Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier: tjsqtG05ie5GmEE7KhJuQVrqhbxcKnySdXL96kwJVkE=
Subject key identifier: 97:D3:BA:11:07:4B:84:2D:8C:6F:D6:37:F3:43:2E:F6:E3:A3:E2:B4
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019D265EFC6B95E5F9C3B2AF71F9B2456137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number: 01C2
Signing time: Wed 25 Mar 2026 19:00:52 +0000
Manifest this update: Wed 25 Mar 2026 19:00:52 +0000
Manifest next update: Thu 26 Mar 2026 19:00:52 +0000
Files and hashes: 1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: 5qkb2m2pquo1Qbx/+76ZUu/I5+gqEjMKr+6wtSDgHhA=)
2: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:fc:6b:95:e5:f9:c3:b2:af:71:f9:b2:45:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Mar 25 19:00:52 2026 GMT
Not After : Mar 26 19:00:52 2026 GMT
Subject: CN=97d3ba11074b842d8c6fd637f3432ef6e3a3e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:40:fe:d6:be:3a:62:37:58:8b:3b:e9:f6:df:
25:63:2d:3d:21:88:74:a4:9b:5f:14:cd:97:8c:3e:
a3:92:47:42:c2:f9:4e:b0:8c:d5:e2:a0:01:a8:30:
12:68:30:26:c0:fe:65:33:a7:da:01:9f:e9:d7:1a:
1a:41:e0:e3:cd:23:f0:32:20:a1:28:91:e9:11:3f:
9b:d4:84:57:5e:59:ee:7a:55:1e:fa:3a:d3:4d:c6:
6a:23:bc:0b:eb:a4:5f:2a:d1:38:08:1d:eb:8d:de:
68:75:1c:2e:f3:76:76:18:4b:de:00:3b:b6:1a:ec:
22:3a:8e:b4:3d:ff:ea:12:de:bf:dc:5c:a4:bf:2f:
e5:25:2f:05:c7:8a:3f:36:5e:af:23:0a:d4:fb:bc:
0c:de:23:13:fa:a0:3d:83:45:a3:c9:4a:1a:dc:1e:
7e:d0:06:f5:2b:e3:86:ff:79:42:b1:00:98:a3:0e:
25:c2:7c:77:92:09:4b:16:2c:7e:98:c7:3e:99:d9:
a5:d7:35:85:e0:ff:b7:63:d2:8a:86:24:7d:f5:d1:
1d:6f:ee:d4:77:3c:77:2c:86:bc:cc:ab:fd:db:7a:
bb:41:17:85:12:dc:4c:47:c5:87:6a:59:fe:08:94:
33:69:96:79:c3:95:01:39:25:dd:eb:69:f4:49:75:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:BA:11:07:4B:84:2D:8C:6F:D6:37:F3:43:2E:F6:E3:A3:E2:B4
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:fe:31:7e:30:b7:f2:ef:0a:9a:da:4b:5b:f1:ca:e9:46:
c2:b6:55:0b:10:d7:28:17:56:d0:ed:60:3f:67:79:e1:50:9b:
a3:17:7d:aa:c8:51:e5:83:9f:57:91:30:42:92:6c:c2:56:f8:
5e:75:9a:99:68:d4:0c:87:0e:a5:a4:60:71:2f:d8:7f:15:a5:
2a:ce:5d:24:dd:0d:ab:ad:3b:8e:eb:e3:51:68:73:cf:d9:15:
48:75:84:0a:9c:86:dd:98:31:d2:a9:47:68:c5:a7:1f:4c:cc:
b0:84:ab:76:2b:55:91:17:a2:be:b5:02:c4:ea:42:c7:95:2c:
e2:24:69:3f:d0:5f:66:82:4d:67:48:cc:95:41:8b:70:b8:64:
b4:91:9e:01:f5:09:59:f1:11:e4:3e:c9:e5:6c:8f:07:1f:7b:
84:09:5f:2c:29:73:66:9a:a0:b6:90:8e:21:5d:53:30:5b:90:
e7:1c:c7:e2:94:36:9c:31:25:95:5a:e3:49:23:6a:41:89:93:
40:94:33:37:9a:f0:79:25:58:5e:b6:4d:a8:37:08:e6:24:50:
c7:89:3f:0b:55:e8:e3:4c:53:0a:58:d0:53:8a:be:79:25:74:
68:99:30:16:be:ec:ae:26:ba:02:d5:58:c6:cc:74:f9:48:f8:
57:e4:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:40 2026 by rpki-client