Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: cpJc9RJcjn4/jpABGYQLZ6SHitqRKr20L1n7Dbnhnec=
Subject key identifier: 4A:44:E5:7E:44:38:28:C8:39:8F:0D:CB:82:7B:35:47:BA:80:C6:36
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019D9BBE8A3408B146135F5625E08A5C6D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 0861
Signing time: Fri 17 Apr 2026 14:00:48 +0000
Manifest this update: Fri 17 Apr 2026 14:00:48 +0000
Manifest next update: Sat 18 Apr 2026 14:00:48 +0000
Files and hashes: 1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: AI17gTmKb9pElMTGvvwJtDCAPob+fXmU0Bi9LwWC4zs=)
4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:8a:34:08:b1:46:13:5f:56:25:e0:8a:5c:6d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Apr 17 14:00:48 2026 GMT
Not After : Apr 18 14:00:48 2026 GMT
Subject: CN=4a44e57e443828c8398f0dcb827b3547ba80c636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:75:74:7c:86:27:d8:86:ff:2e:9e:bf:a7:
40:59:6e:ae:60:ad:93:4e:aa:b0:81:8b:70:d2:e7:
b9:bc:d5:0a:11:c2:ee:28:03:2d:42:34:d2:93:92:
ba:2d:56:d8:aa:a7:5b:71:5c:a3:96:94:d9:b8:36:
70:dd:30:b6:53:70:26:55:70:b3:2a:22:8d:91:e8:
e5:13:c5:f3:d5:a2:f1:c5:2c:14:12:8b:92:bb:8d:
33:4d:df:a9:09:c6:06:5a:8a:8b:4a:0b:84:f0:d7:
6b:16:21:e1:df:37:8a:d2:57:d6:aa:f0:c2:87:b4:
65:75:1a:d4:d1:f5:69:0e:d8:23:7f:e4:df:56:57:
30:ca:bc:36:70:3f:fc:57:71:29:49:c9:58:09:7f:
f9:af:98:44:c7:b4:0b:13:ad:93:c8:6a:95:32:09:
74:c5:8a:05:55:c4:c8:c5:de:5f:55:48:fc:0c:dc:
17:a7:1c:ff:43:21:00:01:e2:bd:e9:0c:11:3f:0d:
23:17:8f:23:fb:79:97:88:a1:bc:bc:d6:05:07:27:
b6:da:7c:8f:b3:d5:26:3a:7d:d8:de:3a:d0:83:ba:
74:bd:10:3c:a7:12:82:d3:c0:25:ed:eb:7f:68:0e:
4d:1c:fe:75:d5:e8:69:5f:8d:9b:45:33:5f:9e:75:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:E5:7E:44:38:28:C8:39:8F:0D:CB:82:7B:35:47:BA:80:C6:36
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:87:5d:2b:f5:6f:e6:2e:a7:54:4f:94:ee:15:08:fb:14:ab:
66:ca:0a:08:44:9c:5a:74:21:17:b5:af:d2:92:c4:20:60:d4:
d2:b8:33:93:4a:3a:25:b3:24:ca:7c:fb:4b:37:1f:3a:9a:b5:
7c:3e:a8:57:40:ed:34:09:ac:2f:73:00:1f:77:73:6a:8f:fd:
48:27:29:5f:90:c3:5f:ba:ad:1c:56:40:cd:b0:a3:d2:b3:c7:
12:a4:33:3c:d4:48:ac:b0:37:f8:68:fa:6d:2a:ab:00:42:b3:
6c:3f:07:0c:37:0f:58:f6:a2:16:c7:98:f3:c6:2a:1d:45:03:
f1:d9:21:9f:f2:6c:1d:9f:11:f9:d8:ec:60:21:36:15:87:2f:
37:8f:1f:8f:77:cd:f9:12:b1:89:6a:6f:ee:90:8c:8b:af:e3:
d5:fb:3f:6e:f0:88:89:4a:6c:92:37:da:96:81:ea:f7:15:87:
86:1e:15:e0:df:1e:9f:93:25:58:39:9a:3d:2c:32:4e:ea:26:
8a:e6:68:ac:99:13:ce:93:40:e6:fc:c3:0f:3f:86:f3:c7:bc:
c4:02:83:66:8c:b8:01:5c:a9:f9:6f:57:96:c9:b3:69:d8:7b:
09:49:5d:dc:5e:79:d3:2f:e6:d7:6d:cb:9c:ef:eb:43:4e:8e:
39:fc:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:20 2026 by rpki-client