Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: zkOTSrk4OqGyvXWKgl1Xnz/8SS/5VGwA/NvfFShBQY0=
Subject key identifier: 60:B8:14:50:9B:75:49:26:63:2E:F5:8F:BB:15:E2:F3:4C:D0:C6:7C
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019E1CEB95864F5CF4765BD3CCA68DE1ECA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0AA1
Signing time: Tue 12 May 2026 16:01:01 +0000
Manifest this update: Tue 12 May 2026 16:01:01 +0000
Manifest next update: Wed 13 May 2026 16:01:01 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: TgH42fbvihYrsVLiyQ5b/I32yeBHuMaNdEMkKqxGCx4=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:95:86:4f:5c:f4:76:5b:d3:cc:a6:8d:e1:ec:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: May 12 16:01:01 2026 GMT
Not After : May 13 16:01:01 2026 GMT
Subject: CN=60b814509b754926632ef58fbb15e2f34cd0c67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:17:56:cf:b1:52:cc:92:15:d2:8c:b7:cb:
1b:f3:a2:f7:13:93:b8:ae:9b:2e:52:96:c4:28:81:
46:c3:8c:50:55:2d:3e:a1:ba:ad:31:3e:60:93:4f:
f4:89:5d:57:e4:16:63:f5:a4:e4:5f:a2:a9:e4:2c:
27:48:3c:b8:52:08:50:09:72:c1:27:68:b3:6a:53:
6e:b6:8a:1d:5c:0e:0d:10:a3:20:e8:82:db:41:79:
92:4d:af:6b:a1:fa:44:fa:9c:2e:e7:12:2c:34:55:
5f:bb:a3:c4:1e:b5:b9:ee:d1:9b:fb:2f:06:e7:b7:
bb:17:84:e6:e8:17:c2:20:db:a9:10:f9:63:19:3f:
19:b6:33:5d:42:20:65:d6:64:f2:b4:18:98:07:24:
a7:4b:89:e9:fc:2c:cb:73:03:6a:0d:00:d7:e3:e5:
60:ed:f2:0d:03:c4:26:80:54:e7:4e:97:51:d2:6c:
cf:82:ec:fe:1c:3a:35:5c:c5:af:05:81:be:d6:0c:
44:ff:50:81:08:e2:50:e2:10:65:c2:a8:e4:64:ae:
c1:bc:cf:47:02:b5:70:1a:51:c7:3e:3c:47:00:aa:
b7:53:ee:37:3c:2f:6e:5c:c4:2c:20:08:1b:8b:50:
20:0a:6c:e5:1b:c0:16:cf:8d:c4:83:a2:38:35:c9:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:14:50:9B:75:49:26:63:2E:F5:8F:BB:15:E2:F3:4C:D0:C6:7C
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:10:ad:81:58:ff:74:ca:0c:4e:36:e0:1d:b2:04:32:b2:
cf:bb:92:e6:92:13:f4:e5:08:7e:b6:e1:96:23:2a:a9:e4:4a:
3a:36:f1:35:12:48:e8:3a:2f:51:a1:8a:91:d1:eb:32:30:9c:
61:0e:26:66:40:8f:d5:d3:5a:8f:dd:73:da:85:07:c5:84:2e:
dc:77:c9:31:ba:d1:5f:d4:b2:3f:f8:92:b5:df:ca:f8:b3:00:
26:bd:69:88:a5:6c:f3:65:f1:35:53:5e:0a:03:e1:9b:80:c4:
8e:71:df:34:e0:dc:4c:6b:48:6e:29:43:20:9e:65:af:7f:c9:
8b:3c:19:91:ca:3b:91:5a:3a:61:60:f1:14:4c:bf:82:27:3b:
17:a5:70:c2:3b:8c:03:c8:c2:20:c4:bb:49:85:5b:27:08:c4:
83:0d:cc:d2:82:3e:39:a4:5f:97:0f:6a:60:ab:e1:bf:4e:7d:
80:5b:26:07:7f:d2:40:e4:37:87:fa:28:66:11:b0:15:dc:fe:
94:16:d3:d4:94:7c:f5:02:b3:1d:40:da:22:cb:02:4c:af:ca:
af:a9:59:f4:f5:4a:39:bd:83:ac:07:b8:3f:4c:7d:ec:d3:18:
2b:76:f4:a7:38:52:9a:c7:06:c8:3f:13:32:77:cc:f9:c6:cf:
6e:75:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:45 2026 by rpki-client