Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier: FHlNwyB58tVN+RSM+uBRIFhY1p2rsap4NjgFx7Bu+5o=
Subject key identifier: 9F:E3:9D:11:79:0A:24:74:0E:7F:B9:B4:5F:97:C8:7E:89:D9:CC:F6
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial: 019CAFEC790FD3251C656803F5084DB1935C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number: 0346
Signing time: Mon 02 Mar 2026 19:00:36 +0000
Manifest this update: Mon 02 Mar 2026 19:00:36 +0000
Manifest next update: Tue 03 Mar 2026 19:00:36 +0000
Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: Ahhcq/fv/+9jQ7yRI3BIALdqC2KpRqp9nakU06uoluk=)
2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:79:0f:d3:25:1c:65:68:03:f5:08:4d:b1:93:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Validity
Not Before: Mar 2 19:00:36 2026 GMT
Not After : Mar 3 19:00:36 2026 GMT
Subject: CN=9fe39d11790a24740e7fb9b45f97c87e89d9ccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:7d:83:db:90:fa:cc:ed:54:dd:6a:e2:5c:
e2:c3:db:e0:bb:0b:4b:af:10:e2:16:de:b4:db:50:
05:a8:f9:fb:4e:78:12:b8:ae:07:67:ef:d9:1c:0e:
c5:ab:51:76:c9:cc:90:18:8e:19:ff:b4:f7:3b:95:
8b:97:4b:14:35:6b:bd:89:e6:ef:75:53:f2:0e:f2:
eb:cb:65:ea:c5:54:fe:a1:36:90:75:52:0d:ec:08:
bf:1e:74:81:b6:43:68:e7:36:38:b4:af:fb:77:9e:
0a:1c:fe:ff:37:95:95:b5:a1:63:ed:b5:c4:bc:c6:
3f:71:44:27:b1:c7:bd:90:44:8c:df:68:e9:9b:29:
06:d1:72:61:cb:3d:c3:c6:42:70:16:82:b1:32:d3:
5a:6b:ec:7b:13:63:5b:25:b7:08:59:8e:55:5c:5b:
12:40:d2:d5:db:b7:d9:03:a7:4b:3a:cc:33:e4:b2:
1f:7a:62:28:47:a7:6f:53:f0:9a:4f:d0:3b:b2:e7:
6c:63:23:15:28:4a:a0:b7:d0:9c:45:16:b6:e0:c5:
56:d1:63:fa:b0:d4:2d:ba:4b:83:ff:50:82:62:db:
3f:03:a3:30:39:32:dd:5c:71:68:ab:3f:52:b7:b3:
47:32:4d:ea:39:65:b7:d2:b5:c8:49:1f:55:81:6a:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:9D:11:79:0A:24:74:0E:7F:B9:B4:5F:97:C8:7E:89:D9:CC:F6
X509v3 Authority Key Identifier:
keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3d:1e:49:c7:ce:8c:2e:4c:13:99:cd:56:0d:03:e9:89:01:
92:40:89:ee:fb:8a:b7:ab:ea:28:99:4a:f9:58:9d:06:04:6e:
49:bb:90:08:0f:85:91:a7:0e:d1:ab:a9:8f:ac:20:6d:0d:9f:
b0:1d:8c:7e:b8:61:4b:3f:8b:6f:9e:5a:35:ef:b0:aa:39:d8:
fd:6a:34:58:78:af:92:7e:e1:1c:9f:39:36:7b:3c:d9:7f:84:
d9:de:c6:3c:a4:e8:08:5d:48:42:71:74:12:c7:4a:45:45:56:
a0:52:87:56:b0:a2:b9:e1:37:f0:42:98:b2:47:6d:1c:a7:cc:
4e:ee:0d:88:59:a9:0c:a3:cf:3e:f7:cf:12:8d:41:c4:ba:2b:
bf:b7:79:ea:ad:81:3c:12:c0:d1:56:ad:ac:44:f8:aa:ac:cb:
1c:9c:d6:77:8b:3b:59:1b:7a:49:02:c2:b4:1d:62:5e:2c:68:
21:ee:a0:ec:52:c1:64:da:c7:e7:38:f5:b2:9a:1c:12:f4:2b:
40:a8:ba:d9:0e:b0:8c:12:68:a4:33:a0:07:0e:4a:87:cf:e8:
30:8a:1d:79:cc:06:0d:a8:c9:86:13:c1:23:c3:52:11:48:59:
cd:5d:c9:93:de:40:19:ee:d8:57:f2:a2:96:e4:ad:f2:b8:08:
fc:2d:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:41:51 2026 by rpki-client