
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier: eRr+wsUauqBkrPtl1N6xj0dgmEL9B9hRN2HbEreIGGE=
Subject key identifier: 78:83:3F:D1:7B:27:6B:08:11:BD:00:D0:71:AE:8C:0E:9D:B2:33:CC
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 019D3865A632286F22C2CC44458C352EF64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: /NGsiLKrBb1YZ8rCVszrZoFQcYFXHiGQ8Sfs5HuFYAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a6:32:28:6f:22:c2:cc:44:45:8c:35:2e:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=78833fd17b276b0811bd00d071ae8c0e9db233cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:c9:63:51:2f:78:5f:5e:6a:23:ae:da:38:
42:91:d9:bc:24:a7:3e:d4:27:e2:e3:e8:aa:8e:41:
ba:97:df:4d:34:68:8a:d9:5c:03:a7:e0:08:ce:39:
cd:8e:14:49:18:3b:87:2a:1a:6e:df:c2:d0:4e:bd:
ff:44:4a:43:eb:55:59:9a:de:b6:fd:02:a2:e5:8f:
b1:ec:e0:c8:35:a7:7f:8e:09:4e:a9:77:af:b2:00:
7c:6e:ad:63:3d:ff:3a:0c:b3:7b:e2:93:00:ec:de:
49:0b:bd:66:88:de:a3:e9:db:74:63:de:d2:ff:96:
b1:9b:88:ad:cb:2e:fd:78:62:4d:30:ec:9c:08:53:
07:dd:f5:0f:1d:07:82:1e:dd:74:f0:2f:7c:f6:9c:
4f:c5:31:a6:02:4b:50:4e:bd:79:6d:28:2d:e9:cd:
87:ae:a2:b6:02:49:be:8f:76:e9:ae:ea:a0:70:48:
ee:89:ce:6b:03:a7:0b:49:b2:b1:8a:d4:95:0d:62:
66:99:13:6f:91:f1:f4:88:e9:c2:39:7b:07:83:28:
8c:0c:c1:52:6b:68:6c:bb:ec:9d:85:c8:3d:49:ce:
6b:bc:12:f0:b6:10:86:cf:bf:d3:2c:9a:7c:66:bb:
0f:ac:8c:ad:b8:e6:be:5d:19:56:6f:91:d4:e3:1a:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:3F:D1:7B:27:6B:08:11:BD:00:D0:71:AE:8C:0E:9D:B2:33:CC
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:83:6a:69:e5:c7:94:a1:8f:5d:06:b5:77:fe:3a:87:c6:
c2:3c:dd:34:2a:9b:9f:eb:ed:8d:1e:db:27:10:b3:3f:27:1e:
45:05:07:54:51:49:6d:b0:44:35:ba:b4:b7:ad:1e:9d:54:63:
4d:a0:57:05:d0:d8:bc:99:0f:9d:53:75:ee:03:b0:ff:c5:bb:
e0:ac:72:22:eb:38:66:1e:e6:26:e3:61:f1:56:bb:19:39:8f:
7e:4e:13:8f:7c:10:c6:52:a3:76:a5:44:80:01:12:82:71:7e:
70:08:4a:63:b9:85:3c:8a:e1:1f:31:7a:90:d4:d0:14:0a:55:
6d:77:31:13:31:b6:1d:c0:35:61:87:4f:e2:03:42:9e:15:c3:
a4:f8:db:7c:be:de:27:46:17:13:9a:f0:be:a8:b4:1e:d5:0a:
c6:b9:5e:87:37:82:8a:b9:47:3d:db:7d:df:fe:11:d4:4e:a8:
63:1e:9c:98:f9:d8:ed:ce:c9:cb:ae:06:05:c7:cf:38:7b:1a:
18:fe:6c:56:09:d6:dc:4d:c6:2a:d9:a2:7c:3b:04:7e:71:1d:
66:c0:17:6c:e7:56:e1:0e:ca:12:94:ce:68:0f:8f:31:0c:7e:
b1:30:fd:16:a4:de:4e:af:23:8c:79:86:3d:7f:05:73:8a:81:
99:92:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:01 2026 by rpki-client