Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.mft
File: BuAmhMNXg8UA4dKsbcf79QQZpsI.mft (raw, json)
Hash identifier: 2XIqk+lYZEL044c/TViikjoGqaPYnPdopYuI/r9kROI=
Subject key identifier: 4A:4F:79:14:D3:CF:84:4B:B2:0F:7D:68:E7:77:40:57:04:1D:32:03
Authority key identifier: 06:E0:26:84:C3:57:83:C5:00:E1:D2:AC:6D:C7:FB:F5:04:19:A6:C2
Certificate issuer: /CN=06e02684c35783c500e1d2ac6dc7fbf50419a6c2
Certificate serial: 01A0CD48050B2D21F4566D0673E9C8FE3887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuAmhMNXg8UA4dKsbcf79QQZpsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.mft
Manifest number: 88
Signing time: Wed 23 Sep 2026 08:00:44 +0000
Manifest this update: Wed 23 Sep 2026 08:00:44 +0000
Manifest next update: Thu 24 Sep 2026 08:00:44 +0000
Files and hashes: 1: BuAmhMNXg8UA4dKsbcf79QQZpsI.crl (hash: p2L6psQgv4zC6sc/rbdGqIJceqJ1/CEnK1l8v5EbeE4=)
2: gdbsl_4MPT9qzaL3iFIYYdb2b_k.roa (hash: +8rhGszZ9hRWEkJZoQcBXPXHR+tIlz+/2vYql3QPVGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuAmhMNXg8UA4dKsbcf79QQZpsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:05:0b:2d:21:f4:56:6d:06:73:e9:c8:fe:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e02684c35783c500e1d2ac6dc7fbf50419a6c2
Validity
Not Before: Sep 23 08:00:44 2026 GMT
Not After : Sep 24 08:00:44 2026 GMT
Subject: CN=4a4f7914d3cf844bb20f7d68e7774057041d3203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:23:14:52:c2:75:9d:85:7d:83:5f:bd:c4:
6d:e7:6a:41:94:aa:06:66:ae:11:95:d7:0a:a3:92:
6f:8a:2e:fe:75:d5:1f:5c:91:a2:c1:8c:89:a7:5a:
1f:8d:94:68:b7:09:8e:f5:5a:24:c1:d2:a6:42:ce:
67:d8:f1:21:38:ae:a3:ed:38:56:fc:13:0f:82:af:
9a:69:8b:8a:c8:5f:68:00:aa:45:61:ba:a4:b7:62:
38:c7:a1:1c:67:4e:73:e4:ba:f3:26:c1:0b:4d:3b:
5f:b6:e1:15:8d:38:8d:32:ec:f1:92:23:a8:67:6f:
63:a1:7e:f7:d9:b9:70:48:2b:2b:22:90:e7:69:1b:
92:66:13:e6:8b:81:9b:b9:de:5c:c1:5f:ca:4a:0a:
1e:87:e0:04:93:9a:b3:5f:53:a8:d5:e9:30:e9:cd:
0d:27:7e:de:90:c4:1f:00:90:98:70:a7:3c:9a:76:
d7:08:54:7f:01:2e:4c:0f:ea:2a:c8:e5:ab:e1:9e:
54:a4:7a:e2:07:ab:7b:a7:eb:89:8c:5f:5c:a9:ef:
d6:66:98:23:15:bd:05:45:c7:93:9a:c1:55:25:04:
34:f0:e7:27:c2:2f:c6:6f:be:ca:c9:8f:bb:b3:96:
10:26:a8:be:49:d8:a0:a8:dd:ba:b1:c4:2b:ea:82:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:79:14:D3:CF:84:4B:B2:0F:7D:68:E7:77:40:57:04:1D:32:03
X509v3 Authority Key Identifier:
keyid:06:E0:26:84:C3:57:83:C5:00:E1:D2:AC:6D:C7:FB:F5:04:19:A6:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuAmhMNXg8UA4dKsbcf79QQZpsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:f8:fc:b9:37:5d:a9:7e:d0:f3:e1:eb:92:b8:bb:2f:65:
d2:4c:86:b8:ae:cb:83:d9:d0:fa:9b:87:77:4a:ca:df:e7:09:
6b:84:f0:e2:aa:12:af:3e:3a:3f:00:e3:80:56:e8:35:2c:7b:
67:20:65:5a:0c:0b:54:c6:76:9d:44:00:f9:bb:40:f6:bc:22:
f2:d1:e7:b5:e8:f7:23:22:37:ad:ae:7a:d5:a4:ad:77:20:4f:
1a:2b:4e:b8:d7:2a:b2:12:a2:49:45:38:ee:62:86:28:e1:3a:
ec:2e:f6:33:d3:18:b2:1c:90:f4:fc:6a:dc:d0:5a:19:47:e5:
6c:8a:36:41:2c:cd:90:98:eb:07:ad:d3:43:ae:47:0a:07:a6:
4c:6a:ee:d8:44:f1:4c:39:41:1a:6b:57:2b:55:69:bf:90:d9:
64:10:d8:4b:0e:61:05:75:5a:af:0f:75:e2:1f:80:4d:0e:32:
2a:27:a6:b6:a7:5d:5e:9a:fc:e9:0f:5f:8f:06:73:26:51:1d:
ce:ad:7d:80:6c:d8:b2:3c:e5:03:c8:97:60:d3:8b:7f:7f:27:
d2:03:0d:e9:94:74:85:91:c4:68:11:5a:94:1b:2a:22:4a:89:
01:08:f1:4f:3b:a4:d6:4e:15:cb:9b:c4:56:9b:d9:f5:eb:e5:
e1:48:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:02 2026 by rpki-client