
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: xdpPF9JBMTWAVy4yfe6tceiiFjz6NWLVOaY72DbVPeU=
Subject key identifier: 4B:AD:31:0C:78:3A:A3:35:B0:64:B0:90:59:6E:A4:73:6A:B8:36:DB
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019EB76A236750EFD194B739D92B4E4BB16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0AF1
Signing time: Thu 11 Jun 2026 16:00:46 +0000
Manifest this update: Thu 11 Jun 2026 16:00:46 +0000
Manifest next update: Fri 12 Jun 2026 16:00:46 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: hdfbqDvmwPwGxETUIMPhTpHZSbHjrxNC77TYU9ZOql4=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:23:67:50:ef:d1:94:b7:39:d9:2b:4e:4b:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jun 11 16:00:46 2026 GMT
Not After : Jun 12 16:00:46 2026 GMT
Subject: CN=4bad310c783aa335b064b090596ea4736ab836db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:52:d2:08:49:6e:46:8a:de:00:39:09:50:
4f:9f:39:d7:f7:a2:84:60:3a:e3:fb:ec:36:54:20:
9b:8b:51:8c:4b:2b:b3:89:d9:75:e1:74:ea:7a:ff:
b5:a9:fc:45:f7:26:c4:59:a2:dd:17:1c:07:91:f1:
83:e8:8e:77:e9:f6:84:60:37:5a:3b:dc:45:3c:37:
ac:8a:62:76:b4:02:97:ae:f0:3e:96:d5:92:18:f0:
92:fe:dc:53:af:60:17:51:e4:40:4a:2e:8a:cc:4b:
be:3b:5f:4a:6f:e6:69:74:b2:fa:04:38:54:34:6a:
ec:1c:9f:b4:fb:d9:1a:de:01:5b:03:f5:62:be:b2:
fe:4e:96:97:86:85:2b:d9:b6:88:a1:7f:4a:d7:7e:
5d:e4:5c:63:4d:d9:0d:b3:91:35:0a:c2:f3:06:14:
f4:9c:c3:5f:ab:59:4d:f5:b0:1a:15:94:9b:a3:de:
97:40:f3:7d:a6:08:73:26:9e:1e:84:bf:a2:a7:c9:
d5:59:f7:46:86:85:af:8d:7b:43:38:66:c7:7d:ee:
c0:8c:82:e7:02:8f:30:e8:aa:ea:45:fe:8b:02:fb:
96:a6:e4:98:e0:fa:cb:4e:6c:44:29:3f:4c:c3:23:
b7:30:89:bf:ca:a1:e9:cf:9b:c1:a9:7a:5e:ba:d2:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:31:0C:78:3A:A3:35:B0:64:B0:90:59:6E:A4:73:6A:B8:36:DB
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:01:57:34:82:33:dc:f8:60:b7:46:b4:24:25:83:b8:09:2f:
2d:11:9f:0f:ea:19:b0:0e:33:8d:23:2b:06:b7:e1:34:a6:3c:
29:6d:03:e2:62:37:c9:ea:ef:e3:6e:dd:94:50:3f:38:37:17:
04:cb:2c:31:c2:29:6c:2c:c3:2e:f5:a9:44:da:11:f1:a9:4d:
68:9a:c8:a1:bc:b6:fa:76:04:c9:44:9f:6e:39:ac:f9:51:82:
a3:b3:73:75:f7:ba:93:17:5d:f6:62:06:be:3a:b6:bf:d7:3f:
e4:2e:86:83:f1:a8:ee:96:cf:24:ca:8e:52:9d:dd:90:0c:56:
7c:7f:8c:95:d4:ad:37:5f:bc:5a:c0:09:70:11:2e:7b:f2:6b:
f1:9c:ee:ad:5c:37:74:67:61:f0:85:b0:ea:17:70:07:2e:02:
b1:6c:3e:f7:93:25:6a:46:94:6c:6c:5f:e3:30:94:6b:01:3a:
a0:b5:b3:88:0b:58:d2:f4:14:7a:a2:38:a9:22:9b:23:e4:6b:
ba:ed:9d:60:5f:6e:fc:3c:86:b8:d2:18:2b:1e:1e:e0:33:e1:
0b:bb:d5:09:db:ab:46:df:60:42:e2:2a:6b:23:66:b1:e8:d8:
53:a9:f4:ac:65:08:bc:62:e4:e5:6f:06:33:46:4b:e9:6f:80:
a9:7f:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:30 2026 by rpki-client