Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: HBIkwJMZtg8E3dJw5y/SVPbkIWGyx4aOWJCsy1ou90s=
Subject key identifier: 2C:99:5A:D1:68:28:EF:30:ED:D2:34:5A:F2:73:41:99:29:14:F5:4B
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 01A0CE23E46D85EBEAFF0C38F4BA882AF707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 12:00:53 +0000
Manifest this update: Wed 23 Sep 2026 12:00:53 +0000
Manifest next update: Thu 24 Sep 2026 12:00:53 +0000
Files and hashes: 1: BMOqMhDnTJ4X54O_OwDI5UiDaHw.roa (hash: 4LkFNJ7Z7rOiHqQGWcBiJ1mq/59lzHli+QSDHC9WmWs=)
2: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: 5VBWvGgeB5buQapZjCLG2x89MEV2pFBd4uI458hJwMw=)
3: IS6G36HIKhn8504sUv9RDOVhJtc.roa (hash: EFw3QrJ6c/K7ZoKQsk7N9M/h7zGvXJMqojkfvWcO4v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:e4:6d:85:eb:ea:ff:0c:38:f4:ba:88:2a:f7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Sep 23 12:00:53 2026 GMT
Not After : Sep 24 12:00:53 2026 GMT
Subject: CN=2c995ad16828ef30edd2345af27341992914f54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:41:54:b9:f5:4c:44:e8:e1:74:be:b7:0e:
cb:c8:c5:e6:55:26:3d:75:c8:57:2d:74:e7:05:a6:
58:fe:b8:89:8e:a4:f1:bb:dc:3c:98:6a:f4:17:4e:
ab:00:e4:de:ce:f9:5b:f9:0b:06:7a:0b:55:47:62:
df:8f:de:50:db:80:f1:b5:cf:cf:f2:5c:f0:c0:8b:
53:4f:24:b8:85:d6:c0:81:2f:6b:f7:5f:13:12:11:
12:7d:c6:63:08:1d:46:e9:1a:cc:9b:51:e4:a3:8c:
e8:83:b8:61:ec:ae:4b:0e:a6:6f:f0:56:5c:fd:4c:
c8:4f:44:15:12:31:09:0f:90:f9:7f:05:8c:21:59:
d6:4d:f3:53:0e:88:fe:f0:c1:43:17:c2:1c:13:ba:
6a:95:e1:09:b2:82:22:e3:9e:65:88:72:34:33:c7:
04:9b:67:74:95:67:b0:3c:8a:9c:81:c3:b2:04:d7:
24:41:9c:36:f4:c8:bc:13:b5:71:85:07:20:ed:f0:
f1:c5:ef:c5:b5:e7:16:7f:30:7c:33:b9:fe:9e:6a:
7b:4a:7b:99:72:d5:7c:26:13:7a:a9:7d:df:f0:70:
5f:45:14:03:e0:00:c1:7e:60:cc:47:e6:89:31:62:
c7:85:ad:3a:50:0f:c6:45:ce:7f:a8:09:3e:6e:7a:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:5A:D1:68:28:EF:30:ED:D2:34:5A:F2:73:41:99:29:14:F5:4B
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c1:ba:96:70:68:85:59:18:53:8e:45:84:fd:7d:69:3f:00:
7b:2f:24:a1:9a:76:a5:dd:29:b7:ea:3e:70:e4:38:9c:43:de:
ce:5b:f7:19:19:08:fe:55:ea:4e:4b:13:d9:34:43:39:04:0d:
06:dc:c6:18:a9:8e:36:75:c7:60:55:39:d7:60:f3:24:ed:2e:
95:de:c7:a9:fc:c3:16:b2:d6:20:ae:59:5f:34:10:61:87:ad:
8c:65:8b:06:19:dc:9a:18:e7:56:63:df:af:76:1f:85:2d:07:
97:6e:b2:a6:8f:b1:04:0f:72:f5:0c:28:af:e5:10:5a:b9:61:
aa:8e:5d:f2:df:d5:a4:b6:9e:12:17:01:6e:b8:1a:7a:00:a5:
4d:32:b7:35:53:72:c4:b3:5e:43:4c:4f:b4:96:46:e7:e2:cb:
eb:15:41:2c:e7:f0:81:c0:b0:9b:a1:6d:e9:76:0a:78:f5:af:
c5:f5:73:7e:f8:27:db:6b:0e:30:c3:0d:b1:2a:18:36:64:bd:
66:3e:2c:18:c8:a9:c1:b2:55:60:60:47:19:5d:84:6d:11:1d:
c3:d2:53:d5:a7:a6:74:17:f8:97:7e:52:3a:28:7a:da:78:3b:
e3:f5:c1:87:b6:87:d1:e4:44:b9:0b:55:3d:a1:13:31:cd:3e:
55:86:f7:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI+Rthevq/ww49LqIKvcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDQwOWExZDhiMDcyZjdkYjAyNDUyOGI5NzIwMzM5YmRi
YmIxMDYwHhcNMjYwOTIzMTIwMDUzWhcNMjYwOTI0MTIwMDUzWjAzMTEwLwYDVQQD
EygyYzk5NWFkMTY4MjhlZjMwZWRkMjM0NWFmMjczNDE5OTI5MTRmNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/tBVLn1TETo4XS+tw7LyMXmVSY9
dchXLXTnBaZY/riJjqTxu9w8mGr0F06rAOTezvlb+QsGegtVR2Lfj95Q24Dxtc/P
8lzwwItTTyS4hdbAgS9r918TEhESfcZjCB1G6RrMm1Hko4zog7hh7K5LDqZv8FZc
/UzIT0QVEjEJD5D5fwWMIVnWTfNTDoj+8MFDF8IcE7pqleEJsoIi455liHI0M8cE
m2d0lWewPIqcgcOyBNckQZw29Mi8E7VxhQcg7fDxxe/FtecWfzB8M7n+nmp7SnuZ
ctV8JhN6qX3f8HBfRRQD4ADBfmDMR+aJMWLHha06UA/GRc5/qAk+bnoSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyZWtFoKO8w7dI0WvJzQZkpFPVLMB8GA1UdIwQY
MBaAFAVECaHYsHL32wJFKLlyAzm9u7EGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEt
YjE2ZDIxOWIzNTkyLzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEtYjE2ZDIxOWIzNTky
LzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcG6lnBo
hVkYU45FhP19aT8Aey8koZp2pd0pt+o+cOQ4nEPezlv3GRkI/lXqTksT2TRDOQQN
BtzGGKmONnXHYFU512DzJO0uld7HqfzDFrLWIK5ZXzQQYYetjGWLBhncmhjnVmPf
r3YfhS0Hl26ypo+xBA9y9Qwor+UQWrlhqo5d8t/VpLaeEhcBbrgaegClTTK3NVNy
xLNeQ0xPtJZG5+LL6xVBLOfwgcCwm6Ft6XYKePWvxfVzfvgn22sOMMMNsSoYNmS9
Zj4sGMipwbJVYGBHGV2EbREdw9JT1aemdBf4l35SOih62ng74/XBh7aH0eREuQtV
PaETMc0+VYb3kg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:23:15 2026 by rpki-client