Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: Zc/RrKKaKxI74ROD18QejWKxmzJh9ZyBGkum28/cbTM=
Subject key identifier: 75:52:43:91:24:3E:B3:1E:35:73:20:49:06:2F:D4:0E:44:3A:68:75
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 019D3866014A779F9125EBA7F47F9B6BD4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 17ED
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: 2YeI2iTdKuTlvqMe4sOgGCIyYoo.roa (hash: 02/F9yMKiIKlo7hndzCydCS9KD+xiL1gHlJPnwXYt3g=)
2: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: AJREa3SdG2NK0lwNK/m4vAW/vGJvuK6Pu/uIneH2NJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:01:4a:77:9f:91:25:eb:a7:f4:7f:9b:6b:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=75524391243eb31e35732049062fd40e443a6875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:07:61:6d:90:c0:fa:7a:91:51:0c:67:0b:
a8:e7:b1:92:cf:9a:e5:c9:a2:b0:a0:1b:f6:23:2b:
0c:e6:f7:49:88:da:86:55:02:6b:10:cf:74:e9:e1:
89:48:b9:74:52:5a:2e:28:8f:a8:64:7e:b5:b7:ae:
f7:00:18:e3:83:f7:c6:99:e3:52:5f:e6:b3:b7:27:
2b:be:a3:ed:d2:a0:cd:af:11:83:a0:76:d7:7d:87:
26:65:2c:56:f9:d2:85:ee:1a:a2:1d:33:54:52:11:
af:6c:83:7d:28:4a:6a:99:68:0a:94:ba:cc:19:d9:
b7:94:78:46:b5:60:80:b4:f2:1b:37:2b:5d:11:06:
c4:8c:1c:a8:b5:f0:2a:a1:45:fb:31:4a:20:c2:c1:
dd:d1:41:8b:90:95:11:0c:46:3f:a5:ea:ba:94:35:
06:80:47:5f:7c:54:c8:db:db:70:2a:77:f0:40:fa:
89:84:8b:87:27:c7:89:ce:73:1c:f5:04:0a:a1:0c:
9e:8a:63:59:90:d1:41:05:1a:8f:4b:77:fd:16:ba:
04:3a:7b:48:e9:8e:7c:22:71:21:8c:7d:0b:00:7c:
1a:1a:2f:e9:65:fc:09:d4:e6:cf:fb:70:f2:ee:c7:
55:14:96:f5:12:a5:bc:c1:1c:af:9d:a8:6e:c6:10:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:52:43:91:24:3E:B3:1E:35:73:20:49:06:2F:D4:0E:44:3A:68:75
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:0f:09:64:45:e2:59:66:2f:30:5e:50:a6:82:c0:1d:22:
d1:68:6e:71:1f:32:93:92:8d:22:87:4c:ba:dd:93:c7:18:9d:
2a:24:8b:91:e4:33:1e:b9:90:30:63:dd:84:23:70:84:df:de:
d2:71:b6:57:13:2a:e2:b8:ac:6c:3e:ca:af:c5:e0:5b:d7:5d:
03:6f:31:be:69:07:56:0f:a9:d4:f8:ba:d3:41:69:57:62:22:
12:d2:28:64:5c:37:10:8e:b5:af:10:81:75:7b:cd:85:36:71:
c3:e7:1a:a5:b1:17:0c:45:b3:6e:85:e2:94:43:11:97:02:c9:
76:57:78:68:fb:2e:5b:b9:5e:32:98:36:9b:d9:8c:29:bd:36:
75:b7:59:63:38:9e:9b:86:16:c5:46:d2:e8:35:a0:d5:c0:e4:
13:fb:7a:d6:d1:48:2c:72:15:48:a7:a8:f0:73:32:ab:8e:3e:
93:cd:1a:99:46:d4:28:d8:49:95:6b:c6:98:dc:b3:a2:63:c9:
ea:24:88:5a:ea:c6:1b:c0:54:a6:a3:10:a2:43:ba:fe:fe:38:
4d:bc:12:bb:fd:45:0f:4e:09:42:3c:e6:1f:27:f9:34:df:c8:
1a:73:9d:7c:61:d9:17:bf:a5:7d:aa:c2:78:12:8d:48:bf:c1:
58:82:54:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZgFKd5+RJeun9H+ba9T8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYwZGM1MWRmZmYwMTAzNDE5NTk5OTA2MzY1NTcyYjdm
ZTQ4ZmUwHhcNMjYwMzI5MDcwMTQyWhcNMjYwMzMwMDcwMTQyWjAzMTEwLwYDVQQD
Eyg3NTUyNDM5MTI0M2ViMzFlMzU3MzIwNDkwNjJmZDQwZTQ0M2E2ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRIHYW2QwPp6kVEMZwuo57GSz5rl
yaKwoBv2IysM5vdJiNqGVQJrEM906eGJSLl0UlouKI+oZH61t673ABjjg/fGmeNS
X+aztycrvqPt0qDNrxGDoHbXfYcmZSxW+dKF7hqiHTNUUhGvbIN9KEpqmWgKlLrM
Gdm3lHhGtWCAtPIbNytdEQbEjByotfAqoUX7MUogwsHd0UGLkJURDEY/peq6lDUG
gEdffFTI29twKnfwQPqJhIuHJ8eJznMc9QQKoQyeimNZkNFBBRqPS3f9FroEOntI
6Y58InEhjH0LAHwaGi/pZfwJ1ObP+3Dy7sdVFJb1EqW8wRyvnahuxhB8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVSQ5EkPrMeNXMgSQYv1A5EOmh1MB8GA1UdIwQY
MBaAFG7vDcUd//AQNBlZmQY2VXK3/kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAt
NGZkYWUwOWE2NzdkLzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAtNGZkYWUwOWE2Nzdk
LzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmYPCWRF
4llmLzBeUKaCwB0i0WhucR8yk5KNIodMut2TxxidKiSLkeQzHrmQMGPdhCNwhN/e
0nG2VxMq4risbD7Kr8XgW9ddA28xvmkHVg+p1Pi600FpV2IiEtIoZFw3EI61rxCB
dXvNhTZxw+capbEXDEWzboXilEMRlwLJdld4aPsuW7leMpg2m9mMKb02dbdZYzie
m4YWxUbS6DWg1cDkE/t61tFILHIVSKeo8HMyq44+k80amUbUKNhJlWvGmNyzomPJ
6iSIWurGG8BUpqMQokO6/v44TbwSu/1FD04JQjzmHyf5NN/IGnOdfGHZF7+lfarC
eBKNSL/BWIJUMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:56 2026 by rpki-client