Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: KsQ+pAUtDs6i0BlGSR8flA0O2ih4pdPE5v4smIeBHAU=
Subject key identifier: F2:65:9A:34:59:59:3C:10:28:42:04:1C:7A:92:D6:00:BB:1E:D4:71
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 019D28F25AFDA50D02982E597C64A9E12AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 07:01:04 +0000
Manifest next update: Fri 27 Mar 2026 07:01:04 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: /iBw4WGQQsUYn8Urla22hbMIfDrKv+SqEs2orhnGB+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5a:fd:a5:0d:02:98:2e:59:7c:64:a9:e1:2a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Mar 26 07:01:04 2026 GMT
Not After : Mar 27 07:01:04 2026 GMT
Subject: CN=f2659a3459593c102842041c7a92d600bb1ed471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:07:17:f1:50:e5:7e:95:b1:25:1c:d4:23:
ca:8c:c8:f7:03:a2:f7:3a:c6:71:12:64:ab:8a:ff:
e7:a7:ed:e1:92:f1:a5:56:50:0e:ac:b9:63:d6:e2:
7f:93:5d:5d:ed:fc:20:4d:0d:a9:aa:66:d5:6a:01:
b9:86:4d:fb:a4:cf:13:be:f5:31:80:87:28:fe:c3:
78:3f:64:3f:7a:b4:df:82:ea:a1:e6:7a:c3:f6:7b:
75:5b:75:65:23:f4:2a:a3:cc:8e:ae:64:9a:d4:3d:
6b:16:31:9c:8f:34:23:f8:2f:2d:cf:52:3b:ba:c2:
ce:e2:05:14:31:e8:6b:fe:60:d6:2a:7f:a0:42:f9:
8b:90:fd:d1:2c:f4:e4:8b:27:45:5d:7e:1d:45:ea:
85:21:a0:87:ed:bd:54:63:76:ae:74:99:20:f8:09:
94:33:a3:1e:ff:36:90:fa:c8:56:15:0e:be:56:20:
07:22:be:e6:ed:13:b1:dd:8c:b7:f7:9c:d2:85:b7:
80:61:b9:5a:24:ee:1e:6a:db:a8:5c:c9:a9:38:41:
76:68:40:26:6d:f7:55:61:bb:f9:b9:37:f1:2a:76:
05:aa:a4:ac:f6:f2:22:a5:68:19:8f:c7:7a:f9:da:
d8:49:70:02:75:81:91:6a:94:b5:04:a0:ab:5d:3c:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:9A:34:59:59:3C:10:28:42:04:1C:7A:92:D6:00:BB:1E:D4:71
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:54:70:6a:02:6d:ec:fb:a4:40:ab:9c:f0:c1:e4:64:bb:a0:
da:4b:29:df:7f:34:c1:31:de:2b:6f:77:cc:c4:82:08:06:ea:
8e:fb:23:fe:07:a0:d2:9a:c1:be:48:1e:af:a9:9a:3e:5c:f5:
db:1f:bc:69:bb:2c:04:8b:f8:5a:43:0b:2a:3a:05:20:b3:bc:
8e:3a:4e:51:f0:61:2c:b1:ef:f4:d5:9d:f0:43:eb:2c:35:49:
a3:03:f9:fd:10:4d:db:38:47:6a:9e:4c:9d:f3:84:0f:f2:40:
39:d2:4f:ff:ef:da:d2:34:30:6e:4b:04:85:7b:91:2e:4f:76:
f3:43:da:d5:10:db:0a:ff:1f:02:46:73:e1:b1:77:29:07:0d:
d2:9c:f1:cc:ae:2f:25:08:f6:bc:a6:e9:10:ac:d5:1e:67:ca:
92:0e:8a:8b:15:d9:80:1b:6d:9e:2f:e0:df:4d:cc:fd:69:49:
8c:22:8a:db:f4:74:d2:24:d8:30:75:5e:dc:35:2a:21:aa:ea:
11:17:d6:3b:c3:81:9e:69:44:f9:d9:ee:7b:f9:a8:0e:e0:51:
fc:01:94:99:6d:ce:65:0d:6a:59:7a:1d:c3:89:15:e5:b5:fe:
cb:fd:e8:e9:e6:74:7e:09:5b:ca:d0:15:c6:f4:21:89:d7:c1:
2e:9c:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:18 2026 by rpki-client