Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: t5rUpVY2P0/rnBKKwi6d2coozU6WRxOY1IjqpRdG0SI=
Subject key identifier: B2:89:45:52:1F:3A:EB:1A:68:DF:9B:47:8D:E8:6B:FA:20:1B:F4:A1
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019F111C5BEC484C4DC7536B52E79C71605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1981
Signing time: Mon 29 Jun 2026 02:01:38 +0000
Manifest this update: Mon 29 Jun 2026 02:01:38 +0000
Manifest next update: Tue 30 Jun 2026 02:01:38 +0000
Files and hashes: 1: 8NckC_oseoG1c4-4ea0CrcpBLdM.asa (hash: 8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: eFASYdP1Xx/hPXewiF8LFCEQwRaur0PCHarR90GJ+dM=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:5b:ec:48:4c:4d:c7:53:6b:52:e7:9c:71:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jun 29 02:01:38 2026 GMT
Not After : Jun 30 02:01:38 2026 GMT
Subject: CN=b28945521f3aeb1a68df9b478de86bfa201bf4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:bd:26:6b:01:27:8c:70:c9:09:b0:04:92:
67:54:97:a2:8c:85:c3:16:3f:be:22:11:72:28:cf:
6a:23:5c:da:e0:fa:e4:0c:f2:f8:f3:b1:23:22:92:
88:95:2b:79:08:a6:57:cb:53:0e:dc:59:ef:80:9a:
14:2d:1b:f8:d3:7d:9b:3a:9d:79:37:df:07:0c:15:
5b:70:b1:0a:a5:d2:50:05:a5:e8:02:b9:14:9d:b2:
a9:60:bd:89:89:fb:65:da:a0:da:c4:5d:d4:6b:30:
89:20:c8:c7:fe:46:11:10:96:b7:4d:a6:d3:25:e3:
25:1f:ba:94:3a:de:cb:aa:88:a1:38:71:99:bb:c5:
90:21:94:6a:67:03:95:70:a8:05:35:fd:53:25:25:
41:89:85:0c:d3:48:20:5f:3f:50:46:88:6b:38:0c:
fd:93:af:1f:72:d9:3b:22:c3:65:61:92:df:86:65:
2a:93:35:42:53:c3:6e:0e:6c:6f:63:2a:f8:2a:fd:
ac:3c:05:7e:a6:34:15:2c:30:22:55:26:ac:bc:d7:
6f:ec:cb:f5:c4:66:4a:ac:0e:2b:5e:d0:91:1e:2d:
11:0d:7c:e3:93:cd:aa:2e:ca:c1:2b:23:9c:1c:53:
8d:9d:fd:01:74:f4:01:8a:5f:cd:a2:ac:b6:39:8c:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:45:52:1F:3A:EB:1A:68:DF:9B:47:8D:E8:6B:FA:20:1B:F4:A1
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:17:ba:cd:3c:82:ee:44:de:85:31:b9:21:d0:de:01:24:9a:
e9:57:58:7a:9e:a8:9c:c3:a2:16:c1:d5:ed:66:16:d7:36:b8:
1b:b0:10:52:d9:0d:22:b5:2c:a0:7d:1a:f0:98:6e:93:2b:e3:
7b:75:c9:c7:4c:5d:7c:d3:94:9c:da:34:1a:d1:8a:69:25:37:
4b:4d:69:3f:d9:dd:6b:c6:93:28:d3:24:bf:50:58:9b:45:af:
19:34:35:62:5d:38:0f:35:6e:90:56:a1:d4:3d:84:e5:86:a6:
c9:6d:d6:70:d6:c6:53:c1:75:51:da:ab:b6:db:ed:18:c4:dc:
ae:b2:1a:7d:72:34:e5:92:c7:a0:69:ea:0f:a5:0f:28:8f:b2:
10:a5:40:96:92:e5:f0:5a:59:29:8b:c0:2a:36:ef:b0:d9:ca:
23:28:ca:38:83:54:27:9e:ec:42:56:5a:f3:d0:4f:6a:3f:d3:
e3:17:2a:99:15:8e:65:96:61:6a:ee:21:2b:fd:c4:0f:1d:28:
1e:88:19:66:bf:0e:25:62:ee:19:4c:65:a7:16:2e:1c:5e:0d:
d5:51:59:f6:7d:29:3e:5a:45:2f:79:7b:a9:61:1b:0a:40:22:
9a:2b:10:7c:f8:06:b1:03:0b:1c:57:4f:f5:c3:ab:a2:41:10:
e8:37:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:52 2026 by rpki-client