Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier: 1Wx89fHl86kuowni2AC1c5nskjoYRStAp9dGJ40Us1Q=
Subject key identifier: 92:0D:59:27:11:A1:B0:95:9E:3F:7E:77:BD:24:8B:0D:AD:4F:AE:56
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 019D37C0375EB75FD9527A4A288F05CF9948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: 7JIJlTfBX4PS77oE0Mx0OejSM24.roa (hash: fNa36vATsrsor3PYEeM7hTNfoNAesQKtpUagqEla5bc=)
2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: tLydMAglRJhO6V0tth1a/JdApftfHXRh4FGT98Kr9vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:37:5e:b7:5f:d9:52:7a:4a:28:8f:05:cf:99:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=920d592711a1b0959e3f7e77bd248b0dad4fae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:71:f5:b9:19:45:b2:7a:75:fb:fb:92:88:
34:9b:ad:db:01:d7:2d:c0:8e:1b:03:98:45:b3:81:
3e:45:a0:df:45:ff:59:92:90:30:1b:14:03:f0:a2:
84:40:2e:a8:65:3a:eb:aa:b7:20:da:7e:65:22:5f:
7e:43:d3:31:8f:e8:1b:3f:b4:0e:08:a6:91:a8:ec:
70:bb:d6:a0:e7:19:17:17:f3:58:33:ed:0d:d5:45:
4a:b4:09:36:63:28:cb:43:6c:2c:a3:18:71:e6:4e:
99:58:1c:62:da:9a:11:4d:3a:a3:46:78:17:41:31:
b4:65:5a:b1:44:e0:0f:07:5a:1d:d5:e6:e3:7e:2a:
22:4c:6b:8b:ae:01:eb:e8:2d:b2:55:19:19:1d:3c:
90:fe:51:49:75:3b:17:99:22:34:2d:33:0f:e8:c1:
91:64:e5:fc:02:5b:e6:5a:6b:19:c3:38:57:8a:a0:
86:95:85:f4:5e:32:6d:c2:8c:e1:02:3f:15:e9:6a:
2d:aa:b3:46:aa:62:93:e0:8a:a5:b0:2a:0c:3e:06:
a9:b9:e3:06:16:00:40:47:cc:95:84:30:62:40:94:
78:9a:ff:4f:c2:40:4a:c2:d0:33:15:7a:81:4e:52:
80:b7:73:d9:d0:aa:be:eb:ad:25:44:21:65:e2:48:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:59:27:11:A1:B0:95:9E:3F:7E:77:BD:24:8B:0D:AD:4F:AE:56
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cd:d5:1a:97:42:b8:35:49:a8:64:30:12:c2:62:3f:8c:67:
1f:5e:02:2b:d9:02:6a:96:5f:7d:8c:62:18:fc:4c:61:b3:36:
cd:35:4f:c1:45:0a:65:5c:a7:56:6e:b3:e8:b8:2e:21:2b:8a:
ae:18:7b:9a:23:75:27:e5:11:a7:0f:6b:51:fb:83:57:5e:79:
b3:da:2e:78:26:21:49:a0:3f:85:48:9f:cd:10:74:14:5b:c5:
fe:7c:51:2d:cd:21:0a:6d:e5:ca:ca:bf:e5:8e:7a:5f:b2:19:
8c:22:44:3e:ce:b2:13:9b:52:fe:cd:c8:8c:3b:f0:bd:a3:7e:
f9:e5:8b:cf:3f:0a:29:50:8f:f4:56:80:b9:2c:3e:b4:27:ca:
4a:93:bc:30:3f:74:62:90:32:53:fb:4f:6b:1d:96:ed:94:34:
3a:20:57:01:ab:06:ef:cf:d9:aa:8c:e8:01:f1:61:61:0a:ad:
1e:e4:43:72:50:a3:6d:15:5e:b1:53:a4:ef:ff:6b:b0:fe:24:
09:db:27:8f:28:f0:46:a9:6f:39:c8:db:bb:24:19:2a:51:96:
fb:47:e2:9b:ff:07:d5:bb:2e:9d:ba:41:ee:b7:a9:88:bd:9a:
e4:a4:40:03:89:d6:76:c7:b6:03:ea:3b:85:e0:97:15:9b:61:
00:ff:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client