Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier: SkZhlqhC/WgCONjTOh9BZv35CApBGZQUSmYB7cZFzmo=
Subject key identifier: 1C:F5:2E:19:6B:5C:90:C5:5F:0D:2F:89:5E:D9:01:3E:32:D2:24:BA
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer: /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial: 01A0CFA3AA0887A03CB999202DA7993A97EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 19:00:04 +0000
Manifest this update: Wed 23 Sep 2026 19:00:04 +0000
Manifest next update: Thu 24 Sep 2026 19:00:04 +0000
Files and hashes: 1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: tykCJ84jN8kBI295jikv6rUrI7qZo8Xd7Auj8awTqow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:aa:08:87:a0:3c:b9:99:20:2d:a7:99:3a:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Validity
Not Before: Sep 23 19:00:04 2026 GMT
Not After : Sep 24 19:00:04 2026 GMT
Subject: CN=1cf52e196b5c90c55f0d2f895ed9013e32d224ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:2a:26:79:62:12:6d:a4:15:68:b0:79:57:
21:2d:fc:fc:5d:bb:ae:c9:18:46:aa:1f:a9:b3:ce:
43:81:05:e9:63:3d:0f:97:26:a0:a0:a1:30:c6:3e:
1c:41:cd:1b:e5:99:fd:61:c3:74:ee:c6:6b:8c:01:
e1:b7:5b:8b:b1:06:59:cb:e9:b1:87:79:08:35:63:
cf:8a:50:a2:4c:cc:34:46:47:d4:51:aa:c8:36:cf:
30:9f:14:f7:3a:64:1e:38:a5:e8:d6:45:fc:8e:85:
2c:8d:65:cb:dd:44:7c:f5:80:ee:56:b9:aa:76:6d:
ef:bf:d3:5b:fc:c9:12:26:be:f0:3e:08:09:b5:81:
6f:f5:be:64:6f:5b:70:cb:30:82:5a:a0:13:c1:e0:
37:72:8b:76:92:cd:8b:e9:e0:ad:50:9a:2a:d0:34:
4b:62:76:15:df:ef:f9:02:fa:d4:30:68:c3:76:db:
ba:57:20:bd:57:42:77:31:48:ca:65:31:68:0e:59:
31:d1:9b:7a:49:3d:85:e9:d2:9f:82:45:23:38:94:
27:c3:b6:56:1b:bf:a3:c2:0d:73:c3:c7:4e:a1:30:
72:3f:50:7f:7d:9c:3f:e7:c2:c4:72:ad:2d:cb:a4:
35:a4:e0:07:5b:07:45:dd:d9:82:4a:30:dd:9b:77:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:2E:19:6B:5C:90:C5:5F:0D:2F:89:5E:D9:01:3E:32:D2:24:BA
X509v3 Authority Key Identifier:
keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:77:cb:a8:1d:4c:fd:48:85:64:a3:69:f5:35:db:b6:4c:
8e:6a:e8:43:d4:bd:51:09:2b:7e:61:7e:34:d6:06:b4:89:5d:
dd:8e:ad:a4:2d:2a:b7:d8:4d:30:ce:49:96:46:1b:75:5a:de:
4c:88:6f:97:4e:6a:2a:14:97:c3:09:ea:ee:88:89:ce:0a:21:
35:2c:6b:62:84:08:5f:23:4a:2d:5a:55:a7:9f:e0:b5:57:eb:
b2:c9:59:36:6f:e9:48:4e:c3:c2:b0:a3:23:9d:92:58:dd:24:
29:6e:5d:fb:86:7e:70:ff:6f:b8:fc:58:94:ba:40:a1:85:3e:
38:10:50:db:94:45:7a:fc:bc:38:c8:29:d8:80:e5:7f:00:c4:
37:a7:5c:27:30:17:25:3f:0c:0e:3a:98:c7:3b:b8:9c:ed:de:
d3:09:62:86:73:8f:11:40:35:f6:4f:d8:e9:ad:c7:9d:03:3c:
66:6f:df:5c:90:b4:3d:9c:2d:21:dd:79:7a:9b:cf:fc:f4:bf:
fc:da:3b:1d:2b:72:fd:ae:a5:e9:47:80:92:d0:44:60:67:a8:
61:1d:d8:1b:2d:bb:01:c0:23:2c:0a:47:48:33:22:03:a4:2e:
47:0b:12:7f:f5:a4:3d:fc:38:3f:9d:38:7e:36:e9:2b:27:b8:
a2:1b:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:36 2026 by rpki-client