Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: c9d/FtjeaYKDFTPk8j0t5pS3u8GdX550F6uqBLkwYpo=
Subject key identifier: A1:8E:CC:1D:2A:E4:7F:7F:72:E1:84:FA:8B:37:C0:29:7A:BB:85:5E
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019D27A8C0BD66FE1C24736AE80C225F411D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0A22
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: WsIg6Hs8uELJ++NcOYgVFAldo59bZbcRYJpi+FrUQI0=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c0:bd:66:fe:1c:24:73:6a:e8:0c:22:5f:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=a18ecc1d2ae47f7f72e184fa8b37c0297abb855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:60:19:03:ac:96:4c:c4:41:a1:d2:03:7e:
40:97:22:ce:65:45:51:fa:3e:da:b1:5e:b4:96:70:
f2:70:c9:87:c8:ad:f5:93:c3:c6:0e:80:f5:70:cc:
0e:32:dc:d5:82:f2:85:09:c9:1e:d5:9c:98:b9:d4:
02:b3:1a:33:00:8c:16:df:1e:36:bc:40:a8:7e:ca:
45:fd:7a:00:f5:a3:cb:57:6b:15:51:a9:f8:80:e8:
6d:de:71:ee:e4:f2:f7:a6:61:1e:3a:b3:3e:90:c2:
84:82:b6:36:c8:25:c4:46:9f:80:e1:ba:c3:96:1f:
77:27:6e:38:32:11:f8:69:b4:15:2b:b1:8d:05:31:
83:6d:a1:ae:cc:be:4d:b6:67:f4:e0:b2:d1:7b:d5:
2a:9b:07:d7:ed:5d:e9:f8:18:3a:a7:b7:19:ff:2e:
fc:2e:0c:f9:19:a4:4b:e3:eb:3a:3b:86:5e:86:5a:
d0:5d:09:77:af:56:c8:f5:21:e6:75:19:68:46:fd:
47:01:8e:67:f6:1f:7c:bc:69:d3:3c:7f:15:00:29:
06:8e:0b:09:5a:88:d8:e2:f9:3b:ee:5e:0d:47:f6:
96:3b:35:64:3b:d2:db:a7:e1:e9:fe:45:60:5e:9e:
d0:48:59:45:2b:78:f5:bb:1c:cc:f3:c3:1b:e0:ef:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:CC:1D:2A:E4:7F:7F:72:E1:84:FA:8B:37:C0:29:7A:BB:85:5E
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:a0:5d:68:d8:09:4f:3d:14:04:bb:0a:63:14:e6:4e:df:
a2:47:f0:4f:79:68:5f:46:0d:2f:03:9c:8a:e6:45:17:de:bf:
dd:d4:94:a4:32:f8:a7:27:e6:24:1f:ea:91:17:25:3a:e2:a0:
e4:1b:13:09:c4:d4:c3:c6:a7:44:b2:88:45:fa:96:fb:b4:89:
a9:45:37:5f:54:0a:7b:4a:89:3e:d0:37:90:49:76:15:d7:9f:
ec:40:5d:8b:4c:8c:f3:62:8e:17:38:1b:bb:81:b8:ab:46:5e:
83:6a:a3:01:49:cd:3c:71:a4:35:95:28:47:17:58:53:de:28:
2b:7d:5f:1b:3f:9c:60:df:8f:f9:d7:fa:2a:51:ce:34:ce:ea:
17:4e:15:9b:c4:63:10:02:9b:22:9d:97:31:81:f6:80:2a:2d:
8b:46:0a:83:1e:78:fa:0b:17:f6:c3:62:3a:b4:ac:e9:22:1b:
59:e5:5b:33:0e:d9:30:29:63:7f:9e:85:d1:50:00:7d:30:2b:
01:76:31:b0:77:05:4a:ec:d0:fc:62:43:b7:46:af:f0:ba:70:
1d:ad:21:47:eb:66:5c:60:bb:a6:d2:4a:83:58:11:da:0d:d2:
fe:e3:31:63:8a:03:24:46:67:a1:90:da:e9:f8:1e:72:dd:ae:
38:82:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:55 2026 by rpki-client