Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: yO41Rmf+fV9SSujcXpFMWzfKQHwgl1p2XJVFGHShIfs=
Subject key identifier: CF:B0:FF:03:8E:55:51:18:3B:2F:15:36:AE:91:C2:1C:97:93:B1:45
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019D9B19D59DE0BD139E9BD777E6EAF37E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 06D4
Signing time: Fri 17 Apr 2026 11:00:54 +0000
Manifest this update: Fri 17 Apr 2026 11:00:54 +0000
Manifest next update: Sat 18 Apr 2026 11:00:54 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: GwVqOU6VzjKdB92HeVVneUoh8ZoP4B8DC6xU7TSFt0c=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d5:9d:e0:bd:13:9e:9b:d7:77:e6:ea:f3:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Apr 17 11:00:54 2026 GMT
Not After : Apr 18 11:00:54 2026 GMT
Subject: CN=cfb0ff038e5551183b2f1536ae91c21c9793b145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:cd:21:50:f4:38:4d:45:16:5e:2b:c6:7a:
52:f9:85:6c:27:ef:1f:9e:e8:a3:24:95:88:1d:06:
4e:a1:c3:7c:4d:6c:5a:f0:d3:0c:c4:e0:4b:e5:be:
01:8d:ef:7e:92:45:51:9c:7b:e8:b3:cf:60:05:9b:
92:45:d2:31:f6:b6:bc:17:4e:aa:fd:21:5b:c8:24:
69:1f:3f:16:26:85:19:50:b8:0c:32:b5:80:08:cf:
56:66:29:0b:d7:20:4e:6e:91:2d:20:24:83:f7:7e:
df:9e:3f:90:95:17:ea:99:99:51:fc:61:b3:f2:25:
74:78:2f:08:fd:7b:e8:b1:00:ad:d2:6c:78:ac:12:
14:74:4f:55:a5:c5:e8:dc:08:28:66:bc:2b:44:2b:
43:01:90:05:f7:54:d3:12:f6:19:0a:10:f6:96:31:
91:e7:c7:c3:5d:cb:74:b6:54:e9:61:dd:8e:03:49:
54:eb:bf:57:bd:6f:09:c7:4d:4a:90:ff:cc:fa:0d:
72:0e:11:c6:d8:17:00:5e:01:17:76:a6:8b:52:65:
a3:af:df:6e:a2:c0:ef:02:6e:76:10:46:54:bd:32:
85:09:5d:e0:ca:22:6c:eb:89:13:6f:88:c9:56:4c:
a2:d0:93:c7:f5:1d:5c:67:09:5c:2c:63:de:a8:44:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B0:FF:03:8E:55:51:18:3B:2F:15:36:AE:91:C2:1C:97:93:B1:45
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:93:46:aa:c2:a0:77:66:68:14:4b:10:62:28:56:99:2a:e6:
60:13:04:94:ca:c5:25:7f:5f:c4:84:15:a7:2c:7f:6d:11:52:
d0:24:43:6f:59:f8:24:07:8e:cc:13:54:40:1b:38:15:01:31:
63:1d:eb:21:60:ef:86:24:f3:f0:c0:2b:32:dd:da:36:de:42:
37:98:48:83:4f:8a:27:70:c3:c6:08:7a:34:7d:3c:58:f0:b3:
6c:76:c4:ef:fd:01:37:cc:5d:f4:e3:43:10:ac:cd:a5:75:84:
ee:47:eb:1e:7a:d1:45:ff:50:53:17:63:6f:09:cb:2a:73:6b:
82:c0:ca:92:1a:4c:ce:8f:1b:a3:a9:01:59:d6:c3:06:9b:0b:
27:0a:44:e2:cb:c2:4f:b4:ae:ea:c7:b4:cb:84:b3:97:0f:95:
15:5e:a1:e0:aa:a3:a8:42:5c:6b:83:78:f4:b7:54:34:31:f8:
84:0d:09:40:0d:e0:4d:22:5a:02:0d:e7:5c:fb:1d:d7:3c:41:
cf:9b:40:92:2f:4d:83:65:52:c1:13:fc:51:20:0d:9d:7b:91:
9d:81:12:97:6f:ed:b4:80:92:6e:36:7b:3a:d3:fc:ed:25:ee:
14:d5:56:ba:2e:ac:15:1e:2e:22:8a:b6:46:3b:97:3f:25:47:
ed:1f:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:42 2026 by rpki-client