Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: WgNvDPHicucQoQcv3AThJs4bsKZcDfde58u0k3N7+hc=
Subject key identifier: 44:4D:FB:D7:ED:6E:9A:4D:79:B4:5A:E3:11:89:EF:6D:B9:CC:73:BE
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 019D397793E3D6D7E25CC30FDB0D181DCDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 1745
Signing time: Sun 29 Mar 2026 12:00:30 +0000
Manifest this update: Sun 29 Mar 2026 12:00:30 +0000
Manifest next update: Mon 30 Mar 2026 12:00:30 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: G413wV+lqRZPat6f31PFT4OFwMEWinF/Ozz0VrGOvbI=)
2: lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa (hash: CREAI2bwdzAy9LxcYU7uoPR2XEXd4CUfcjb+D4ZYEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:93:e3:d6:d7:e2:5c:c3:0f:db:0d:18:1d:cd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Mar 29 12:00:30 2026 GMT
Not After : Mar 30 12:00:30 2026 GMT
Subject: CN=444dfbd7ed6e9a4d79b45ae31189ef6db9cc73be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:68:05:5d:e6:37:54:a6:0c:a9:1d:cd:71:
da:e0:8e:f2:36:55:60:83:0f:0c:10:9b:54:8c:b3:
6d:a4:b1:a7:a2:11:9a:5a:41:12:1c:94:a4:d1:b6:
10:da:ed:60:9a:dd:fa:db:23:e9:ee:05:f3:45:93:
95:4b:31:bc:d5:8c:a9:96:96:c7:60:9d:83:49:cb:
57:c1:e8:2e:0d:09:73:9a:ff:0c:7a:e9:9d:90:f7:
60:4e:35:cb:89:49:f6:27:4d:df:73:d8:64:c5:d4:
b4:bd:55:40:cb:4e:a5:94:cc:9e:5d:7f:9a:74:bb:
a7:c2:78:1f:3f:e8:86:fa:18:70:e0:65:5a:df:fe:
37:aa:a1:f6:11:6d:ae:66:44:6d:99:5c:52:fe:2f:
ab:ba:dc:33:58:93:10:d2:8e:0c:d6:e1:74:59:58:
b2:bd:db:2c:63:36:18:c9:20:eb:53:c6:53:d0:50:
39:24:5f:d0:00:9f:9d:e5:16:9d:48:32:52:d7:9f:
0d:08:c6:3f:f0:77:4f:d9:6d:82:f9:78:35:d7:75:
2d:8d:a9:5e:54:7d:8a:33:4b:2a:4d:5d:f5:21:56:
1e:be:fc:9e:98:e0:1c:0f:28:12:5c:a5:55:1e:9b:
f8:04:d6:fd:7f:c9:b7:59:4a:33:34:68:40:d2:fb:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:FB:D7:ED:6E:9A:4D:79:B4:5A:E3:11:89:EF:6D:B9:CC:73:BE
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:09:19:21:e7:d6:07:26:9b:b0:00:b2:71:37:3d:e7:75:
6e:95:ad:c6:58:e1:18:f4:45:ff:5c:33:fe:3d:4b:55:24:38:
65:d8:16:a5:02:58:13:37:77:f4:d4:07:8e:73:c1:7f:ba:b8:
7a:4b:d7:f2:fa:d2:4b:e6:69:00:42:04:77:71:b0:fb:26:56:
13:a2:d1:b1:25:e4:d7:86:f0:32:8a:57:3e:f5:3c:6e:e7:0c:
62:14:f9:81:d6:15:fc:6b:4a:b3:66:4e:10:b4:d3:6e:01:f1:
e9:f8:a1:6a:0f:1f:31:49:e2:9b:5c:43:cf:f6:9d:c1:34:38:
52:41:68:6b:cd:b1:ca:ea:07:ee:91:e8:fc:0a:16:81:ba:61:
c7:3b:e9:2c:14:47:2a:a7:cf:ac:54:84:47:57:ad:15:3b:91:
99:cf:c2:63:5e:df:71:9e:dd:79:d2:4b:d1:14:9c:2f:a5:c2:
dc:d2:37:07:8d:33:54:46:5a:65:92:2e:81:93:88:70:ce:12:
71:b3:f0:26:fd:3a:d0:08:c0:31:32:b7:e2:3e:cd:d4:1a:5b:
d8:3d:20:b8:24:8b:d2:70:16:bb:6b:b4:81:58:e2:38:ec:49:
00:a9:ac:55:6e:f4:f0:8f:9b:88:e0:1f:89:2b:ef:13:d7:be:
a1:c9:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:58 2026 by rpki-client