Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: Wxl8TZVKXGFwezHVa8oOHu5Hk2aR53KImDLXfnj1tPY=
Subject key identifier: 9A:0C:7C:B4:1C:90:20:85:35:13:10:C6:BF:55:B3:53:F6:D5:B1:AB
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019CAC1029F27086B312A316F6E4B2913429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 09E2
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: OngtrsoYsm53ZPNMnQwJpoYgk5T+QdnRF1T+6w7vuDU=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:29:f2:70:86:b3:12:a3:16:f6:e4:b2:91:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=9a0c7cb41c902085351310c6bf55b353f6d5b1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:7b:7c:08:bf:5c:0c:d8:54:8a:6c:35:c6:
5d:b7:db:3e:49:9e:79:68:03:f6:c3:68:02:a2:4d:
8e:dc:2c:7f:6a:c4:3e:25:f8:76:c4:6e:bc:aa:21:
f8:27:11:b5:2e:33:88:8b:f4:53:af:b2:34:83:d1:
0c:6f:50:b9:5b:92:ce:b1:78:04:29:cc:29:8b:be:
34:f1:0d:67:1f:2b:31:a9:f2:ea:f7:7c:dd:70:1b:
75:a3:e3:ba:2d:fa:d5:4b:14:a3:e9:bc:08:e4:37:
e4:16:31:46:e5:bd:06:39:bf:40:86:fb:61:68:d8:
94:0b:c6:63:02:33:64:93:24:39:8d:99:84:9a:c2:
40:e1:50:3d:bc:05:81:32:d8:76:45:58:40:ec:7a:
bc:20:e5:95:c8:d2:7c:6c:e3:fb:93:1c:a7:f1:d5:
e3:64:17:ab:4e:83:0f:64:16:ab:2e:bc:c1:d7:88:
9a:1a:6b:1e:8a:1d:3f:c7:87:2f:7c:0c:7e:52:7e:
25:4b:a9:39:56:ce:30:e7:aa:83:99:4d:ea:07:85:
1f:57:ea:bc:26:a4:ae:db:21:c2:af:28:39:43:60:
04:8b:db:d8:8a:f1:aa:ff:2f:94:9b:40:43:e8:3d:
e5:64:66:af:14:5f:69:9c:63:ff:4b:c7:67:37:38:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:7C:B4:1C:90:20:85:35:13:10:C6:BF:55:B3:53:F6:D5:B1:AB
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:69:f0:86:48:4c:75:23:d7:02:bf:22:40:a4:21:c5:66:
6e:5d:e2:e2:9a:12:4d:99:ec:81:6b:30:1f:6d:81:0d:49:11:
65:2c:a7:f1:90:b9:47:96:13:fc:0a:f2:bb:0e:f2:0f:93:73:
17:50:f1:ea:1d:62:bb:f2:43:a9:60:14:0c:a5:37:2e:a3:89:
45:5c:6e:51:56:a3:21:6a:56:96:ea:cf:7c:19:51:e7:07:3a:
67:86:cd:4e:36:4a:e7:f8:20:34:3a:67:2b:9a:89:83:5f:32:
8a:ab:5a:5d:a1:5a:27:97:5b:91:8f:41:c2:22:0a:99:ce:8f:
e7:75:3c:66:fa:f5:54:c6:0c:dc:a0:f2:cf:16:ab:b3:05:9f:
d8:21:58:19:f4:ec:ca:0b:72:3a:09:69:34:02:39:7b:6b:de:
65:0b:b3:91:d8:a9:5d:00:0b:3f:e1:f8:ea:bd:82:9d:5a:ec:
ab:01:95:f4:d0:54:02:1c:db:55:3b:ed:28:77:08:9a:ab:ab:
0c:8f:89:63:a0:4b:29:cf:7e:8d:bf:7e:e8:1a:54:f8:8b:c9:
2c:ae:af:08:a8:b4:83:94:da:7b:79:f5:23:ba:f9:a1:48:4f:
80:cd:6e:a6:94:b4:7d:d7:78:86:ac:d7:e8:2b:6e:5a:0a:32:
35:43:61:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:15 2026 by rpki-client