
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier: qlpPnhl8PuCWFIH0ephmYccaCAvaLrM0nihZ/BgS96I=
Subject key identifier: D2:59:68:9A:6A:51:9F:98:39:67:5D:C1:64:3C:EB:3C:2D:66:9F:F7
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019D9C2C9796BFF2E6DE716F7C6092694DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number: 01FF
Signing time: Fri 17 Apr 2026 16:01:01 +0000
Manifest this update: Fri 17 Apr 2026 16:01:01 +0000
Manifest next update: Sat 18 Apr 2026 16:01:01 +0000
Files and hashes: 1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: KhrEYHYXoaLacC5cjNRAH7xFgY0LBSuybq/+BteEvzg=)
2: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:97:96:bf:f2:e6:de:71:6f:7c:60:92:69:4d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Apr 17 16:01:01 2026 GMT
Not After : Apr 18 16:01:01 2026 GMT
Subject: CN=d259689a6a519f9839675dc1643ceb3c2d669ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:c7:bb:74:cd:1a:f9:9d:e7:f7:c8:a9:44:
93:c0:93:13:81:6f:e5:ee:cc:0a:7a:e6:9f:1b:1e:
9c:94:cc:5a:4e:54:ea:3d:38:43:96:f6:6e:19:49:
5c:f1:42:03:13:85:24:2a:2c:01:20:28:30:87:b6:
47:96:1d:42:59:95:93:6f:14:8b:46:cf:d8:fc:68:
b6:c8:b3:ce:d5:22:99:df:9e:94:59:f3:0e:e1:50:
93:4e:f9:14:c2:ad:e9:df:c7:37:35:21:72:d4:4f:
cf:93:e6:87:26:30:a2:31:38:b3:dc:68:3f:13:69:
bc:4c:1b:1c:d6:87:9f:f9:ee:ab:52:33:db:9c:74:
02:44:52:8f:5f:70:61:de:0d:a1:e0:2a:13:33:a7:
3f:7e:07:2b:b1:f0:19:22:fe:c6:ed:b7:6b:e4:1e:
27:f1:6a:6a:e8:cc:9a:2a:67:53:3d:f6:29:4e:72:
78:95:23:27:65:c4:9e:51:9e:70:0a:a5:8d:c5:f3:
05:fa:7d:9b:dd:4c:48:32:90:05:1e:53:38:94:98:
4e:cb:10:53:ac:ce:a9:43:56:55:51:7b:9c:5a:3e:
ba:4b:62:eb:1c:cf:4e:c1:4c:26:5d:a3:6c:8b:1f:
2a:1b:ae:39:34:84:60:f6:f7:48:65:fc:61:0d:91:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:68:9A:6A:51:9F:98:39:67:5D:C1:64:3C:EB:3C:2D:66:9F:F7
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:24:0d:5a:79:72:3a:9b:b3:50:ba:9b:7b:48:53:95:fb:43:
73:2d:60:ee:35:83:aa:9c:36:5e:41:6c:7a:18:d5:91:51:c5:
0f:be:c4:d5:5d:7d:a1:f5:78:bb:89:fb:d8:3c:a3:83:67:df:
cf:b6:fd:73:36:91:8f:9d:5d:4a:5e:1e:51:ab:b5:69:71:be:
aa:25:f3:9f:71:1b:34:8b:49:67:66:ab:df:70:e1:40:87:2a:
ba:3c:66:71:09:c3:4a:8f:47:17:ac:69:e7:2c:13:cc:4b:9f:
ed:16:a1:1d:cf:0e:36:e2:95:09:a2:bd:71:a3:71:95:16:a2:
fe:f9:db:35:0c:a7:ba:56:cb:13:26:9b:f4:60:56:a3:22:96:
b2:0c:73:e9:42:6f:58:fd:c9:0d:ee:89:46:2c:f4:fa:20:32:
fb:3d:4d:26:0c:f3:16:43:c5:58:eb:47:8e:0c:a3:1a:0f:76:
65:b2:f0:99:6d:68:c7:5d:38:ab:68:c5:f8:52:4a:b6:71:46:
24:96:7f:92:6a:73:6f:9e:72:8e:71:8d:64:0f:26:0e:c4:b9:
38:ed:10:6b:4d:f8:6c:1f:c3:35:53:1c:20:4c:38:54:53:46:
ec:34:4f:87:c8:1f:8f:a7:7f:c6:8f:19:bd:24:ad:52:16:2f:
59:64:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:35:26 2026 by rpki-client