Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: Ff9I8VHdoJWxPN5cNdYfDLmEJ27KNEnoxrrT0ai3prA=
Subject key identifier: 4A:1A:8B:01:B5:CD:AB:1F:3D:8F:22:64:67:EF:2C:99:6E:E1:77:AE
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 01A0E99BF87B2631151F68A8409968154D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 0A17
Signing time: Mon 28 Sep 2026 20:01:48 +0000
Manifest this update: Mon 28 Sep 2026 20:01:48 +0000
Manifest next update: Tue 29 Sep 2026 20:01:48 +0000
Files and hashes: 1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: J/5RangIDs5jcOa84RH24XjD/3vMk+a1Oq7duy88fTo=)
4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:f8:7b:26:31:15:1f:68:a8:40:99:68:15:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Sep 28 20:01:48 2026 GMT
Not After : Sep 29 20:01:48 2026 GMT
Subject: CN=4a1a8b01b5cdab1f3d8f226467ef2c996ee177ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:89:d0:e8:6d:1f:f8:78:66:1f:60:4f:68:
18:4e:11:80:db:61:5d:e9:58:e5:3f:82:95:b1:39:
80:11:40:20:3a:60:a0:49:1a:e5:76:ab:e0:a0:90:
0e:ab:14:dd:fa:bf:c1:be:30:82:84:47:26:01:8f:
08:68:21:9e:3a:68:ae:b2:a0:17:b4:2d:96:41:e2:
51:6d:1f:dd:ec:3d:76:af:fa:ef:e6:c9:c3:de:60:
10:a7:3c:77:81:7f:ec:e6:35:e5:1c:3f:1e:c3:d2:
1b:13:48:a7:44:64:3a:1d:26:b3:9a:5d:1f:8b:8a:
38:f1:eb:a3:f3:63:52:da:b3:13:f7:f7:1e:3d:31:
d0:91:18:55:23:32:2b:07:93:01:09:ce:ef:68:8d:
60:8e:6d:72:10:65:11:50:c0:d6:73:f8:68:c3:c1:
2a:c3:b3:84:3d:07:a6:ed:87:9e:24:a5:58:8e:7b:
91:da:bd:6d:ef:7a:89:99:49:2a:a4:fb:65:e9:76:
60:4f:fc:af:ae:25:3e:6f:74:05:57:b7:23:bd:61:
d0:9c:29:cb:5c:e5:48:54:6f:98:5a:98:be:16:46:
65:f0:57:54:04:86:3b:18:c8:39:d5:ab:b3:66:78:
8f:26:9a:e9:fc:32:ce:aa:43:35:cd:1f:94:ef:0e:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1A:8B:01:B5:CD:AB:1F:3D:8F:22:64:67:EF:2C:99:6E:E1:77:AE
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:83:f0:d8:f8:93:e1:e5:03:7d:b3:25:92:e1:68:4b:b5:
72:d9:24:5f:3e:9c:46:21:f6:23:38:8a:1e:3e:26:db:16:7d:
63:7e:39:55:ba:6d:4d:d9:a2:6c:1a:3e:af:6e:f3:d6:25:d1:
25:98:1a:ee:bb:99:f9:c5:73:b5:6b:80:39:eb:ae:91:0d:e5:
bc:02:15:3b:39:09:f5:b5:d7:02:1e:0f:fb:88:c4:12:37:de:
02:8d:b3:03:d4:da:f6:30:c3:37:d6:1a:47:d3:64:22:84:9f:
00:1b:5d:ca:85:15:3e:a3:9e:45:a9:dc:65:f7:15:c9:4b:f1:
e4:ad:98:66:4c:c6:e8:60:38:06:20:d3:dc:52:f8:9f:d2:6e:
b0:08:6c:db:85:f8:10:e1:31:bb:e3:8a:bf:f9:91:58:a4:1a:
bd:89:02:05:bb:39:8a:4e:62:bd:1c:c1:77:84:98:a8:34:2e:
9d:91:6f:02:91:92:ac:f3:d0:3c:f7:cc:df:f1:4a:f7:ba:0d:
d8:6a:c9:98:0a:76:fa:14:6f:af:55:41:95:f7:01:df:39:09:
fd:46:8a:7b:8d:ce:82:eb:73:56:e6:71:b9:55:4d:0e:c7:19:
8d:09:4b:78:8d:ce:1b:c4:32:32:3d:09:36:e9:ce:d1:22:5f:
1e:0e:8f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:35:19 2026 by rpki-client