Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: uHS23nIaPpSB88ema5okTBCDg6GUP286k3gnOFuH8Xs=
Subject key identifier: CB:1A:93:C6:14:BE:44:E9:1D:9B:C1:40:6A:FA:F9:3B:36:2D:45:4D
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 01A08A558D7424BC11189AB57BEE98DB8D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0859
Signing time: Thu 10 Sep 2026 08:00:57 +0000
Manifest this update: Thu 10 Sep 2026 08:00:57 +0000
Manifest next update: Fri 11 Sep 2026 08:00:57 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 3qTrpFiG/xrIe9zATWAK+CA1y1JCLRO2AxjGaE5YjWU=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:8d:74:24:bc:11:18:9a:b5:7b:ee:98:db:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Sep 10 08:00:57 2026 GMT
Not After : Sep 11 08:00:57 2026 GMT
Subject: CN=cb1a93c614be44e91d9bc1406afaf93b362d454d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:b8:90:1d:bf:94:d2:97:23:9f:d5:67:85:
f6:87:0f:cf:19:7c:6b:5c:4c:e9:ee:94:02:a3:23:
83:5a:6b:a4:f4:e6:eb:96:2a:05:96:59:1b:46:48:
54:cf:5d:75:46:64:c9:90:9d:ef:15:cc:03:b8:5d:
1e:42:db:56:7c:b2:c2:2b:2f:02:67:93:09:1e:f5:
a4:6f:ab:97:5c:5b:86:54:50:8a:45:7d:fe:24:5e:
d8:15:09:c9:ee:55:d9:65:1d:74:ad:10:28:bc:0f:
22:90:84:93:dd:9b:03:b2:ac:05:3e:6e:ac:b2:02:
65:ee:a7:90:05:b0:d7:b2:af:9b:f3:35:6a:ea:de:
71:3c:c5:74:6c:ac:26:7c:0a:f9:e1:33:35:5b:1f:
9c:71:00:15:5e:6e:d5:ab:59:bb:7e:7d:da:45:d8:
d7:af:6b:40:97:90:a5:50:91:04:a8:aa:9b:eb:de:
c6:54:46:7e:dd:b5:55:2b:a8:de:74:71:c1:0f:01:
5e:0f:3f:66:2f:ad:83:25:6c:44:94:bc:b2:5b:03:
4b:00:db:a2:ca:b7:1f:07:7f:92:9f:91:39:a5:0c:
28:e9:5b:8a:ac:cb:66:2e:34:2c:54:ab:07:2d:c7:
1e:f9:61:4e:8d:69:40:c9:61:fa:6f:4d:a5:44:0a:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1A:93:C6:14:BE:44:E9:1D:9B:C1:40:6A:FA:F9:3B:36:2D:45:4D
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8b:fb:05:f8:8f:73:5a:c1:9c:f1:bb:22:89:a7:ee:d2:cc:
9e:74:35:b5:09:2f:1d:9a:19:07:1a:41:b1:d4:f5:2d:05:a4:
3d:b4:56:2c:a7:6a:93:42:80:b6:22:36:0b:a6:16:c0:f7:d2:
68:c4:96:5c:73:b7:20:74:34:0f:a3:f1:55:0f:ed:68:7e:ef:
0c:45:5b:b5:ee:98:df:a1:56:8e:03:ce:c6:fe:e4:ce:b4:08:
ac:d3:a5:c5:69:24:54:5f:a8:e6:16:82:77:e2:e5:d1:7f:a7:
51:f1:3e:a9:79:03:d5:d0:ad:2b:24:a3:45:99:9d:bb:ca:99:
66:c1:08:b3:48:c0:98:f7:98:c8:7c:63:67:c9:28:15:61:35:
22:02:80:46:c0:7f:24:43:c7:29:37:ed:ce:57:82:13:3b:c5:
d2:58:2a:2d:39:8f:97:84:81:ba:4a:ba:98:af:32:6d:7f:3e:
d2:8e:4f:5e:91:d5:b4:7a:2a:13:dc:18:52:bd:a5:9d:8e:24:
75:7a:db:e9:0c:e0:b7:9d:1b:6b:9b:3f:72:53:72:6e:6d:7f:
9f:84:90:c4:d6:df:ed:e5:92:ea:e8:a4:85:f9:cf:f1:da:bd:
34:e6:e5:c0:03:dc:1d:0b:ad:c7:bb:3c:8b:a6:50:2d:70:9d:
7f:4f:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:21 2026 by rpki-client