:4B:B0:53:BC:85:09:CC:95:9D:29:E9:C1:97:FA:10:03
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019CAE3585F14E3C9766133B36A47EEB9C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 07E6
Signing time: Mon 02 Mar 2026 11:01:09 +0000
Manifest this update: Mon 02 Mar 2026 11:01:09 +0000
Manifest next update: Tue 03 Mar 2026 11:01:09 +0000
Files and hashes: 1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: 7v2z3FAZ9bDnnuXNpQCpRPRA4BeXU3ihSYQgPl90l1k=)
4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:85:f1:4e:3c:97:66:13:3b:36:a4:7e:eb:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Mar 2 11:01:09 2026 GMT
Not After : Mar 3 11:01:09 2026 GMT
Subject: CN=6764d3be4bb053bc8509cc959d29e9c197fa1003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:cd:68:c7:b4:16:ee:e1:52:a8:8e:c7:d5:
ab:ae:49:5a:ed:d9:f3:3f:41:bb:90:b1:21:c6:0b:
0b:f7:37:85:35:60:d0:54:b8:d4:2f:6c:cf:c0:20:
b4:6b:a3:c4:2a:de:4f:31:3f:28:b3:4b:9a:d5:82:
0a:da:5a:6b:8f:46:31:19:fc:1f:f8:d5:15:77:69:
88:cc:2f:84:98:6f:6b:7a:65:d4:58:98:13:fc:64:
95:9a:b9:09:d9:22:06:c6:8b:42:9a:bb:2b:28:34:
ef:15:4c:8e:50:9b:ff:67:4e:ac:47:7f:42:10:a8:
1a:1f:38:96:f6:70:ed:80:67:06:51:e5:1f:22:75:
b2:07:84:68:16:78:59:fd:e2:c5:19:1e:d7:3c:d4:
17:19:8e:f8:54:41:22:47:92:fd:42:84:52:57:6e:
b7:7f:5f:1d:5b:58:fd:75:50:6c:a7:dc:c4:6a:f9:
3a:ac:5a:2f:b4:e9:9a:a9:f2:99:fd:d8:8a:80:28:
bd:a4:05:f3:ca:69:d5:bc:75:14:92:96:8e:3d:23:
c1:0c:69:e3:de:4d:16:2f:41:c7:51:5f:61:ce:92:
9a:76:95:18:10:a8:e8:a6:e7:98:32:28:d9:eb:38:
c4:41:b5:70:b2:a0:42:50:f9:55:e3:0d:d8:42:6b:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:D3:BE:4B:B0:53:BC:85:09:CC:95:9D:29:E9:C1:97:FA:10:03
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:fb:75:d4:e8:f9:f9:97:a9:0a:5c:2a:a2:d6:89:51:3f:
ba:29:b9:fe:65:65:66:aa:b3:e7:24:e5:43:e9:6d:c6:0f:74:
44:78:88:31:d1:18:38:ca:f2:21:92:a6:b2:e9:9b:71:10:5f:
11:a8:8e:bb:e9:14:16:fe:b8:92:52:ca:61:93:6f:7e:0e:01:
86:89:5f:37:d0:66:85:c0:e9:a6:c3:45:d9:30:3f:df:6a:e7:
d2:fc:76:80:ca:4f:60:e4:ae:30:c0:3d:08:ec:08:fc:51:fd:
86:a9:31:bc:c7:c7:0d:21:af:e3:63:74:9a:93:cf:16:9e:eb:
23:38:e7:d3:f4:c7:65:48:37:2b:89:0c:5a:3c:b7:67:35:0e:
10:a2:ac:70:57:8b:a0:6b:45:66:32:c6:3e:cc:6a:99:c5:b0:
aa:13:3f:09:d4:c0:ee:6a:b2:3b:c3:8c:0c:8b:1c:16:80:fc:
a0:c6:68:9b:47:f8:18:df:7b:6e:da:cc:c0:f9:fe:46:2e:1c:
3c:9c:69:49:9b:91:38:5f:dc:e5:a3:fe:ad:49:ab:bd:eb:22:
c9:fc:32:4d:cf:e5:47:ff:6b:a6:f7:05:39:c9:b8:c3:f1:77:
fc:55:04:f2:2c:b5:dd:cb:f5:d4:d4:c1:e9:d4:4f:32:b2:28:
67:2b:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:50 2026 by rpki-client