Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File: BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier: t0rF5nQ9cht0wnZww591gwT5UvOCCkkuwG2SjQJGQ4A=
Subject key identifier: 34:73:F3:0D:11:D7:32:76:5D:49:2A:3F:2A:13:4D:59:6A:E4:DD:09
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial: 019D27A8EA403656970FCD46CA1FD86AD9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number: 0384
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: 3XqXrChacCWFZy2Ji6lE1f7dzZNJ9f0nZIzIdJETaao=)
2: D1Th6lDEFurAx_pm_jDakn-9inM.roa (hash: YAb+UIUxPx/AiyjIq91kN/CI5H8M+CVNJCDl00VHGNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ea:40:36:56:97:0f:cd:46:ca:1f:d8:6a:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=3473f30d11d732765d492a3f2a134d596ae4dd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:69:ef:13:ee:f5:eb:b9:a9:d1:1b:50:7c:
65:d6:9b:0b:23:df:e4:d4:09:a6:4a:ac:df:3d:dc:
a6:f6:d8:13:72:7a:f9:20:12:2c:c3:d9:29:78:14:
58:89:f4:4b:52:d2:4f:63:26:1a:7a:5f:df:07:12:
e0:12:f5:de:9c:41:ed:e2:17:98:fa:fa:16:2f:b2:
61:7b:92:f4:03:b3:7b:29:bb:e4:d1:f0:c1:41:e1:
18:2e:ef:7e:34:46:6d:6a:2c:c6:86:d6:0c:07:5d:
58:68:44:51:2d:f1:c0:14:ac:cf:35:96:e6:f8:bb:
51:e5:7d:6b:2b:ba:0a:05:28:b4:d0:b2:ed:9b:33:
38:94:48:a5:b6:e4:c1:c5:24:59:05:69:ef:a9:f1:
37:89:30:c3:61:c3:12:7f:5e:2d:01:42:be:35:4e:
43:e0:7e:15:7b:ff:9d:53:31:32:e7:35:81:e6:ee:
14:5c:ce:37:4b:b7:f4:aa:b5:e2:c9:91:08:24:00:
07:a8:2d:fe:37:eb:45:4e:1b:17:6c:1e:65:26:b2:
c1:6d:70:15:88:c7:b4:f8:36:53:3b:31:7e:9a:b6:
58:ff:45:8f:fe:6f:8f:5e:83:b6:b1:d2:aa:8e:d6:
81:e3:f8:ce:c0:df:a7:2b:21:f2:1d:ec:a8:b0:cf:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:F3:0D:11:D7:32:76:5D:49:2A:3F:2A:13:4D:59:6A:E4:DD:09
X509v3 Authority Key Identifier:
keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:67:47:b0:85:a9:b6:61:18:00:91:1d:a7:97:1b:e4:ca:d2:
b3:24:c3:a6:31:d9:1b:ed:e6:20:aa:4a:45:ad:c8:1a:1b:39:
9b:0c:47:b7:3a:45:7c:26:d9:71:13:25:82:f4:a6:df:ef:44:
c1:e7:e3:7f:6d:c9:7b:10:82:f9:55:16:72:f8:5b:42:6e:79:
15:26:70:c9:30:0e:70:a3:24:dc:75:52:94:13:29:2b:18:a8:
0b:9b:5a:9b:f7:17:1b:8d:31:f1:02:2e:c0:b1:d1:8d:e3:f9:
a1:c2:95:3e:c1:c2:98:07:69:49:03:58:3d:45:93:a9:6a:d0:
88:35:c2:12:f1:e8:c9:c4:9b:d5:16:96:7c:08:67:0c:17:6a:
e0:91:97:b0:1f:20:68:56:a4:80:b6:6b:42:0f:e2:4e:e4:16:
2f:5c:0e:87:c2:83:a9:18:e8:19:18:0a:04:fb:33:20:df:3a:
27:5a:f7:99:39:fa:17:d6:a0:83:5c:15:c3:8a:4a:c5:42:a8:
b1:5a:1c:24:24:6a:cf:5b:62:35:bf:46:f0:0e:ce:f8:64:89:
b1:90:64:a0:d4:94:ee:c8:7e:6d:3a:2d:0c:52:b8:09:c0:43:
9f:9c:6c:49:2d:98:01:ad:20:6d:b9:bc:13:ed:53:79:82:4d:
a6:8b:ec:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOpANlaXD81Gyh/Yatm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDc2ODBlNTNhZTU4OTc0Y2I2OTQxZDA4Njk1ZDNjMGRl
Y2MyYWUwHhcNMjYwMzI2MDEwMTE0WhcNMjYwMzI3MDEwMTE0WjAzMTEwLwYDVQQD
EygzNDczZjMwZDExZDczMjc2NWQ0OTJhM2YyYTEzNGQ1OTZhZTRkZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqVp7xPu9eu5qdEbUHxl1psLI9/k
1AmmSqzfPdym9tgTcnr5IBIsw9kpeBRYifRLUtJPYyYael/fBxLgEvXenEHt4heY
+voWL7Jhe5L0A7N7Kbvk0fDBQeEYLu9+NEZtaizGhtYMB11YaERRLfHAFKzPNZbm
+LtR5X1rK7oKBSi00LLtmzM4lEiltuTBxSRZBWnvqfE3iTDDYcMSf14tAUK+NU5D
4H4Ve/+dUzEy5zWB5u4UXM43S7f0qrXiyZEIJAAHqC3+N+tFThsXbB5lJrLBbXAV
iMe0+DZTOzF+mrZY/0WP/m+PXoO2sdKqjtaB4/jOwN+nKyHyHeyosM9TAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRz8w0R1zJ2XUkqPyoTTVlq5N0JMB8GA1UdIwQY
MBaAFAVHaA5TrliXTLaUHQhpXTwN7MKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEt
ZTRlNmY4ZDdlNzdjLzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xMjI0MGItNzIzNy00OWJmLThmMjEtZTRlNmY4ZDdlNzdj
LzEvQlVkb0RsT3VXSmRNdHBRZENHbGRQQTNzd3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2dHsIWp
tmEYAJEdp5cb5MrSsyTDpjHZG+3mIKpKRa3IGhs5mwxHtzpFfCbZcRMlgvSm3+9E
wefjf23JexCC+VUWcvhbQm55FSZwyTAOcKMk3HVSlBMpKxioC5tam/cXG40x8QIu
wLHRjeP5ocKVPsHCmAdpSQNYPUWTqWrQiDXCEvHoycSb1RaWfAhnDBdq4JGXsB8g
aFakgLZrQg/iTuQWL1wOh8KDqRjoGRgKBPszIN86J1r3mTn6F9agg1wVw4pKxUKo
sVocJCRqz1tiNb9G8A7O+GSJsZBkoNSU7sh+bTotDFK4CcBDn5xsSS2YAa0gbbm8
E+1TeYJNpovsLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:19 2026 by rpki-client