Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File: BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier: acNbFU7TWqrq2IR30c20B65IaWiYgffVxu3y9dklRqE=
Subject key identifier: 90:B3:D8:72:B2:B7:09:61:3D:63:AB:BB:08:FE:6B:60:1D:43:E4:21
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial: 019F8F7E28F328775427AC9B6583BA6BE897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 15:00:37 +0000
Manifest this update: Thu 23 Jul 2026 15:00:37 +0000
Manifest next update: Fri 24 Jul 2026 15:00:37 +0000
Files and hashes: 1: BMOqMhDnTJ4X54O_OwDI5UiDaHw.roa (hash: 4LkFNJ7Z7rOiHqQGWcBiJ1mq/59lzHli+QSDHC9WmWs=)
2: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: p5mmuXfttkIl4Fowo83+xU30riduZrokiQZLoocFiHk=)
3: IS6G36HIKhn8504sUv9RDOVhJtc.roa (hash: EFw3QrJ6c/K7ZoKQsk7N9M/h7zGvXJMqojkfvWcO4v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:28:f3:28:77:54:27:ac:9b:65:83:ba:6b:e8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
Validity
Not Before: Jul 23 15:00:37 2026 GMT
Not After : Jul 24 15:00:37 2026 GMT
Subject: CN=90b3d872b2b709613d63abbb08fe6b601d43e421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:90:62:bd:20:fc:f2:7f:f6:d0:93:ad:3b:
21:15:8d:f2:40:24:20:64:d7:ad:df:1c:d2:be:42:
c4:bd:69:fe:d4:59:29:3a:3c:ab:7a:8d:0d:f4:ef:
0d:ce:8e:0a:21:91:33:eb:32:bf:6f:2b:e0:a1:48:
a1:f3:41:3b:47:cf:a8:ef:d2:8a:64:3c:b9:e8:67:
0a:6d:6f:17:a7:20:15:2d:d0:c1:57:03:c1:70:3e:
c4:64:b1:a2:58:9d:b9:cf:98:33:b4:80:3e:29:41:
93:ac:56:10:cc:46:92:f7:3e:f7:49:81:25:96:e8:
7c:54:ac:b6:ac:2c:d3:fe:9b:c4:8d:28:f9:30:23:
1b:2c:d5:da:4e:09:44:d1:17:8a:ab:2f:26:9c:d8:
5a:c5:0c:54:55:ac:be:ef:35:69:1b:14:94:e2:97:
de:a7:d6:28:db:ba:44:64:43:fc:1e:25:d1:46:d5:
f6:b9:40:32:c0:ef:3e:60:87:02:d1:92:30:18:41:
92:b0:18:b1:90:74:85:61:65:e1:c6:e8:b8:bf:ae:
15:c7:4f:f1:9c:31:b0:0c:91:b3:ef:d4:d9:d2:01:
47:e3:9c:ca:cb:d4:6c:90:41:90:3e:68:31:02:3d:
84:c8:9b:51:85:f9:f2:fa:6a:c4:ea:9b:72:d8:88:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:D8:72:B2:B7:09:61:3D:63:AB:BB:08:FE:6B:60:1D:43:E4:21
X509v3 Authority Key Identifier:
keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b5:4a:26:4d:48:6f:b8:6d:fc:93:84:73:fd:3e:ec:83:6e:
49:3f:f1:72:4b:8a:fb:9d:f5:cd:7e:f1:56:6f:22:e3:b8:e9:
0b:e7:56:fb:47:f0:11:20:5c:ad:e1:05:bc:3b:93:6e:0e:6c:
cb:88:81:5b:09:47:4f:5b:7f:47:a6:fd:7e:cc:e6:c4:84:22:
8c:e1:16:3a:d3:b8:1c:95:d0:6c:8f:0f:00:bb:39:ea:8e:bd:
28:8e:14:e8:19:00:06:9b:1f:0a:64:40:ff:11:f9:19:eb:8a:
58:bb:b3:79:58:98:93:0b:47:d6:1d:25:38:9f:fb:46:31:cc:
21:d0:49:5a:33:56:b4:f5:e1:70:bc:a1:2c:f0:39:2d:67:dd:
3c:7a:9a:ea:d0:d7:04:c0:f8:f5:92:13:35:b4:cb:73:14:c2:
69:75:79:67:31:ba:24:2b:bf:57:2a:cf:67:ac:a0:55:1b:4f:
1a:d3:95:b1:94:e2:b2:e2:73:0e:5c:c5:16:ce:46:80:27:5c:
2d:ae:2f:a9:78:03:10:8e:af:e9:f7:c3:ee:65:27:64:00:7c:
79:66:58:9b:c4:99:3a:4b:b4:cb:03:8a:c8:87:f4:fd:4f:5b:
d4:61:1c:22:a2:c0:e5:c5:37:2d:dc:2e:59:ab:8c:e9:75:21:
2d:12:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:20 2026 by rpki-client