Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: 32/QMnZy97zSLe/X71HVa76qLXQwiTsRmwhEjrxKK6o=
Subject key identifier: D7:F8:48:40:3C:03:C1:4B:EC:0D:53:42:09:9A:7E:D4:E9:B2:9C:B9
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019D9B880A0A8EF94FCC11056B0CEB740004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0A5E
Signing time: Fri 17 Apr 2026 13:01:17 +0000
Manifest this update: Fri 17 Apr 2026 13:01:17 +0000
Manifest next update: Sat 18 Apr 2026 13:01:17 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: qHQ+1jVXLL5qmXXN6oJRfBxWDR2shAG85BgMKGojlxY=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:0a:0a:8e:f9:4f:cc:11:05:6b:0c:eb:74:00:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Apr 17 13:01:17 2026 GMT
Not After : Apr 18 13:01:17 2026 GMT
Subject: CN=d7f848403c03c14bec0d5342099a7ed4e9b29cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:01:75:9c:29:5c:f3:88:fe:5c:a8:7e:76:
9a:07:99:8f:6c:1a:9b:34:79:38:32:16:b3:2a:db:
84:af:e8:a4:a5:ab:00:31:72:5e:33:27:6e:a7:aa:
3c:02:ee:c5:eb:fb:80:d4:e3:6a:a5:b0:d2:b5:c6:
b6:33:4f:b1:ef:92:c7:dd:eb:62:16:f2:2a:da:66:
99:53:71:a4:6e:eb:26:b6:8a:be:d7:e7:6b:d7:b9:
06:de:25:05:cd:13:a6:35:ae:b5:b4:2a:0a:b2:2b:
94:db:27:3c:c8:38:f4:a2:3c:3d:0e:d5:5f:4d:d7:
f9:02:90:58:af:4c:4c:1d:70:3e:1e:a9:71:66:1f:
20:52:26:c3:cb:cb:15:a6:3d:94:f7:d3:e3:e4:dd:
cf:8e:74:0a:20:f9:0b:c6:94:ab:bb:b8:ff:34:ef:
f9:77:6d:b9:7a:a8:67:61:77:50:90:f4:91:2c:14:
4d:1a:d7:8d:c5:49:55:f1:86:bc:c3:99:b3:db:cc:
12:59:0f:e3:9a:a4:8c:84:94:77:81:00:1d:6e:5d:
77:c6:3d:b3:38:df:c5:39:aa:86:52:c9:b6:f1:ce:
54:64:44:dd:76:7f:86:2e:b0:9b:b5:fe:41:83:5f:
1d:0c:58:7e:1a:c3:5e:97:66:7d:82:e2:5f:d4:0d:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F8:48:40:3C:03:C1:4B:EC:0D:53:42:09:9A:7E:D4:E9:B2:9C:B9
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6f:6e:12:14:fe:70:48:bd:49:d1:5e:06:68:f0:e5:e3:f2:
0e:3e:9e:cb:f6:a1:50:2f:cc:5b:25:6e:1b:6a:31:a4:ab:de:
08:e9:2b:2f:89:24:14:91:85:83:c0:6b:db:4a:ce:7c:10:95:
62:3c:b8:24:6f:55:ad:41:9a:2d:8d:f6:d6:39:5d:b3:73:bb:
5e:15:5d:12:7c:97:38:22:b2:90:54:db:8a:8b:25:57:15:24:
02:3c:ab:4b:d7:c6:1f:f8:1f:06:3e:21:f9:ca:41:4c:66:d8:
08:84:4e:fe:10:ed:46:a7:12:88:26:96:70:8d:f7:23:65:c6:
90:d8:77:3f:9e:8a:6b:8e:d7:fb:d4:21:ba:a5:f0:20:d7:d3:
e9:98:5d:56:72:4f:2d:c3:5c:3a:2f:28:5c:7a:ab:30:3c:05:
b4:75:ba:c5:ea:ae:a5:1b:39:cb:5a:13:01:6e:c8:2b:0a:ce:
4c:c0:50:f0:f7:db:b7:de:58:50:3a:aa:13:d7:fd:9e:65:53:
e3:f4:7f:e3:04:a8:2f:ef:67:cb:35:43:a0:70:6e:88:0d:6d:
ae:ef:dd:47:e2:94:23:1c:01:d7:9d:1c:91:1f:22:7a:c5:cc:
87:98:19:6c:d3:fc:72:98:aa:bf:07:95:d0:cf:9b:f1:12:04:
b8:64:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:45 2026 by rpki-client