Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: rg6hcAGl+3Mwltd1G3TZ9S/0UZ0dIgNou88YXhWssxg=
Subject key identifier: 2E:7E:A7:E9:E3:46:F4:D8:D3:17:C0:10:E7:A2:82:AB:1D:35:0A:32
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 019D28167E0E04A52D82BADBE00879312207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 173C
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: QgoErdx0/FeimiWi4VSpx9GjH9cOCTWACBF9uSZqBG8=)
2: lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa (hash: CREAI2bwdzAy9LxcYU7uoPR2XEXd4CUfcjb+D4ZYEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7e:0e:04:a5:2d:82:ba:db:e0:08:79:31:22:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=2e7ea7e9e346f4d8d317c010e7a282ab1d350a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:46:21:69:03:6c:5b:1b:00:7b:f2:5a:ec:
0b:98:94:bb:ed:a3:23:58:88:b9:59:1b:8d:11:ff:
1d:09:aa:d3:1d:47:b3:6d:a4:1f:ec:bd:90:81:37:
fd:70:1f:28:41:9b:7a:ba:f8:16:14:ed:51:2a:e4:
88:57:72:a8:05:e4:4a:a2:31:46:c7:5f:a0:db:b5:
0f:2f:51:8a:4b:5b:52:0d:52:fd:9e:08:92:30:fe:
d7:6e:0a:60:a0:50:30:02:5f:f9:cc:fa:49:70:8a:
04:70:be:5e:0d:2e:bb:8c:06:75:b0:5f:70:1f:18:
25:4a:fe:63:7d:ee:0c:fe:0b:79:a2:05:d8:74:ec:
4b:7f:04:19:08:e0:22:f9:f9:9a:f1:86:cb:53:04:
50:8a:af:00:76:8e:d4:c3:bc:e1:cb:db:5b:c5:71:
ec:0d:9d:8f:67:f0:c1:72:8a:2c:ef:43:ff:15:44:
8d:63:09:5b:ed:7a:f2:73:df:35:9a:24:84:14:52:
18:0d:1d:23:99:6b:3e:93:f8:9f:ed:fc:f9:e4:e3:
23:00:6d:dc:58:e9:5b:04:4a:c6:54:88:e6:46:e2:
34:d1:10:96:50:38:3a:db:e4:9c:25:68:6e:5f:f9:
81:b5:3a:0d:76:cf:fe:c6:5b:89:af:bc:79:d1:73:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7E:A7:E9:E3:46:F4:D8:D3:17:C0:10:E7:A2:82:AB:1D:35:0A:32
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:38:89:bb:42:33:37:30:c0:96:f8:34:7f:cb:7d:ef:06:
83:c4:be:e1:a1:ec:08:e7:71:32:f5:db:b3:c1:4a:a6:4b:81:
4e:51:72:ff:49:6d:d1:b0:60:50:dc:8d:a9:8c:5d:b5:d3:ef:
00:93:1f:dc:ce:fc:1c:a9:c8:4f:f8:5f:89:28:26:71:04:6a:
ce:46:c5:51:9f:63:22:fe:a9:95:2a:0b:80:a9:82:21:f5:68:
0a:31:35:c3:b8:ef:77:10:17:29:01:f2:9c:ac:01:58:3c:0b:
7f:48:1e:65:c6:f6:8f:8b:6e:2c:ce:a4:c2:ee:f4:35:01:39:
04:3e:b2:f5:31:02:32:5f:89:83:91:05:56:2d:10:c4:3e:32:
9f:33:dd:9f:f2:d5:6e:b1:f9:08:68:18:af:56:6d:8d:0e:da:
71:f2:30:03:12:c6:5d:35:65:d9:84:a0:07:22:5d:ad:92:d3:
7c:ab:83:0c:ad:f8:7b:b1:58:a9:34:77:de:a1:1e:70:bd:98:
dc:10:f9:3f:2e:7d:65:84:72:ac:05:ff:27:85:1c:6a:06:4d:
55:ce:23:18:61:b6:65:ce:5b:78:c2:5f:27:3d:4d:a2:89:ee:
34:78:7f:5a:53:c3:e3:91:a7:0c:b0:ea:41:72:30:03:05:14:
89:0c:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:56 2026 by rpki-client