Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier: vLo2z7fsvBQWA4NbyoUt1KOIJNaK4wkHVctrvhNoMZE=
Subject key identifier: A3:48:9C:32:91:A8:60:71:A2:D7:59:EC:A5:AA:35:C2:DF:1D:A7:60
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019CACB523B5DDB6C0C20301B39ACB2A5197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number: 0183
Signing time: Mon 02 Mar 2026 04:01:18 +0000
Manifest this update: Mon 02 Mar 2026 04:01:18 +0000
Manifest next update: Tue 03 Mar 2026 04:01:18 +0000
Files and hashes: 1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: Oji0ZsBWxj4cCmvK5/oXASgRBXPksJ7UlN34cW5snlo=)
2: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:23:b5:dd:b6:c0:c2:03:01:b3:9a:cb:2a:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Mar 2 04:01:18 2026 GMT
Not After : Mar 3 04:01:18 2026 GMT
Subject: CN=a3489c3291a86071a2d759eca5aa35c2df1da760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:71:ff:e8:52:6e:9e:38:4e:69:c5:79:a7:
35:9f:6e:ba:db:ba:2d:8d:a8:16:88:e9:85:ec:95:
3c:89:17:1d:49:ca:99:5a:13:02:6b:80:82:f9:3d:
a4:82:7f:1d:c3:1e:15:a0:16:22:fc:22:58:71:56:
86:79:b8:39:b9:9c:21:24:aa:4b:bc:2a:a6:78:8b:
c5:62:c9:26:f1:06:00:6c:2c:8a:11:dd:36:09:aa:
8e:46:ce:97:0a:da:25:79:b3:40:aa:c0:57:4a:29:
fd:d3:e9:5b:0c:0e:a3:82:e1:c5:26:3f:40:e7:a9:
ab:90:ab:b6:7c:4c:eb:e6:05:40:89:89:fd:8b:ab:
ed:af:df:81:37:8d:bd:ea:ac:94:3a:00:8a:3c:aa:
46:b6:12:ce:9e:9b:9d:d2:05:f3:c0:c6:57:85:6e:
5b:b8:39:36:52:19:6f:e9:ba:55:43:62:f4:ba:13:
ef:3b:1d:e6:57:5e:84:ac:da:e1:a9:af:56:fa:0d:
b8:bf:db:fe:dd:79:7f:04:2c:58:03:65:19:16:c3:
38:4d:01:b4:6f:c1:49:d3:e8:e1:cc:87:fe:b5:37:
b3:36:59:1b:db:c1:0c:be:e9:99:09:84:c5:53:84:
2a:dd:80:10:c2:1d:6e:cb:35:81:c2:39:e0:2c:a9:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:9C:32:91:A8:60:71:A2:D7:59:EC:A5:AA:35:C2:DF:1D:A7:60
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:af:d3:ce:31:be:6f:27:1c:a5:05:21:0b:b2:dd:ee:27:55:
06:b2:eb:e9:fe:ba:be:b6:21:13:30:7c:b9:73:ba:30:05:cf:
18:08:aa:7c:f3:34:8a:da:68:87:c7:80:4c:8a:cc:03:2c:cc:
09:24:86:f0:9d:a8:bd:e6:7f:41:e6:5d:bb:e2:90:2c:ee:52:
c9:11:1d:c5:e4:a4:f6:7b:e0:be:15:5b:5b:0f:c2:da:6d:a5:
ec:c0:b1:9a:d7:4c:4c:83:c5:d1:d7:c8:b4:52:c1:be:1a:d5:
99:e1:7b:bf:dc:8b:eb:6f:67:5d:0e:70:8a:b8:b1:fa:ff:47:
b8:38:1a:55:9e:f0:92:7e:48:61:80:51:ba:5e:ab:b7:27:7b:
04:8a:9d:98:f4:c0:6f:b7:d0:01:e9:1f:14:bd:6b:64:02:d6:
2d:2b:96:15:1e:15:a9:ad:74:01:a6:20:02:7a:c8:96:1d:3b:
ef:b8:9b:39:45:c4:b8:8e:6b:b8:4c:3f:6f:4d:ac:f3:a7:26:
84:c6:0c:ae:00:a1:db:05:65:6e:17:c3:a9:db:8e:10:1e:39:
3a:d4:1e:b0:32:11:4d:a7:52:4d:9c:82:11:69:36:43:f7:a0:
8c:fb:29:b6:ba:8a:a9:cd:f1:9e:b9:1c:1d:c5:8a:f3:26:ed:
3e:04:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:38 2026 by rpki-client