Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: QXDzUeRfiKFnugszHLkQXHqkqz00nCKaPDs94WSh1bs=
Subject key identifier: 32:96:E6:38:74:B1:7E:78:DF:7D:BB:74:FB:B7:03:B2:42:81:45:F2
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019F91DA337CBB6656C20526B25D3E783B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 0965
Signing time: Fri 24 Jul 2026 02:00:24 +0000
Manifest this update: Fri 24 Jul 2026 02:00:24 +0000
Manifest next update: Sat 25 Jul 2026 02:00:24 +0000
Files and hashes: 1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: t9Nrf+u6yfhLRh7QG6Qe2O5iMijwi+8LFGzaXR3eoGY=)
4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:33:7c:bb:66:56:c2:05:26:b2:5d:3e:78:3b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jul 24 02:00:24 2026 GMT
Not After : Jul 25 02:00:24 2026 GMT
Subject: CN=3296e63874b17e78df7dbb74fbb703b2428145f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:38:93:53:1f:7c:f8:82:7f:2b:d6:b2:39:
24:43:af:93:53:d8:f5:4e:3b:40:0c:25:91:0f:1b:
fc:67:f4:47:59:b4:6f:c1:9a:31:0e:7f:30:4d:42:
a3:13:7c:2b:63:e0:d1:7a:ae:d0:b9:56:2e:31:e7:
f2:7a:c9:cc:86:76:75:4d:cc:2d:43:0a:55:5a:e5:
ee:b1:c3:7e:53:25:13:8f:37:89:70:b9:01:7c:ad:
d2:f3:f6:50:83:9a:9c:af:0a:ff:c3:82:f5:75:d6:
dd:a7:8f:d6:45:c0:d0:dc:d8:50:ec:6f:da:f1:d0:
96:36:0f:4a:c7:d5:73:06:35:39:54:8c:0d:f4:a4:
36:9b:6b:b1:06:0b:f2:93:56:b7:bf:c5:af:b2:2e:
58:5b:10:9c:6f:15:4c:43:c8:46:4b:46:3f:ae:23:
c7:2b:56:62:72:2b:6f:2b:2a:2b:58:38:05:04:9c:
51:5a:34:25:59:f8:ad:f8:ae:2f:b6:db:c3:2a:98:
0e:1a:eb:81:73:96:29:3e:6f:f2:84:43:96:f5:e4:
2c:72:06:11:1f:f1:b1:a2:e5:2f:24:b2:00:35:e9:
b1:8c:41:9b:0d:01:6b:51:67:80:52:df:a8:f0:a0:
84:80:6f:03:86:b7:3b:3b:a2:8c:22:9d:b9:4c:82:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:E6:38:74:B1:7E:78:DF:7D:BB:74:FB:B7:03:B2:42:81:45:F2
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:7f:56:a2:47:53:d0:46:4d:87:5f:ca:b4:a7:68:0a:74:
f2:36:26:58:c7:d2:3d:81:13:7e:33:40:45:31:43:df:4c:95:
03:23:f4:c6:c0:f2:7e:b9:98:24:65:67:ca:41:4e:99:42:f4:
bc:eb:18:e2:13:5c:6f:50:28:7a:a0:d0:4c:6b:4a:2a:75:09:
9b:61:d6:0f:e4:b5:4e:ce:1f:54:ad:3c:7e:83:c0:c6:25:d6:
5b:0f:7a:3c:cf:2f:86:2b:a1:20:bc:2a:51:0e:a6:28:08:f1:
8f:50:f3:08:e2:c2:46:59:6b:2b:ac:34:1f:dc:89:78:fc:9c:
fa:df:8c:21:53:df:40:0a:22:3b:ac:f3:28:cf:98:d6:8c:d9:
60:61:69:da:cd:d7:21:8a:cd:ec:a1:4d:4a:31:20:4b:f2:3d:
29:87:20:9d:08:1a:06:22:dd:d1:c7:24:cc:14:0c:76:08:b9:
56:57:d3:c4:30:86:34:68:cd:f5:08:97:48:ea:79:19:48:5b:
e9:f3:a8:1f:08:ae:9e:7f:9f:93:a9:7d:b8:ec:09:aa:32:37:
1c:6a:fb:e3:1f:2d:ad:c5:4c:f9:2b:af:a1:05:d3:3e:3b:51:
5c:a1:65:62:14:df:58:19:77:20:a1:89:7f:9b:a3:31:94:33:
06:6c:59:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2jN8u2ZWwgUmsl0+eDs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2
NmE3MTIwHhcNMjYwNzI0MDIwMDI0WhcNMjYwNzI1MDIwMDI0WjAzMTEwLwYDVQQD
EygzMjk2ZTYzODc0YjE3ZTc4ZGY3ZGJiNzRmYmI3MDNiMjQyODE0NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm84k1MffPiCfyvWsjkkQ6+TU9j1
TjtADCWRDxv8Z/RHWbRvwZoxDn8wTUKjE3wrY+DReq7QuVYuMefyesnMhnZ1Tcwt
QwpVWuXuscN+UyUTjzeJcLkBfK3S8/ZQg5qcrwr/w4L1ddbdp4/WRcDQ3NhQ7G/a
8dCWNg9Kx9VzBjU5VIwN9KQ2m2uxBgvyk1a3v8Wvsi5YWxCcbxVMQ8hGS0Y/riPH
K1ZicitvKyorWDgFBJxRWjQlWfit+K4vttvDKpgOGuuBc5YpPm/yhEOW9eQscgYR
H/GxouUvJLIANemxjEGbDQFrUWeAUt+o8KCEgG8Dhrc7O6KMIp25TIKWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKW5jh0sX543327dPu3A7JCgUXyMB8GA1UdIwQY
MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt
ZmUwZDI4YjY4Y2Q1LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1
LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD1/VqJH
U9BGTYdfyrSnaAp08jYmWMfSPYETfjNARTFD30yVAyP0xsDyfrmYJGVnykFOmUL0
vOsY4hNcb1AoeqDQTGtKKnUJm2HWD+S1Ts4fVK08foPAxiXWWw96PM8vhiuhILwq
UQ6mKAjxj1DzCOLCRllrK6w0H9yJePyc+t+MIVPfQAoiO6zzKM+Y1ozZYGFp2s3X
IYrN7KFNSjEgS/I9KYcgnQgaBiLd0cckzBQMdgi5VlfTxDCGNGjN9QiXSOp5GUhb
6fOoHwiunn+fk6l9uOwJqjI3HGr74x8trcVM+SuvoQXTPjtRXKFlYhTfWBl3IKGJ
f5ujMZQzBmxZog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:45 2026 by rpki-client