Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: 6a0grZfoUhSlvyRY/Ku8rC+ZX+FXzQbLY9VeXe+e4fI=
Subject key identifier: 9B:86:FA:72:82:9F:CA:85:74:2E:A5:34:AE:4C:32:15:DB:2B:CA:7F
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019F9323D8A3F792CA272F6DD58927517B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 07D9
Signing time: Fri 24 Jul 2026 08:00:27 +0000
Manifest this update: Fri 24 Jul 2026 08:00:27 +0000
Manifest next update: Sat 25 Jul 2026 08:00:27 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: Msgp+QXj5oWsAKJh105jdrWat3gcM6rZ2b9aBwJcjqs=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d8:a3:f7:92:ca:27:2f:6d:d5:89:27:51:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Jul 24 08:00:27 2026 GMT
Not After : Jul 25 08:00:27 2026 GMT
Subject: CN=9b86fa72829fca85742ea534ae4c3215db2bca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:05:9d:6d:be:38:ee:b5:b3:28:33:88:89:
92:9b:62:6c:6a:a4:5c:45:8b:dd:b7:20:ab:4b:1a:
6d:af:6c:2b:7d:a4:6b:96:6f:44:de:f3:fb:ac:87:
a6:06:a0:a0:f4:23:84:36:20:84:66:a1:a0:28:81:
d5:93:73:3e:1e:42:8c:66:07:91:e4:74:15:47:c4:
0f:c1:65:71:e4:2b:84:9d:76:35:c4:cd:18:24:5d:
34:8c:82:94:50:04:2e:b9:11:b4:bd:c8:35:06:72:
79:33:d6:12:7a:cf:57:82:df:6f:48:40:32:76:78:
95:de:56:57:66:19:c0:f8:79:e9:1c:86:67:fa:f6:
d5:e8:79:ae:75:5f:d1:52:0e:d3:33:4a:4b:d7:1a:
b7:d7:2f:39:13:0a:dd:54:27:93:18:c8:46:c7:15:
90:4f:df:7c:f2:eb:3a:81:91:95:53:1f:3c:a3:62:
1c:eb:a8:73:7b:86:d5:d6:c5:73:de:e8:98:5f:4d:
29:20:f3:a0:20:46:13:57:2f:41:d4:cb:8d:63:05:
d3:72:19:ee:8d:61:8d:b5:da:db:c3:f8:02:1d:84:
67:ff:c8:ae:a0:cc:90:e2:cc:41:33:b1:6b:02:f2:
4b:cd:1c:61:af:4f:fe:6d:5b:52:a9:0a:a0:18:7c:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:FA:72:82:9F:CA:85:74:2E:A5:34:AE:4C:32:15:DB:2B:CA:7F
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:4e:dc:77:26:22:37:56:a9:76:2c:2e:6a:16:21:af:d3:
23:de:b2:50:d4:ba:80:ae:47:66:e1:4c:41:ce:e3:5a:bc:97:
c7:60:f7:37:04:c2:87:66:76:10:df:7a:d3:ee:12:2f:a2:d0:
24:7f:46:e8:8f:de:33:f8:49:74:71:fd:ee:50:71:d4:77:71:
57:81:78:55:13:54:43:d3:f5:24:41:25:f1:37:fd:1c:6b:48:
a4:ed:b8:20:6c:07:1a:95:cd:f3:a8:54:08:8b:25:b0:3d:a0:
8c:d5:82:70:ff:c8:66:9d:79:ff:64:cb:33:ed:ba:ae:e7:93:
81:d7:1e:57:cf:35:03:22:e9:39:db:87:d1:a5:66:1f:c2:a4:
fb:26:23:af:08:13:9f:8f:98:f0:e2:10:11:6b:41:a5:a9:57:
02:d3:47:cc:e6:03:14:a1:08:5b:c1:4a:5c:8b:77:a5:08:1e:
16:99:2c:03:ed:15:3a:ab:c7:03:2b:66:c2:43:d6:5f:ac:48:
a1:4e:b1:fc:c3:3a:15:83:d8:a5:03:39:68:2a:e2:9a:ea:12:
49:1a:52:7c:a3:95:62:f2:2e:30:a7:84:80:d2:ce:0c:83:f5:
b6:2a:f1:d6:d4:a7:56:26:12:12:db:c5:0e:71:ee:61:53:32:
72:65:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:21 2026 by rpki-client