Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: YANnt4KloLwNaEQgi0Qw7CtDvyzwJiwGRR24jpcgrLI=
Subject key identifier: C1:A3:32:81:E4:5E:C0:61:54:7A:61:76:1C:DA:38:64:E3:12:56:26
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019D39414E3CA6ABEE31DEAB56791E56057A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 082E
Signing time: Sun 29 Mar 2026 11:01:14 +0000
Manifest this update: Sun 29 Mar 2026 11:01:14 +0000
Manifest next update: Mon 30 Mar 2026 11:01:14 +0000
Files and hashes: 1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: 2CBTUt3+MkdvxHlOYZ6aDw+S34TQHGts6EuGnWTdLyg=)
4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4e:3c:a6:ab:ee:31:de:ab:56:79:1e:56:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Mar 29 11:01:14 2026 GMT
Not After : Mar 30 11:01:14 2026 GMT
Subject: CN=c1a33281e45ec061547a61761cda3864e3125626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:f1:3d:ff:cd:60:52:b5:04:44:b9:1e:4f:
87:11:86:6f:8b:a8:77:af:1f:fa:82:6b:e4:67:69:
40:c5:d6:28:45:84:37:a6:0c:c2:1a:6e:d4:4c:99:
b4:0f:37:a1:93:e3:79:0e:10:6a:17:cb:63:2b:09:
00:0c:9e:90:f9:92:35:9e:e6:2d:56:42:15:41:b8:
dd:69:fe:eb:2a:bc:3f:24:cb:03:16:90:ec:02:a3:
14:1b:67:b4:7f:e3:1d:51:dc:40:f1:83:73:9c:ab:
32:c4:9e:8b:85:f5:76:6f:82:cb:8d:9a:51:28:10:
d5:d7:f6:00:7d:0e:d8:df:b1:14:ca:cc:d0:5c:2e:
9e:8d:9e:96:6f:6b:b7:e6:9a:30:82:6e:25:ee:bb:
2d:71:ba:bd:8a:83:d0:ba:96:92:e1:27:7f:75:e6:
20:06:e9:30:bd:67:b5:c0:7d:e8:d3:0c:47:65:f3:
85:86:8e:12:89:3e:c1:86:26:d2:77:14:ba:0d:fd:
d0:81:cb:0f:75:35:b3:95:03:cf:cf:2d:0a:0a:6c:
c3:60:1e:b1:d6:a7:a5:86:e7:09:0b:8a:d2:e3:d1:
17:b5:f9:e0:6c:83:ec:14:ed:75:b4:1c:0b:42:3f:
12:68:1d:6d:bd:8a:82:32:30:53:f6:51:8a:24:97:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:32:81:E4:5E:C0:61:54:7A:61:76:1C:DA:38:64:E3:12:56:26
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:51:35:53:cb:24:c6:d1:ed:1b:5d:dc:ac:28:7d:96:26:46:
26:34:72:e3:3c:52:02:6c:df:c9:61:25:51:9d:d9:63:ba:88:
89:f9:fa:74:5f:9c:45:12:df:f5:af:01:ca:6a:59:99:ac:ed:
a5:35:e0:15:a5:17:43:5a:c6:ee:e9:1d:e4:2b:97:d7:82:c4:
91:92:ed:87:1a:2b:7f:cf:22:8b:55:ea:fe:bb:87:e4:65:d8:
c1:48:fb:28:00:47:d3:f4:73:de:10:e0:40:c4:40:3f:ef:78:
4f:d5:58:ba:7f:5c:12:1b:94:fc:63:0a:1b:5e:c9:c6:0a:3b:
c9:27:1a:41:7f:7a:f8:80:d7:4c:03:ac:93:06:6d:9d:83:dc:
61:fc:de:0c:d3:03:80:9a:2c:6d:63:14:e8:4e:d0:40:0a:d4:
09:98:69:0f:2c:9b:ad:fb:57:18:37:eb:b3:01:11:38:d3:55:
ea:5e:ad:3e:90:f8:d0:40:b1:32:e7:a1:cf:bf:62:bc:9c:8f:
57:50:11:21:10:66:cc:c2:48:6b:be:39:6d:ab:47:5d:7a:eb:
db:cf:6f:54:df:ea:56:8c:7d:7d:78:1c:6b:e5:7b:9e:b3:6c:
fb:c9:38:10:65:d0:44:e3:78:4e:be:83:2f:88:9a:9d:40:ce:
f6:83:ce:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:17 2026 by rpki-client