Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: oIhA981qLCBgxNMZs0rSUL9nRgKR5joMOR1uG3SQvcA=
Subject key identifier: E1:95:31:81:D6:78:69:38:F6:59:2C:DF:F5:33:94:18:AA:5E:00:FB
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 019F194462C8AFBBAEBFA008DC83A18D80BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 16:02:19 +0000
Manifest this update: Tue 30 Jun 2026 16:02:19 +0000
Manifest next update: Wed 01 Jul 2026 16:02:19 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: dl+dNetOaD/gShde7FUn1EHEkYG0kV2PE0dYWN6uLH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:62:c8:af:bb:ae:bf:a0:08:dc:83:a1:8d:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Jun 30 16:02:19 2026 GMT
Not After : Jul 1 16:02:19 2026 GMT
Subject: CN=e1953181d6786938f6592cdff5339418aa5e00fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:0f:e5:cb:07:18:c9:51:cd:15:54:5b:ca:
af:4e:2d:17:7d:5a:22:42:be:2f:a6:fd:37:42:fd:
60:e3:35:da:a2:d1:c2:ee:d7:cd:d2:9d:36:06:ef:
42:6e:d2:ba:8e:e2:37:6d:a4:c8:26:71:e6:d4:71:
5d:96:ce:f8:1a:52:33:de:8a:37:0f:98:26:76:a3:
1c:ac:56:4d:08:70:eb:45:81:20:17:31:fb:9e:4c:
3a:37:86:a0:a2:06:92:67:23:c9:08:07:ac:ae:1d:
6b:58:91:b2:e3:b2:3c:ef:ed:da:ab:d3:58:6b:55:
b2:a7:4b:3b:a1:d2:69:59:86:c6:7c:98:43:50:57:
07:ab:90:de:a0:50:ce:50:50:bf:82:6b:eb:ae:e4:
41:67:03:e7:36:91:a2:2c:62:63:31:64:65:ef:7c:
dd:60:a1:a6:5e:1b:ad:65:9c:f0:61:39:09:69:8d:
aa:c7:17:47:97:cf:56:e6:f8:a5:2c:db:3d:0c:a0:
c7:c3:b1:43:0f:a4:eb:d4:85:15:7e:bd:3d:e4:e7:
7e:e8:a7:9e:13:4c:bd:cd:51:69:34:2c:4a:a1:f8:
50:05:8c:39:ed:cb:77:82:38:9d:64:2d:28:b0:3b:
22:61:2c:24:9d:39:f6:b8:c8:53:9c:3c:15:02:ec:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:31:81:D6:78:69:38:F6:59:2C:DF:F5:33:94:18:AA:5E:00:FB
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:06:62:61:fd:ba:0e:c1:70:5d:ad:8a:4f:b9:15:4b:39:1e:
32:a5:84:d9:2d:cf:d4:d1:ba:04:2d:88:08:33:72:81:c1:0c:
2c:c0:d8:f8:b3:c8:da:c1:6c:d4:21:d2:7e:08:96:cb:17:c1:
1c:57:99:c5:5f:5c:90:33:22:a9:98:c4:0d:92:df:22:07:ad:
ed:ef:87:ba:95:8c:48:80:69:46:13:a0:de:80:c7:f2:27:73:
06:b9:50:00:0d:1c:80:7f:f7:98:dd:c3:4e:dc:04:e1:1d:fe:
04:39:1b:dd:85:d5:12:54:db:dc:f1:17:0d:e0:06:ec:93:eb:
2f:69:02:bb:2e:46:7e:72:6a:11:6a:6a:f4:08:b6:8f:f5:7c:
1c:23:8a:5b:41:f4:34:0f:1b:b8:e4:3d:09:d1:f1:b8:c9:de:
05:21:17:f2:73:ea:a9:af:c7:19:8c:bd:e4:62:a6:92:da:05:
2d:8b:a9:d7:5c:3a:4b:49:72:c0:a8:6e:4f:c1:3e:9e:bc:82:
5b:e5:fa:ac:c7:8b:b8:88:83:33:ca:00:8b:fe:26:a1:c5:19:
96:d1:cd:54:fc:1b:ed:e3:b5:b4:24:e2:dc:80:33:27:b9:51:
6c:34:71:76:53:00:e6:c4:55:ad:35:f9:48:c4:d1:aa:b1:ec:
d4:59:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:34 2026 by rpki-client