Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
File: NuBUKH2-dgYtF3DYPGoWAADbDX0.mft (raw, json)
Hash identifier: sG+dnjnHkdA7smkwYMrcfUH3aVD+UawIN0z4Ux+bPGc=
Subject key identifier: 40:5B:54:92:D6:BD:44:03:0D:D8:42:38:08:15:41:C6:2F:D3:27:3E
Authority key identifier: 36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
Certificate issuer: /CN=36e054287dbe76062d1770d83c6a160000db0d7d
Certificate serial: 019D2704A5234571A9BD2A305BBD36DE228F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
Manifest number: 0832
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: NuBUKH2-dgYtF3DYPGoWAADbDX0.crl (hash: bH0y0SsQVqd+f+ZMh2VNkLcPfb/EppvoFMdcoiW2Vzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a5:23:45:71:a9:bd:2a:30:5b:bd:36:de:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e054287dbe76062d1770d83c6a160000db0d7d
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=405b5492d6bd44030dd84238081541c62fd3273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:0c:67:3d:ad:40:e9:fe:78:65:b4:c9:99:
64:fd:1e:83:62:63:85:3e:8a:1d:18:28:bf:81:88:
0b:4c:6f:be:98:7c:eb:c8:50:7a:ef:94:20:e0:30:
95:da:00:ca:55:5b:88:06:85:db:00:0e:91:18:54:
bb:88:0b:17:fb:b5:73:56:b1:0b:84:4a:4f:86:27:
9d:bb:f8:19:2a:09:3a:65:59:30:4f:0d:b9:5e:46:
98:3b:c6:65:d8:06:08:c5:ae:a9:c4:fb:4e:98:10:
9a:d2:c5:8c:b9:e7:1a:79:85:ed:37:38:4a:2c:84:
28:40:91:87:58:74:64:1f:ae:ea:ea:3e:f7:b2:69:
e7:65:17:ad:b9:6a:85:2c:70:4a:13:0f:d2:05:a0:
97:74:32:9e:66:7c:ef:df:29:9b:aa:d4:13:1a:6c:
96:35:bd:fb:fd:d0:89:64:75:3a:9a:3e:2e:96:7f:
bb:4b:81:e5:50:63:9e:a7:1c:90:b7:a4:6b:8e:d4:
b0:a4:ea:7e:50:1f:f8:5d:d5:68:6b:cd:20:8f:1b:
94:5a:9a:bb:3a:a1:0e:73:20:9c:a2:1a:4a:25:fd:
c8:a8:ed:a3:e6:2f:73:4f:dd:d6:f5:06:92:0a:da:
83:47:96:ba:b2:72:4c:94:f8:2f:43:bc:1f:e9:97:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:54:92:D6:BD:44:03:0D:D8:42:38:08:15:41:C6:2F:D3:27:3E
X509v3 Authority Key Identifier:
keyid:36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:35:8e:32:4d:0d:b4:e3:0e:96:d3:05:29:34:df:df:9b:84:
21:b1:f4:c3:aa:91:bd:4a:7b:1e:31:81:e4:68:0b:a9:47:9f:
12:1c:06:25:eb:c9:ab:ac:1c:35:b5:ae:7f:e2:c2:7e:04:fc:
41:85:a5:ec:62:e0:a2:5b:14:09:3a:a4:62:21:21:b9:59:cf:
b4:69:92:0f:b8:88:a9:2a:36:f8:c1:5e:b8:20:09:27:ea:5f:
f7:94:ea:60:22:a5:0d:96:36:c4:7f:ed:8e:2f:70:66:9d:16:
0d:15:16:98:5c:28:a0:8d:b5:63:c8:87:18:2a:d0:da:bd:0c:
a7:59:55:d7:fa:2a:ac:f9:52:e1:25:1c:ab:48:93:18:dd:b4:
cd:b2:69:78:04:6c:0d:b9:6a:d2:90:2f:55:b3:7a:90:8a:0a:
f8:3a:f8:7d:a9:a9:0d:bd:fd:cc:34:2a:57:cf:58:70:b1:cf:
25:5c:d6:48:af:00:4b:20:3a:7b:e5:7c:54:64:61:4c:6f:98:
e4:d1:af:a8:1b:00:e9:01:cc:73:8d:e2:bc:e1:df:8a:25:45:
a3:ea:c5:da:3e:db:15:d7:87:e1:30:51:29:76:92:25:8b:d2:
ec:63:a8:ac:86:89:07:bc:61:27:d9:ad:19:06:7c:7d:50:1e:
9f:60:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:16 2026 by rpki-client