Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: bmpfWlr4HinP01EJOUexcpNm6UriknDkytHbXUdvQp4=
Subject key identifier: 0D:DC:50:26:EF:C5:CA:72:53:BA:8D:5A:1E:6C:2F:95:61:16:9D:32
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019E1F11085750FA5D5C495FDC806A5D612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 08A5
Signing time: Wed 13 May 2026 02:01:10 +0000
Manifest this update: Wed 13 May 2026 02:01:10 +0000
Manifest next update: Thu 14 May 2026 02:01:10 +0000
Files and hashes: 1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: 0yd8jlIAahiO4fJBGZlaj+onWqikZSvF8JQnQaVc0dg=)
4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:08:57:50:fa:5d:5c:49:5f:dc:80:6a:5d:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: May 13 02:01:10 2026 GMT
Not After : May 14 02:01:10 2026 GMT
Subject: CN=0ddc5026efc5ca7253ba8d5a1e6c2f9561169d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:dc:88:4b:4c:67:4e:2c:ae:0c:b2:fd:92:
05:e1:51:7d:c9:3d:f5:d1:36:13:d3:f1:67:3f:93:
0a:70:bb:f4:ba:cf:e8:24:cd:70:e8:f9:76:06:7b:
a8:f9:df:90:31:85:ee:cd:39:82:98:69:3d:53:ae:
2f:52:21:b8:0e:f1:a4:6a:8d:08:12:b3:11:86:41:
ee:b3:fd:46:a4:1d:5c:5e:17:9b:97:97:e9:16:6c:
23:7d:11:98:e0:c6:ad:f0:63:dc:76:82:d4:80:89:
fd:3b:84:b0:61:29:0f:3c:5a:cb:d9:9b:83:e8:a9:
63:8b:63:58:0c:65:c0:12:d1:37:e0:73:d0:b2:10:
e1:10:4b:70:fb:d8:30:94:b9:50:eb:56:91:5f:7d:
bc:0d:79:c3:7d:cd:a8:52:47:28:d8:17:3d:03:61:
eb:27:ed:9f:c0:1a:74:02:30:4f:d8:bc:17:5b:f4:
b3:95:7f:f3:ef:cc:91:80:1a:7b:55:c8:60:c7:60:
76:65:f2:3c:6f:a0:f4:d5:80:f3:da:18:21:db:bd:
5c:7c:74:a4:f4:7e:d3:b0:03:32:2d:62:15:b7:00:
0c:0b:14:2b:ba:49:97:3a:2c:9a:bc:4e:bb:2e:08:
b0:63:b4:76:63:32:81:15:67:b9:ad:ff:00:11:b7:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DC:50:26:EF:C5:CA:72:53:BA:8D:5A:1E:6C:2F:95:61:16:9D:32
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8c:88:f1:f4:43:cf:a5:eb:0a:39:f4:b5:3d:30:b8:95:c3:
cd:bc:1b:fb:a1:b8:3f:20:93:21:7e:18:e9:a0:de:3c:a8:6a:
de:a0:dc:40:7c:9e:7d:f6:0a:18:ad:ee:c8:75:88:17:2c:dc:
f6:f8:74:e2:fc:07:eb:2c:a4:9f:18:9b:df:12:de:7d:72:c5:
97:cf:82:7b:9b:3c:11:7c:f0:4c:15:73:7d:cd:cb:32:57:62:
71:3e:40:63:ab:13:71:13:b1:82:d5:62:44:6c:29:45:e5:bd:
6d:66:ed:20:ec:50:75:20:14:43:f9:0c:55:62:42:de:47:74:
42:21:08:1b:ce:21:eb:fc:41:3b:d4:b7:3c:9a:1e:ec:b1:23:
95:d7:6f:2a:95:26:6c:5e:10:ec:8a:d8:f8:9f:08:1c:3b:6d:
13:01:31:5f:8b:ea:91:10:e8:14:ef:f9:65:67:c5:58:8b:d8:
96:f1:9d:32:db:97:4e:74:b1:13:79:e0:e3:0c:35:00:a7:5d:
65:68:99:9d:53:2d:dd:c1:20:0d:2d:39:0d:c4:66:96:64:f9:
bf:14:70:40:b0:49:76:6e:40:e0:6d:0f:dc:ce:76:e1:51:f9:
15:22:a6:49:4a:45:69:34:77:e5:14:20:3b:65:ce:09:32:64:
8c:97:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:55 2026 by rpki-client