Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: mzzvvAuWYGwfJnj21nw5VgwAwvUK4+z8nackz3S9Xx8=
Subject key identifier: FB:71:83:E2:FB:62:3E:30:E9:B7:EA:81:58:25:27:F0:0C:EA:CC:65
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 01A13823D48ADF028BBF352B117C0144CCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 08B3
Signing time: Wed 14 Oct 2026 02:00:34 +0000
Manifest this update: Wed 14 Oct 2026 02:00:34 +0000
Manifest next update: Thu 15 Oct 2026 02:00:34 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: t0ReQ19MVFBKrOgDmssebx4Yqy16fHnz1Fr5mQjbho8=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:23:d4:8a:df:02:8b:bf:35:2b:11:7c:01:44:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Oct 14 02:00:34 2026 GMT
Not After : Oct 15 02:00:34 2026 GMT
Subject: CN=fb7183e2fb623e30e9b7ea81582527f00ceacc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:0a:e0:c4:34:04:21:62:0e:a8:21:42:a6:
56:fd:6f:eb:13:ee:64:60:79:55:11:d3:88:a9:e4:
1c:bc:7c:47:65:ac:f6:66:cd:6b:ac:06:b7:5c:8d:
47:08:29:8a:4b:f0:66:b6:3a:cf:df:dc:e2:25:f3:
4b:d9:5c:f1:f7:0d:19:ed:4e:e7:56:2f:29:4f:de:
1d:d6:c0:21:26:b5:17:19:8f:56:9f:9f:16:4f:6d:
41:54:56:db:76:2f:f3:49:0e:f8:71:c9:d2:71:2f:
63:ef:d7:ba:c3:2b:43:83:fd:bf:90:16:36:eb:78:
48:86:27:bb:53:32:29:78:91:69:77:cb:c8:5c:7c:
0f:37:ba:4e:c2:12:91:a2:bc:d0:22:19:96:90:c6:
9f:6b:3a:c3:70:cd:03:7a:80:76:82:7c:27:d2:fc:
37:3c:2e:8b:41:c0:2a:b8:dc:ab:e6:57:bd:80:48:
e9:de:b6:46:ae:da:2c:48:02:cb:4d:3a:79:1c:3d:
87:0f:cd:8e:62:58:92:d3:ca:ac:90:be:e7:11:e9:
b3:0d:55:33:e9:9f:d3:c3:4e:27:d8:b3:b4:c8:ef:
98:89:aa:5f:66:79:85:a0:dd:6b:53:b4:32:54:d9:
75:51:58:84:64:d0:68:59:fe:a9:93:d6:d9:f7:c2:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:83:E2:FB:62:3E:30:E9:B7:EA:81:58:25:27:F0:0C:EA:CC:65
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f1:c2:51:58:a9:e9:2b:94:3f:3f:5a:2b:bc:c0:c0:5d:03:
59:43:99:19:ef:ca:00:eb:47:c2:e3:24:15:d0:59:f5:3e:ee:
43:47:ec:b1:a4:7f:da:79:f0:4f:eb:a3:d0:49:4b:50:b0:21:
bb:ee:9d:d3:1e:e8:92:cf:9b:e8:12:2d:d0:ba:0e:63:88:19:
01:e1:5b:5f:f1:90:d0:5e:d3:d1:41:7b:0e:9e:94:d6:3c:57:
82:83:e4:01:72:a8:ef:e0:18:82:8a:29:ab:8d:a0:37:69:79:
bc:82:57:fc:e7:8a:e8:4f:eb:6e:76:f6:b7:a3:6c:9a:2e:15:
8d:e5:c7:db:59:83:b7:54:53:1f:49:21:35:84:0c:7f:da:eb:
45:ae:4f:3d:2d:c2:7c:70:62:70:ac:cb:e8:a2:e7:82:17:f6:
07:85:36:59:4c:8a:bc:d2:1d:ff:0d:12:e7:a6:e7:60:e0:e3:
d6:4a:c6:4e:62:46:5f:08:16:49:b2:92:94:3a:d8:69:52:e5:
3f:bf:2d:85:0f:a8:a1:6e:84:ba:4b:b8:1a:1c:48:cb:7b:48:
58:da:76:8b:74:50:3a:0c:8d:d7:7b:c8:67:4e:7b:23:45:85:
66:b2:5a:06:49:aa:1d:10:2f:b2:b6:62:45:ab:7a:0a:60:a3:
ca:b7:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:28:40 2026 by rpki-client