Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: tQjEM3CxeD7+MR2R+cSFlUYaGm2SGY+JP+VaMauvofQ=
Subject key identifier: 6D:87:8A:0C:D9:47:99:D4:B1:A9:DD:21:E5:0F:EC:E3:C4:92:28:D1
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 01A08AC3792EF66C55F6866865F860C18352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 0BE3
Signing time: Thu 10 Sep 2026 10:01:01 +0000
Manifest this update: Thu 10 Sep 2026 10:01:01 +0000
Manifest next update: Fri 11 Sep 2026 10:01:01 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: 77ZCDIuGxVuWQoBALuoH7XMDas2cJoxZQFG5H66bjPg=)
2: dAYSnCI6TOnZuGWVtQyMgckZ_to.roa (hash: vAjl3dutNzdbF6jrjjB3t91gI8YjrwgJkBW/aTCNo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:79:2e:f6:6c:55:f6:86:68:65:f8:60:c1:83:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Sep 10 10:01:01 2026 GMT
Not After : Sep 11 10:01:01 2026 GMT
Subject: CN=6d878a0cd94799d4b1a9dd21e50fece3c49228d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:da:62:01:8c:71:b2:11:a4:b1:70:8f:e0:
8f:69:7d:c5:8e:40:9b:04:ce:85:1b:da:36:6f:b5:
d4:68:32:28:15:b4:54:7a:ca:80:14:22:95:5b:b7:
7f:d9:84:d5:b7:ed:53:4e:4e:25:d6:17:1d:1b:b1:
37:8b:11:c7:3f:5f:c9:f3:fc:7c:65:51:2b:c4:69:
5c:7b:7b:8f:b7:bf:1d:c0:31:33:3a:61:ae:5e:74:
1a:99:6f:fe:69:a8:d3:42:c3:11:54:86:34:6c:6a:
7c:fe:c7:dc:e2:5c:b8:c6:33:c2:a9:62:b4:ad:80:
b5:f3:c1:52:be:f4:1a:8d:5c:72:b5:b4:56:df:c4:
3b:f5:63:dc:23:c5:e3:95:7b:8a:a2:2d:31:a5:d4:
f9:e2:29:b4:f2:2d:53:62:d7:0d:88:7d:a7:3b:4f:
dd:f6:fc:78:0f:ce:e6:8c:57:94:76:1a:49:06:0b:
dc:98:08:fd:ac:63:e6:f5:e8:0a:a1:32:89:5d:c3:
6f:dd:54:3f:f3:8c:22:77:34:31:6a:35:83:71:6d:
1e:8f:b8:27:55:cb:14:d4:03:1c:fc:f9:97:10:b4:
40:05:8f:ae:d2:ad:00:0b:71:83:d0:74:72:8c:21:
a4:9e:3a:d0:96:f6:1f:fb:82:e2:66:e6:fa:b7:ba:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:8A:0C:D9:47:99:D4:B1:A9:DD:21:E5:0F:EC:E3:C4:92:28:D1
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:94:f2:79:9e:2d:10:7d:12:c0:81:9d:0d:ba:bf:4f:58:91:
7d:39:bf:6c:e4:5b:39:cf:3b:28:c0:60:9e:e8:1e:bf:8b:99:
24:cf:b4:eb:37:dd:81:c7:31:13:c5:6a:71:1b:13:bc:aa:41:
d5:84:65:d6:95:f2:2b:7f:0a:5c:0f:2a:d8:53:0c:18:f4:88:
33:88:b9:fa:db:54:30:6a:50:da:f4:49:48:7e:c7:d1:ff:cb:
59:95:72:60:5d:3e:92:ff:3c:94:f5:6d:6b:40:a7:74:07:2f:
19:ef:96:04:61:00:87:06:e7:0c:bb:24:cb:c7:38:b3:f1:fe:
86:74:fb:d8:c5:f9:a9:8c:3f:1f:f3:74:4b:80:48:2e:11:3b:
29:ab:d0:2e:88:2b:2b:18:3b:c6:3c:32:43:ea:ba:93:7c:e5:
ef:80:1c:e7:c4:ce:ab:96:1a:a4:33:68:94:ef:8d:e8:0a:f6:
b9:d0:72:05:23:51:cd:c3:71:56:89:57:98:ec:00:4f:23:7a:
51:1b:34:90:85:8e:0c:a1:b1:01:dc:11:f0:57:4f:8c:99:0b:
ea:3d:de:e4:32:ad:1d:a7:04:57:4a:44:35:68:4f:f5:cd:6c:
52:0f:45:fa:59:26:b0:0d:50:79:48:ed:a4:db:de:ed:6f:3a:
29:9c:25:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw3ku9mxV9oZoZfhgwYNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj
MzBmZTQwHhcNMjYwOTEwMTAwMTAxWhcNMjYwOTExMTAwMTAxWjAzMTEwLwYDVQQD
Eyg2ZDg3OGEwY2Q5NDc5OWQ0YjFhOWRkMjFlNTBmZWNlM2M0OTIyOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjaYgGMcbIRpLFwj+CPaX3FjkCb
BM6FG9o2b7XUaDIoFbRUesqAFCKVW7d/2YTVt+1TTk4l1hcdG7E3ixHHP1/J8/x8
ZVErxGlce3uPt78dwDEzOmGuXnQamW/+aajTQsMRVIY0bGp8/sfc4ly4xjPCqWK0
rYC188FSvvQajVxytbRW38Q79WPcI8XjlXuKoi0xpdT54im08i1TYtcNiH2nO0/d
9vx4D87mjFeUdhpJBgvcmAj9rGPm9egKoTKJXcNv3VQ/84widzQxajWDcW0ej7gn
VcsU1AMc/PmXELRABY+u0q0AC3GD0HRyjCGknjrQlvYf+4LiZub6t7qahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2HigzZR5nUsandIeUP7OPEkijRMB8GA1UdIwQY
MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt
OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw
LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZTyeZ4t
EH0SwIGdDbq/T1iRfTm/bORbOc87KMBgnugev4uZJM+06zfdgccxE8VqcRsTvKpB
1YRl1pXyK38KXA8q2FMMGPSIM4i5+ttUMGpQ2vRJSH7H0f/LWZVyYF0+kv88lPVt
a0CndAcvGe+WBGEAhwbnDLsky8c4s/H+hnT72MX5qYw/H/N0S4BILhE7KavQLogr
Kxg7xjwyQ+q6k3zl74Ac58TOq5YapDNolO+N6Ar2udByBSNRzcNxVolXmOwATyN6
URs0kIWODKGxAdwR8FdPjJkL6j3e5DKtHacEV0pENWhP9c1sUg9F+lkmsA1QeUjt
pNve7W86KZwlXg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:39 2026 by rpki-client