Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: VgV0oMiREhNo8Uj/pWEFhTi+j0BiFEoIatuLdwuJAss=
Subject key identifier: D0:E6:FA:EA:9A:89:76:98:18:FC:BF:E3:F1:2C:BC:A3:89:42:0E:21
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019D273B294942FFD1F66FF444C4470047E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0698
Signing time: Wed 25 Mar 2026 23:01:21 +0000
Manifest this update: Wed 25 Mar 2026 23:01:21 +0000
Manifest next update: Thu 26 Mar 2026 23:01:21 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 7qGuqHufl5L4UddobIdBP1lZ0AyGJNZpGXI7/+7X1Cg=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:29:49:42:ff:d1:f6:6f:f4:44:c4:47:00:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Mar 25 23:01:21 2026 GMT
Not After : Mar 26 23:01:21 2026 GMT
Subject: CN=d0e6faea9a89769818fcbfe3f12cbca389420e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:ac:58:70:36:70:2a:73:88:85:2e:15:eb:
5a:93:12:d4:4c:42:10:7f:cc:90:95:69:1a:b1:5f:
8d:f4:1b:02:a5:d2:29:24:f2:21:b4:38:03:e3:30:
9c:59:48:2e:1a:3b:58:f9:b3:af:12:34:51:02:f4:
48:9b:7f:63:0c:77:34:89:9d:82:6c:36:21:3f:a8:
e6:fb:14:b6:ca:0f:24:ce:42:f7:6d:09:34:af:43:
54:8f:a7:ec:23:cc:2c:9d:83:e7:1c:27:61:dc:bc:
6e:44:54:04:12:2b:54:a8:8d:cc:2f:68:eb:af:de:
8a:25:a4:f4:c6:ba:22:bb:81:45:3d:0e:71:51:10:
07:d2:7a:8b:ad:a0:88:3a:f5:19:15:3f:82:9b:6c:
1e:20:f3:54:d2:9f:1b:a8:78:3a:80:6a:97:9d:b3:
72:4f:4d:34:76:b2:d2:b9:10:b5:d3:03:29:ed:e0:
5b:c4:32:ed:00:b2:4c:2b:cf:d4:d3:92:00:93:99:
e1:e5:33:d4:96:07:0f:db:6c:ad:ca:9d:4a:54:12:
0d:c7:d5:a2:fc:5d:3d:63:b1:1e:d5:45:26:42:18:
c4:e8:ad:4f:62:f3:28:0c:9f:43:bc:5e:c3:4c:ac:
2e:e0:31:0d:52:94:17:d1:8a:e6:94:6f:ae:16:d2:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:FA:EA:9A:89:76:98:18:FC:BF:E3:F1:2C:BC:A3:89:42:0E:21
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:98:29:6b:63:b2:6e:bf:a3:e1:90:fb:15:4b:40:9f:04:
7f:41:a0:54:37:28:48:e4:d6:2f:8e:71:0d:ac:38:66:9c:9f:
15:2e:e4:64:b5:87:97:57:d4:95:84:b0:2d:5c:5f:71:e4:10:
94:55:56:85:49:76:f7:87:c2:be:93:17:80:96:1f:79:b3:fc:
07:d3:ba:80:18:0c:03:75:72:d4:1b:5a:12:26:2e:2f:e0:96:
9a:4b:f7:84:93:ac:ac:88:ce:2b:00:67:99:71:c5:05:18:20:
11:05:3b:9f:01:76:59:ce:6d:e0:df:10:f2:3c:5a:9a:03:1a:
15:a4:ac:70:43:55:82:98:46:87:a1:4e:06:6c:ca:7a:d9:36:
6d:cd:58:60:4b:d9:96:4b:76:ae:c9:52:8d:b6:aa:82:af:33:
1f:36:db:7c:15:61:63:fd:43:9a:a0:49:a6:14:04:aa:5f:df:
1a:85:03:cd:fe:17:4b:db:98:00:7a:22:74:44:c5:da:20:7e:
10:05:0b:7e:16:64:74:f4:99:83:0f:b1:a8:40:56:6d:2a:aa:
7f:71:45:f1:f3:98:0d:a4:4d:1e:b2:6e:20:91:fb:af:81:20:
71:8d:e5:65:7b:38:35:d1:7d:70:5c:07:13:08:b2:b5:fc:11:
37:c5:86:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOylJQv/R9m/0RMRHAEflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj
MmY5NWEwHhcNMjYwMzI1MjMwMTIxWhcNMjYwMzI2MjMwMTIxWjAzMTEwLwYDVQQD
EyhkMGU2ZmFlYTlhODk3Njk4MThmY2JmZTNmMTJjYmNhMzg5NDIwZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqisWHA2cCpziIUuFetakxLUTEIQ
f8yQlWkasV+N9BsCpdIpJPIhtDgD4zCcWUguGjtY+bOvEjRRAvRIm39jDHc0iZ2C
bDYhP6jm+xS2yg8kzkL3bQk0r0NUj6fsI8wsnYPnHCdh3LxuRFQEEitUqI3ML2jr
r96KJaT0xroiu4FFPQ5xURAH0nqLraCIOvUZFT+Cm2weIPNU0p8bqHg6gGqXnbNy
T000drLSuRC10wMp7eBbxDLtALJMK8/U05IAk5nh5TPUlgcP22ytyp1KVBINx9Wi
/F09Y7Ee1UUmQhjE6K1PYvMoDJ9DvF7DTKwu4DENUpQX0YrmlG+uFtJcOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDm+uqaiXaYGPy/4/EsvKOJQg4hMB8GA1UdIwQY
MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt
MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0
LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7WYKWtj
sm6/o+GQ+xVLQJ8Ef0GgVDcoSOTWL45xDaw4ZpyfFS7kZLWHl1fUlYSwLVxfceQQ
lFVWhUl294fCvpMXgJYfebP8B9O6gBgMA3Vy1BtaEiYuL+CWmkv3hJOsrIjOKwBn
mXHFBRggEQU7nwF2Wc5t4N8Q8jxamgMaFaSscENVgphGh6FOBmzKetk2bc1YYEvZ
lkt2rslSjbaqgq8zHzbbfBVhY/1DmqBJphQEql/fGoUDzf4XS9uYAHoidETF2iB+
EAULfhZkdPSZgw+xqEBWbSqqf3FF8fOYDaRNHrJuIJH7r4EgcY3lZXs4NdF9cFwH
EwiytfwRN8WG1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:16 2026 by rpki-client