Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: SYQZs0fd/ctYRglXp30NubmcTNbmq8stmQRcaasUJUU=
Subject key identifier: D2:43:C8:9E:7D:7B:65:DE:85:69:2A:C0:D2:83:8E:BC:89:81:D5:44
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 01A187BF8E9AD196F5663169DEF719571960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0C66
Signing time: Thu 29 Oct 2026 13:00:40 +0000
Manifest this update: Thu 29 Oct 2026 13:00:40 +0000
Manifest next update: Fri 30 Oct 2026 13:00:40 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: jk72g3+4GjLAjIVNA9/M+Zx4e3AMK8a2geTm2zrN238=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:8e:9a:d1:96:f5:66:31:69:de:f7:19:57:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Oct 29 13:00:40 2026 GMT
Not After : Oct 30 13:00:40 2026 GMT
Subject: CN=d243c89e7d7b65de85692ac0d2838ebc8981d544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:eb:ab:8d:ad:9b:4c:35:d4:24:5c:48:7a:
8e:4a:55:7c:14:6e:33:d9:1b:26:17:34:03:ef:a8:
06:cb:02:43:58:20:1e:ac:e3:fc:4d:1f:10:25:59:
c2:47:42:d5:70:59:a3:15:22:a1:28:44:54:de:2c:
c2:2b:19:bc:c2:5c:23:f1:09:89:2a:2c:a3:db:a9:
77:45:06:58:cd:97:96:bd:bf:45:8a:f8:f2:98:c8:
6f:61:5a:df:eb:7d:51:23:1d:82:32:da:ad:ce:49:
20:7f:fa:d0:35:0b:4e:61:a1:86:ae:9c:4f:88:f9:
01:1f:05:06:2f:db:af:5b:6a:0f:45:ce:04:3a:d1:
be:b7:0d:80:19:8d:01:5a:d6:3e:e7:52:79:22:ed:
e7:2f:bc:a1:21:da:05:c1:59:49:99:6e:ba:0f:03:
da:5e:48:70:c9:5b:9a:0b:49:1f:93:1f:a7:36:73:
30:22:79:4a:dc:d9:df:a4:3b:c8:27:9b:c9:7a:2f:
65:6d:6a:4c:ee:b0:14:6c:ca:94:45:fd:26:04:e3:
85:e5:ae:cc:6a:25:b5:50:e7:d0:e0:94:71:e4:61:
f5:0e:d6:29:35:c7:a2:23:1b:f9:d9:0a:25:b2:52:
e2:0f:a8:64:df:f5:a9:6b:20:05:16:b8:27:d3:1f:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:43:C8:9E:7D:7B:65:DE:85:69:2A:C0:D2:83:8E:BC:89:81:D5:44
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e6:4b:e9:b2:47:09:f5:51:a8:16:3a:7d:6c:19:de:d3:24:
d6:69:e0:c9:4f:dd:6a:a3:fc:d6:fc:67:14:ef:7d:80:84:10:
64:1e:cf:a5:b7:f3:6f:78:22:14:f9:78:f9:a6:7a:08:12:6f:
bc:0e:18:6c:bd:e4:68:fd:83:cc:9b:d6:81:08:d5:b0:7a:4f:
73:2b:55:73:f0:d0:77:af:73:14:62:90:61:a4:01:12:16:22:
bd:d9:f1:1f:c3:9a:b2:ed:c5:4c:3d:58:44:0d:25:e5:bf:ed:
ae:ce:07:44:8b:9e:a1:30:0d:43:07:98:a4:7f:f1:8a:17:71:
f9:80:36:de:f0:9e:ef:ba:1d:21:87:5e:3b:a6:c0:bb:84:19:
91:d1:54:8d:80:d7:11:68:9f:02:3b:ef:f9:2d:85:81:5b:37:
d7:40:ca:ba:b4:bf:16:fb:93:cc:a2:1b:dd:0f:f7:15:c0:42:
95:08:82:fb:e7:cc:b7:80:d5:34:ed:3b:d1:0d:5b:54:f2:88:
2f:fe:70:ba:03:89:dd:6c:19:22:b8:ce:df:68:61:d0:4f:6b:
66:df:84:11:b9:0e:a9:4b:f7:89:a0:4d:88:ed:c9:99:cb:19:
91:8d:d5:cc:9c:fa:48:75:4c:fd:59:57:89:85:01:e0:12:e3:
79:a1:2c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHv46a0Zb1ZjFp3vcZVxlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj
MzBmZTQwHhcNMjYxMDI5MTMwMDQwWhcNMjYxMDMwMTMwMDQwWjAzMTEwLwYDVQQD
EyhkMjQzYzg5ZTdkN2I2NWRlODU2OTJhYzBkMjgzOGViYzg5ODFkNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7zrq42tm0w11CRcSHqOSlV8FG4z
2RsmFzQD76gGywJDWCAerOP8TR8QJVnCR0LVcFmjFSKhKERU3izCKxm8wlwj8QmJ
Kiyj26l3RQZYzZeWvb9FivjymMhvYVrf631RIx2CMtqtzkkgf/rQNQtOYaGGrpxP
iPkBHwUGL9uvW2oPRc4EOtG+tw2AGY0BWtY+51J5Iu3nL7yhIdoFwVlJmW66DwPa
XkhwyVuaC0kfkx+nNnMwInlK3NnfpDvIJ5vJei9lbWpM7rAUbMqURf0mBOOF5a7M
aiW1UOfQ4JRx5GH1DtYpNceiIxv52QolslLiD6hk3/WpayAFFrgn0x+ypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJDyJ59e2XehWkqwNKDjryJgdVEMB8GA1UdIwQY
MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt
OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw
LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuZL6bJH
CfVRqBY6fWwZ3tMk1mngyU/daqP81vxnFO99gIQQZB7Ppbfzb3giFPl4+aZ6CBJv
vA4YbL3kaP2DzJvWgQjVsHpPcytVc/DQd69zFGKQYaQBEhYivdnxH8Oasu3FTD1Y
RA0l5b/trs4HRIueoTANQweYpH/xihdx+YA23vCe77odIYdeO6bAu4QZkdFUjYDX
EWifAjvv+S2FgVs310DKurS/FvuTzKIb3Q/3FcBClQiC++fMt4DVNO070Q1bVPKI
L/5wugOJ3WwZIrjO32hh0E9rZt+EEbkOqUv3iaBNiO3JmcsZkY3VzJz6SHVM/VlX
iYUB4BLjeaEsGQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:01 2026 by rpki-client