Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File: BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier: AoqayPlcCLTNRNII/ZXlUxxJnYFLoe/PPdrjnsvoeLc=
Subject key identifier: F3:FB:F7:A1:7C:73:CF:01:01:F6:7E:11:D7:28:2A:4B:6B:31:67:86
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 019D2771BFCF59F8410A4192EF6BEF9DFC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number: 0658
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: 3aMsHVbtxR6xNK6VJ7EibqbZDMzHV4KC1EecsE32VBo=)
2: CNtUCdbHYVJYM90-O1mKKO2CEmA.roa (hash: obwLgv1NBdrIy8lfJRJyvaXbfk0zSRfq9qV7ZZ7iDjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bf:cf:59:f8:41:0a:41:92:ef:6b:ef:9d:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=f3fbf7a17c73cf0101f67e11d7282a4b6b316786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:00:a1:cd:7b:26:fe:ec:72:b1:63:56:aa:
59:f8:70:fc:0e:ea:56:0b:b7:d7:a4:f2:61:87:61:
cb:52:2d:37:67:1c:b4:92:a5:37:57:3b:d9:a9:18:
c2:ea:d6:a0:30:ad:88:94:ff:6f:2f:c4:91:4f:73:
28:0f:fe:7d:cd:2b:3d:a1:99:ce:48:2c:d7:49:59:
c8:74:9c:af:82:96:0d:8e:52:12:06:dc:f2:51:ee:
da:be:c3:52:da:e1:ff:c5:82:94:fc:86:08:27:c8:
34:4d:8c:85:22:90:ae:cc:ad:c7:6e:55:da:41:a8:
ab:8f:15:f9:38:bd:c6:15:df:a1:0e:d4:74:9d:bc:
77:21:c1:c8:0d:be:e5:7e:ee:6c:a0:8f:a0:e1:20:
38:1c:45:92:af:df:eb:6f:b6:4f:24:2b:65:7f:d3:
d7:ac:e4:55:3a:04:a0:c0:0b:b4:af:e1:72:69:8c:
5a:c3:d7:41:50:56:ac:56:f7:cc:b8:02:a3:63:76:
e0:b3:8c:14:be:cb:5e:3c:b9:91:dc:68:f2:62:70:
21:7d:90:92:c9:9d:96:0d:26:6a:84:bd:e2:76:cb:
b0:42:b5:5b:25:90:1c:2e:63:c1:c6:d9:52:62:3b:
ff:f8:85:f0:33:6f:39:17:6a:ca:bb:33:c0:80:86:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:F7:A1:7C:73:CF:01:01:F6:7E:11:D7:28:2A:4B:6B:31:67:86
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:45:6a:46:f3:5b:e5:4a:97:ce:15:f0:c5:98:b2:9c:18:
a6:6e:0a:a9:e5:fe:b3:6e:82:1e:47:75:6b:1a:e3:c3:eb:87:
67:d0:a6:42:92:6e:a3:cc:4e:47:ad:e2:44:32:fc:d9:dc:17:
72:7c:7b:35:9b:e1:29:3f:de:d9:60:1b:85:a7:af:cd:cf:62:
d9:9b:b9:47:a9:9d:08:f8:6e:2b:7d:42:e4:ce:49:d3:10:23:
10:0d:10:46:03:08:d1:95:5f:3e:26:a1:04:e8:91:31:84:a7:
d6:f4:38:1c:cd:54:56:2a:47:81:a9:a6:2d:d3:85:3e:36:25:
1c:5e:70:5d:fc:64:18:6b:e5:d8:ab:ed:32:b5:ac:64:0f:09:
57:57:74:ab:85:9f:5c:2a:e6:b4:e7:d2:2e:b7:6d:d3:0f:4f:
65:a4:b5:1d:e3:9f:33:fc:d9:f3:ea:30:2d:f8:98:2a:08:41:
ce:3a:c1:ec:b9:d6:68:b8:08:b6:3c:10:23:e2:9b:ab:48:06:
05:d5:04:e8:12:81:7e:1c:4f:e2:47:0b:3e:d3:c6:66:ef:cc:
58:7e:28:69:0e:38:8a:84:05:b5:bf:d4:eb:f7:ef:17:39:96:
a3:44:25:6a:35:5c:aa:b9:39:40:35:6d:cf:d6:de:6c:53:4a:
a2:15:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:45 2026 by rpki-client