Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: zDWu/39R0fjR0DqfKVTQXC2slFKHrexYr92eIqce0sY=
Subject key identifier: 1A:35:03:83:C7:AE:3B:69:DB:57:18:A7:97:BC:D1:D1:B0:6F:D8:E4
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019CAD902EBD3E1CBFCA0222146BA17217F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0659
Signing time: Mon 02 Mar 2026 08:00:33 +0000
Manifest this update: Mon 02 Mar 2026 08:00:33 +0000
Manifest next update: Tue 03 Mar 2026 08:00:33 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: wiZt0DrWt4d8i4EvmjfdKn9Fq9ztUxPYbIIF6P43W24=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:2e:bd:3e:1c:bf:ca:02:22:14:6b:a1:72:17:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Mar 2 08:00:33 2026 GMT
Not After : Mar 3 08:00:33 2026 GMT
Subject: CN=1a350383c7ae3b69db5718a797bcd1d1b06fd8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:65:6b:94:92:fa:33:7b:0b:b7:5a:0b:71:
3e:31:9c:ad:73:6c:ce:cb:ea:be:4c:e7:c9:21:54:
3f:67:15:a6:b2:69:96:6f:61:9e:72:29:23:2e:55:
5e:9e:f0:d2:ce:26:17:b5:57:5a:7e:85:f2:fb:74:
42:1c:e5:b4:3a:67:bc:5d:48:77:b0:7a:b8:17:a9:
8e:9d:7a:87:6f:4c:31:81:69:c8:43:0d:a7:8b:94:
45:fd:25:40:d3:a8:f4:45:39:5f:89:34:d6:aa:6a:
f3:6c:6c:80:32:5a:9a:09:a0:76:5a:e5:b6:01:20:
9e:85:93:c6:c9:1c:bc:7e:ce:1f:92:2c:5e:bc:ec:
15:e9:f5:c9:9a:2f:bc:f7:f1:23:78:5b:db:dd:b8:
ed:f2:31:d8:7b:23:97:ae:ca:b5:d3:5a:e9:4d:59:
f9:71:2d:38:69:af:a4:d7:cb:48:5c:f8:4d:de:9a:
b5:81:ea:d5:83:29:41:73:4f:13:eb:0b:85:f3:38:
8c:50:87:e4:c6:69:38:46:02:e0:58:06:8a:e3:3f:
5e:b9:f1:28:63:72:2e:77:4c:b7:19:ca:2b:7b:f3:
ed:43:6f:df:f7:85:77:99:a6:0b:ed:d3:91:3e:07:
2e:fb:af:50:c4:b3:6a:75:e9:3d:ad:31:7a:47:0b:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:03:83:C7:AE:3B:69:DB:57:18:A7:97:BC:D1:D1:B0:6F:D8:E4
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c1:68:60:f9:30:b4:48:db:66:bd:82:df:2c:c1:3d:dd:d8:
47:82:51:4e:67:3d:d5:38:71:1a:3e:18:3f:b8:ab:aa:23:46:
d2:07:86:fd:0c:9f:72:ea:66:01:bd:e4:28:fe:33:b0:80:bb:
5d:ea:ac:03:e0:c4:c6:c0:a1:1d:a9:0c:66:59:5e:c1:23:7d:
d9:78:1a:31:1a:06:31:fc:6e:aa:11:15:82:e5:be:09:8d:60:
87:74:32:5c:eb:d0:4b:b3:29:6a:69:c3:77:f5:db:fa:a8:c8:
26:35:88:85:96:00:0e:58:e4:b0:d7:37:72:95:29:7d:25:79:
90:cb:11:96:67:5f:59:b1:56:7d:1c:6c:e4:dd:0b:d6:ee:46:
bf:9c:c2:21:ce:17:d1:ae:12:f7:c9:be:0e:61:b0:6a:01:66:
b1:af:89:be:39:ab:e6:14:b6:31:59:3c:cc:d4:0e:96:3b:84:
b2:8e:8e:98:e0:36:34:61:34:a1:1d:2b:0c:28:d3:22:c1:ee:
0d:7e:3b:5f:af:38:cc:d4:40:f8:dd:9d:ba:5a:4d:f8:90:17:
4f:2e:88:bf:73:39:e6:92:c8:b6:dd:0f:c9:6c:38:49:ff:57:
4f:f0:a2:37:f2:3f:3a:35:cc:2f:a9:a4:ba:51:4e:a5:73:d4:
d9:4e:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:32 2026 by rpki-client