Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: u5yT5dqRMwTOvAiW0vCbZ02yAD7tXAiBI0B+v/GC41E=
Subject key identifier: A1:5D:39:FE:9C:D5:3A:B7:92:BD:CA:7F:83:BC:AC:60:CC:7A:FC:5C
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019EBF235A635EFA5625C28DE86BF71E3496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0AF5
Signing time: Sat 13 Jun 2026 04:00:25 +0000
Manifest this update: Sat 13 Jun 2026 04:00:25 +0000
Manifest next update: Sun 14 Jun 2026 04:00:25 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: aDAUDEdrZcfY+auYkZXKE2btlJWa23sdF+z/y5ZjmdA=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:5a:63:5e:fa:56:25:c2:8d:e8:6b:f7:1e:34:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jun 13 04:00:25 2026 GMT
Not After : Jun 14 04:00:25 2026 GMT
Subject: CN=a15d39fe9cd53ab792bdca7f83bcac60cc7afc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:24:90:28:9f:bc:1d:45:02:90:0e:a5:3b:
f3:59:d0:9c:4e:c5:21:6e:f1:e4:3d:d1:e3:b3:93:
8e:04:04:20:91:0c:8d:0f:ec:13:36:24:e0:ec:66:
28:77:09:8b:c2:09:b4:cf:78:07:b2:0f:c1:02:fc:
e2:4f:fb:fa:16:6d:9c:74:a1:83:6f:d2:59:9c:aa:
0b:67:9a:79:a3:e7:00:50:36:5b:1c:7c:0f:a2:70:
d2:20:fb:5d:75:44:f1:0d:89:bc:cc:5e:15:38:d8:
d3:11:70:fd:e0:4f:e5:da:e7:53:6d:7d:0f:e2:63:
6b:63:48:3d:77:b1:2b:06:9b:63:f2:8d:36:a9:40:
e0:21:e0:41:46:b1:f6:ac:4b:3c:e9:e3:40:a2:01:
17:9e:eb:10:b7:6c:43:0c:a5:7c:b3:40:4c:e1:d3:
0e:0c:3f:22:f5:72:42:a9:f6:4d:31:e6:f5:5e:a7:
f6:17:cc:ab:07:aa:97:6a:a4:1d:e6:b8:87:af:eb:
4a:09:34:76:ec:ec:b2:38:e5:b6:ce:e4:bc:0e:9d:
b7:af:15:e2:f3:0c:d7:47:f3:12:d5:26:38:25:3b:
79:cb:d6:07:d1:ac:67:f5:70:fe:84:ba:8b:63:44:
61:80:80:27:ed:fe:21:72:d9:5d:c0:5c:25:41:48:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:39:FE:9C:D5:3A:B7:92:BD:CA:7F:83:BC:AC:60:CC:7A:FC:5C
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:37:75:c2:8e:24:3e:07:71:73:88:e9:d9:da:7c:6b:c8:01:
23:4f:e1:e5:75:71:90:46:fd:6d:2a:c7:e2:9f:f9:dd:fa:a0:
8a:46:64:8e:16:51:d5:25:d7:c0:7e:f1:c9:91:ab:43:b8:76:
4a:15:c8:b8:f9:b2:da:cf:cd:69:0d:69:c9:ba:2e:5a:51:a8:
46:ba:89:e5:80:3b:2f:bc:8a:c7:31:58:16:dd:c3:7a:45:7d:
01:5d:a2:79:7d:4e:5b:98:80:6d:74:46:2b:ab:18:76:2a:6b:
14:1f:c2:5c:42:78:07:04:e1:05:e8:51:a6:1c:d1:97:80:c3:
14:51:e9:93:08:95:8d:95:9a:3a:c7:87:81:f7:71:81:ce:9b:
dc:78:29:db:6b:a8:45:59:93:6e:47:17:1d:c9:22:6c:8f:40:
d6:d3:5a:a2:36:f7:32:ca:06:68:08:95:e8:f8:4e:6d:90:c1:
99:70:b4:2d:38:68:6e:b9:aa:60:45:f3:e8:8b:38:c1:bf:3c:
aa:60:c2:ff:00:37:60:c4:96:2f:1a:20:66:9e:c4:22:84:2e:
3f:e8:0c:42:19:5e:ff:17:2a:d9:12:81:a9:94:94:ec:ee:84:
7d:bb:28:ea:22:71:41:1f:53:0c:f9:f0:72:3b:c5:55:5c:64:
b2:88:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:12 2026 by rpki-client