Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier: UDXVdLRsFYmb+izql0hA16B+VGSp5hWg80OAu7Ebv4s=
Subject key identifier: DD:CE:93:C3:4B:CF:04:1F:45:C6:F9:41:0B:2E:A1:AC:FC:A8:BE:3C
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019D37C0CE5208A4A2EAF710C12A070CA5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number: 01CB
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: M7F6SjDJZNyRHkiQr84BG9HshothGKGSIScu4nNjRT4=)
2: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ce:52:08:a4:a2:ea:f7:10:c1:2a:07:0c:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=ddce93c34bcf041f45c6f9410b2ea1acfca8be3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:a8:50:f8:4c:5e:5e:db:02:18:e0:9f:96:
f1:05:5a:ca:89:41:9b:40:ff:10:b5:70:f0:49:65:
e4:cc:83:9a:e1:47:25:aa:bc:cb:7d:36:66:a0:e8:
51:dc:83:4e:10:46:77:20:02:22:b6:e9:6d:58:46:
3f:4f:c9:2c:af:bd:52:c7:05:73:cf:fb:b5:98:24:
e1:f5:7c:a1:6d:f8:5a:c1:d2:46:d7:16:ee:49:c0:
7d:47:86:79:11:86:af:53:36:49:db:8a:55:4f:6b:
7f:56:d5:9d:c7:25:3b:25:a7:bc:6c:a1:49:a5:31:
d7:39:b0:e5:10:83:ed:7a:e2:f0:43:be:cb:60:60:
d4:a0:9f:af:f3:ea:33:04:ff:1c:b5:8f:5e:bc:27:
00:c4:3a:90:f1:6e:55:a0:90:4c:b0:a5:ab:bb:dc:
3e:41:7b:1e:ca:94:9e:4e:f0:fc:f7:24:ff:1a:89:
7f:06:e9:30:5a:bc:02:3d:03:47:86:d5:7e:4c:c0:
2b:f0:1d:c6:41:48:83:d6:38:78:30:9d:6e:17:d4:
fb:27:98:f0:4e:ef:b5:bf:d6:0a:41:6b:b1:b6:05:
ae:a9:2c:0c:03:8b:d8:d9:b2:83:e4:45:f7:54:2f:
1a:1d:85:20:41:71:69:48:7c:aa:13:b7:88:8e:37:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CE:93:C3:4B:CF:04:1F:45:C6:F9:41:0B:2E:A1:AC:FC:A8:BE:3C
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fa:07:1d:b9:53:e6:16:bd:c7:e9:59:65:e5:7f:32:bf:5c:
dd:52:bf:fb:3a:e5:97:25:23:cc:88:94:36:c6:28:08:f1:c8:
7b:f7:a2:ef:03:69:41:62:67:28:9a:cb:ac:44:74:86:6b:d5:
f5:03:2a:f8:8c:86:74:f8:3a:a1:25:e4:9c:9b:2b:94:88:04:
32:e7:cb:e3:93:9f:c1:01:fe:6a:61:bf:be:57:2d:8e:7c:f5:
65:22:05:1c:b3:d5:8f:f3:fb:45:11:21:f1:54:25:50:b2:48:
9d:6a:e6:49:f5:02:e4:07:a3:7e:bc:57:35:c5:ca:f6:46:5d:
2e:fd:fb:ca:18:cb:33:b6:fd:70:96:dc:66:2e:82:69:58:fe:
c6:db:3c:5c:e6:7c:50:86:46:a7:4c:2a:5b:ba:93:42:b5:bf:
d3:99:32:59:6d:3a:e1:7e:15:2d:9d:e7:68:61:47:07:46:84:
ea:5e:f9:be:e7:d0:7c:d1:ef:70:c6:31:91:a1:2b:da:f0:03:
c5:d1:c9:7b:f0:6d:0a:e5:25:50:1f:ce:b1:6b:45:65:dc:80:
cb:30:b9:6c:c3:66:5a:70:7a:e0:0b:17:d8:26:c2:63:74:65:
19:29:f5:e2:e7:ed:6a:ac:f5:58:97:96:5c:b2:85:fb:c0:d1:
94:f3:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:36 2026 by rpki-client