Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: XnD7PqTE9jfbodkSieECJEpGzQUnbldb7pfuHE2Mo1A=
Subject key identifier: 90:AA:5D:6B:31:C0:0D:68:20:DA:6D:87:00:F0:B4:A4:D0:F7:83:12
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 019E1E357605C0CB88B77F6B57B2CA36AB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 22:01:20 +0000
Manifest this update: Tue 12 May 2026 22:01:20 +0000
Manifest next update: Wed 13 May 2026 22:01:20 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: YSpGkT+3aCNSz3ngRuNffKA8cyzXUcUDhT2pls5gJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:76:05:c0:cb:88:b7:7f:6b:57:b2:ca:36:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: May 12 22:01:20 2026 GMT
Not After : May 13 22:01:20 2026 GMT
Subject: CN=90aa5d6b31c00d6820da6d8700f0b4a4d0f78312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:20:76:82:b5:23:34:b3:96:47:2e:79:d0:
5b:29:ae:f5:2f:91:f1:c8:da:ec:88:3a:c8:84:fe:
58:0d:5b:f2:b3:2d:a6:71:99:14:a4:ab:e6:e4:63:
bc:95:c2:9d:3c:96:a6:ae:29:5e:7c:27:f3:eb:4d:
6c:70:65:eb:4c:95:7a:eb:7b:50:a9:ca:13:b1:e7:
4f:61:bc:a9:dc:51:30:b1:6a:c0:a8:42:c1:cb:28:
bc:1b:c7:67:10:01:e7:87:90:33:3b:d9:fb:33:63:
4b:92:03:86:92:09:f2:6a:3a:64:10:ff:1a:3d:f8:
9e:1c:32:49:29:2b:01:be:ed:5b:2c:ee:59:e0:42:
cc:66:f4:41:ea:99:4f:6c:d3:48:15:a4:73:52:9b:
a3:a4:7e:f3:82:0f:24:91:5a:37:36:61:e9:50:f2:
d0:38:36:ba:3c:60:9b:6c:8f:ab:01:f9:ed:a0:47:
83:ef:ea:a1:49:9f:a5:2e:2b:ee:e8:24:a7:3b:fd:
25:10:f6:34:57:a8:d8:61:aa:2a:07:9f:80:df:16:
ea:2b:2f:e5:36:b5:44:8e:fe:e2:19:b7:64:3c:44:
23:91:95:e1:d8:44:91:b0:b4:65:98:13:a0:26:51:
48:f4:92:6a:44:59:d2:f2:78:60:c5:2e:e6:8f:37:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AA:5D:6B:31:C0:0D:68:20:DA:6D:87:00:F0:B4:A4:D0:F7:83:12
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c7:73:be:e0:49:c7:33:b1:4f:9b:79:44:12:30:13:70:17:
dd:f0:3f:47:b6:67:a8:61:e0:38:68:49:8e:e8:4e:26:e9:83:
6f:69:05:05:e5:1a:58:2f:a3:89:54:4d:c6:8e:ce:bb:b3:06:
81:2a:3c:b2:79:ce:2c:84:e7:a2:09:7f:cc:52:83:4a:66:80:
a3:9c:d4:36:d7:d4:ce:03:7a:21:f0:8c:d8:9d:94:c7:66:57:
f2:73:9d:cb:d4:e2:83:b4:46:3a:20:3f:06:a9:20:f2:06:cf:
63:ae:a3:69:d3:ab:08:ca:68:b1:46:2f:e1:ef:c8:85:f2:b3:
3d:4d:43:76:50:c6:82:b9:01:6b:8d:56:92:c2:50:41:77:fe:
d0:07:aa:0d:08:18:62:a0:9f:c1:34:7f:ae:28:87:87:e7:92:
b8:5c:78:d3:48:68:39:f9:dd:af:0b:e1:3e:cd:1a:8d:1d:f4:
0c:d7:65:95:0e:a7:e2:61:1e:1b:50:92:4e:b1:89:11:5f:9f:
a8:45:ff:9e:f0:bb:68:ce:4d:fe:56:3a:05:4c:a9:7d:b0:1c:
59:cd:4f:ef:d7:27:9b:9e:d3:d6:ef:c2:8a:6c:4e:37:24:ae:
17:4a:1f:48:d3:c1:e2:a0:6f:d6:18:6a:13:c2:d8:ed:37:2d:
0e:10:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:09 2026 by rpki-client