Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: Zu2VjPDvpoEOjmK+//RTGnk/Qx6+bRInkJwMMR7Kcko=
Subject key identifier: 0B:D7:8A:47:7B:A5:F5:3B:9D:0A:7B:7A:33:A3:89:77:0F:1A:14:7E
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 019D2772EAC988A92AD4CC66E77691FBC689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:15 +0000
Manifest this update: Thu 26 Mar 2026 00:02:15 +0000
Manifest next update: Fri 27 Mar 2026 00:02:15 +0000
Files and hashes: 1: BMOqMhDnTJ4X54O_OwDI5UiDaHw.roa (hash: 4LkFNJ7Z7rOiHqQGWcBiJ1mq/59lzHli+QSDHC9WmWs=)
2: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: IcpoDirPv1QRsGgl+fMXPe0iMxvlB2D4AAo4OuayuHc=)
3: IS6G36HIKhn8504sUv9RDOVhJtc.roa (hash: EFw3QrJ6c/K7ZoKQsk7N9M/h7zGvXJMqojkfvWcO4v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ea:c9:88:a9:2a:d4:cc:66:e7:76:91:fb:c6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Mar 26 00:02:15 2026 GMT
Not After : Mar 27 00:02:15 2026 GMT
Subject: CN=0bd78a477ba5f53b9d0a7b7a33a389770f1a147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:0c:aa:01:3b:ca:19:99:7a:79:92:b1:8f:
1e:dd:32:c6:3c:78:b9:95:53:af:67:a0:24:73:f4:
13:35:81:a2:68:7c:0d:1c:3d:c5:70:9f:1d:3e:50:
4c:5e:e3:4a:9b:d9:6f:de:70:91:e1:71:b5:d2:aa:
36:81:a0:29:38:06:75:8e:d4:e5:ca:c0:1f:76:37:
4f:65:4b:5a:11:d4:71:0e:72:36:f6:e1:b0:d7:7d:
9a:56:3e:d8:89:65:7a:2a:62:5e:2d:76:0f:b8:6f:
23:d0:e9:84:67:c2:57:8a:0a:82:0e:4e:3c:10:29:
59:f6:47:30:79:e7:ea:c7:3a:1b:e7:11:c3:8b:f4:
7f:a1:03:31:ba:95:b3:54:d1:ea:fd:3d:2a:00:90:
3d:86:6b:80:fd:c0:ed:06:6a:89:97:16:39:05:cf:
f1:7a:7e:b3:26:c7:ac:74:56:1b:68:30:b0:90:0e:
b7:2d:05:5f:c2:3d:7b:4a:43:c6:7b:ca:01:f5:22:
b3:d0:53:32:2b:fc:9d:33:87:57:3d:30:d1:10:e0:
15:e7:7e:32:87:29:2b:1c:4c:9d:80:e1:52:50:e1:
4f:bb:04:44:4c:dd:96:56:9b:05:29:be:c2:ad:87:
a4:f2:b5:99:07:b5:4f:ff:b0:1a:0d:7d:87:4c:3d:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D7:8A:47:7B:A5:F5:3B:9D:0A:7B:7A:33:A3:89:77:0F:1A:14:7E
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:ad:93:69:79:e1:81:3f:d8:49:18:cd:32:58:ee:2f:10:
a4:1e:a1:7e:94:15:9d:3f:86:29:6a:fb:2d:86:23:78:c5:29:
79:d4:ff:45:a6:45:57:97:ba:cd:80:94:1a:c9:21:b9:2e:b8:
61:e0:9b:97:61:46:bc:ee:c5:01:10:87:a7:90:b1:35:a9:f2:
e9:3b:ff:77:b0:f9:99:97:3a:a6:ce:d5:c7:cb:e1:d2:89:2b:
f4:72:fc:16:33:6d:07:74:04:5c:19:14:33:9f:09:f1:e0:80:
18:d5:0d:3b:59:43:7d:97:be:09:ef:8b:3f:01:3d:59:47:1e:
aa:3a:07:1a:f2:af:72:e5:e7:16:8d:e2:e5:22:07:ee:0b:d6:
21:dd:84:cf:3e:50:89:3a:5b:3c:85:c1:3a:2f:cd:31:f0:a2:
73:e2:55:c7:b0:6e:08:94:92:20:c2:5f:66:6c:34:db:37:4e:
9c:bc:d0:03:55:be:ed:71:af:1b:9a:ea:f9:97:31:8a:04:00:
c3:73:cd:c3:a1:2e:60:21:01:77:e1:ee:de:b0:af:db:72:66:
61:67:e5:d8:12:17:44:39:83:20:ae:22:c8:f1:8d:a5:9c:97:
eb:89:75:b3:62:c7:1d:e0:a9:8e:ee:12:21:f3:37:01:45:dc:
5e:16:82:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncurJiKkq1Mxm53aR+8aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDQwOWExZDhiMDcyZjdkYjAyNDUyOGI5NzIwMzM5YmRi
YmIxMDYwHhcNMjYwMzI2MDAwMjE1WhcNMjYwMzI3MDAwMjE1WjAzMTEwLwYDVQQD
EygwYmQ3OGE0NzdiYTVmNTNiOWQwYTdiN2EzM2EzODk3NzBmMWExNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucsMqgE7yhmZenmSsY8e3TLGPHi5
lVOvZ6Akc/QTNYGiaHwNHD3FcJ8dPlBMXuNKm9lv3nCR4XG10qo2gaApOAZ1jtTl
ysAfdjdPZUtaEdRxDnI29uGw132aVj7YiWV6KmJeLXYPuG8j0OmEZ8JXigqCDk48
EClZ9kcweefqxzob5xHDi/R/oQMxupWzVNHq/T0qAJA9hmuA/cDtBmqJlxY5Bc/x
en6zJsesdFYbaDCwkA63LQVfwj17SkPGe8oB9SKz0FMyK/ydM4dXPTDREOAV534y
hykrHEydgOFSUOFPuwRETN2WVpsFKb7CrYek8rWZB7VP/7AaDX2HTD0vowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvXikd7pfU7nQp7ejOjiXcPGhR+MB8GA1UdIwQY
MBaAFAVECaHYsHL32wJFKLlyAzm9u7EGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEt
YjE2ZDIxOWIzNTkyLzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEtYjE2ZDIxOWIzNTky
LzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAitk2l5
4YE/2EkYzTJY7i8QpB6hfpQVnT+GKWr7LYYjeMUpedT/RaZFV5e6zYCUGskhuS64
YeCbl2FGvO7FARCHp5CxNany6Tv/d7D5mZc6ps7Vx8vh0okr9HL8FjNtB3QEXBkU
M58J8eCAGNUNO1lDfZe+Ce+LPwE9WUceqjoHGvKvcuXnFo3i5SIH7gvWId2Ezz5Q
iTpbPIXBOi/NMfCic+JVx7BuCJSSIMJfZmw02zdOnLzQA1W+7XGvG5rq+ZcxigQA
w3PNw6EuYCEBd+Hu3rCv23JmYWfl2BIXRDmDIK4iyPGNpZyX64l1s2LHHeCpju4S
IfM3AUXcXhaCNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:24 2026 by rpki-client