Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File: buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier: pddWTttM3fr2MMND6tYugUQESrYqN0RFNceViNGeags=
Subject key identifier: 3E:E1:0F:04:76:2A:74:76:98:08:2C:D9:08:E9:F1:A7:60:8F:DA:42
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer: /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial: 019D390A5019EDCA86BF42BC05DB40313372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: 74eYsKt96xBoON+jNgKNgGvIOgAGDlQ962UY5+cSdJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:50:19:ed:ca:86:bf:42:bc:05:db:40:31:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=3ee10f04762a747698082cd908e9f1a7608fda42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:36:4b:f6:92:4f:fb:d5:0d:99:d0:eb:a0:
b9:06:bb:78:f8:28:f7:ad:81:e3:05:e4:84:16:17:
74:ea:f6:0a:66:e3:be:57:b5:76:3d:cd:45:5f:81:
87:29:0a:94:ed:75:e7:00:15:53:e8:b2:b5:d1:af:
b8:85:33:5f:98:e0:ae:5e:d0:f9:b0:12:41:42:1c:
3f:46:12:ae:15:65:da:4e:28:08:6c:11:c5:a3:41:
99:a6:cb:56:d3:19:52:1e:c2:4c:c1:cc:34:d0:4f:
df:d7:0b:cb:bd:87:40:dc:3b:6b:bc:37:50:4c:47:
f3:b5:bc:74:74:3b:60:71:30:b3:5f:e3:b4:3f:44:
a7:90:e7:71:15:e4:95:0d:f3:43:20:39:46:ed:fb:
87:1f:de:55:e1:e0:4c:79:f9:66:6d:72:b0:f0:94:
72:f1:8b:b6:ce:8c:56:05:47:7f:eb:85:8b:c5:34:
ab:4d:62:69:29:d8:32:35:ea:16:d0:64:ed:8c:c5:
3d:15:2e:dd:09:dc:d8:fc:54:22:17:ac:39:b7:d9:
72:7e:32:5a:e8:0d:9f:43:f2:b8:87:4d:87:89:7c:
31:07:f5:16:e9:fa:73:01:42:89:73:0f:25:53:0e:
63:27:8c:af:fe:ac:ba:8a:c6:dc:c4:1b:d4:2d:88:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:0F:04:76:2A:74:76:98:08:2C:D9:08:E9:F1:A7:60:8F:DA:42
X509v3 Authority Key Identifier:
keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f7:cf:5a:48:56:72:5f:a5:06:10:05:3c:27:88:fa:1c:69:
76:a6:14:aa:38:e1:d1:97:60:b2:bc:42:3a:83:6b:1d:cb:a3:
4b:0b:ae:c7:37:aa:cd:25:03:77:84:f2:d3:5e:eb:0e:38:96:
55:36:0a:ca:8e:8a:a6:c2:54:f1:3a:3f:ec:41:0d:18:0f:63:
7c:80:f6:af:4c:ba:4f:d4:3b:20:20:e1:16:fe:ef:ed:14:3a:
e7:8b:90:2e:88:38:dd:56:ef:39:bf:27:58:17:03:81:52:f1:
5a:00:87:09:a3:85:53:40:7e:ab:c8:d9:0c:5d:6f:85:55:54:
bc:9d:e7:64:db:5b:4d:4f:54:f9:2b:6b:43:c9:b0:1d:88:6d:
b4:60:02:14:92:f4:32:2b:05:5e:cf:23:2d:1c:c8:59:5c:5d:
c2:4d:f0:55:24:40:75:ca:d3:aa:f9:ce:2c:2b:6b:13:8b:6f:
af:b1:b8:bd:6c:e2:d6:ab:46:3d:ab:f4:06:5d:96:03:31:f3:
f9:03:c7:fe:d9:43:4c:ac:e7:59:d0:83:1b:38:1f:df:7b:aa:
84:27:03:7b:42:cb:90:c4:62:dd:20:b2:a2:7c:2c:e1:57:f2:
54:a4:ce:c7:b8:9e:3d:32:af:58:46:1c:f7:d1:b8:85:7b:f5:
e8:1f:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:09 2026 by rpki-client