Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: y4725SPUY4HP2opOyTJixzgBfJlBi6JrIkYs6BaYMcs=
Subject key identifier: DF:34:C4:A6:64:15:14:B7:09:F7:F4:3F:58:DE:D9:88:75:46:4C:A2
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019FA0A90266639F407B0F1CC47FEC738991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 07E0
Signing time: Sun 26 Jul 2026 23:00:58 +0000
Manifest this update: Sun 26 Jul 2026 23:00:58 +0000
Manifest next update: Mon 27 Jul 2026 23:00:58 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: thEyKgqqGsLReVaaTGamG240YUlxmPfGCmNOLcspO4g=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:02:66:63:9f:40:7b:0f:1c:c4:7f:ec:73:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Jul 26 23:00:58 2026 GMT
Not After : Jul 27 23:00:58 2026 GMT
Subject: CN=df34c4a6641514b709f7f43f58ded98875464ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:ab:3b:c8:ae:79:eb:47:e3:98:dc:4e:66:
30:78:8b:83:74:0a:30:b0:bc:ae:e1:b6:6b:14:07:
2b:7d:08:2f:c6:3d:0d:5b:9c:f9:4c:49:2e:52:ae:
a5:43:50:15:38:11:a0:fc:6a:69:2f:66:2b:39:4f:
98:7d:b3:6e:bd:9f:ed:e9:69:ea:d8:f6:90:09:c8:
6e:7b:78:36:ca:ff:4f:4e:9f:de:e4:1c:46:2b:27:
6f:df:e4:c4:1f:20:9c:80:2e:6e:b4:50:93:35:a4:
90:58:20:48:b5:47:19:5b:15:90:2f:d1:31:62:99:
df:94:4d:10:53:f9:ba:d5:9a:18:94:c0:46:a1:d1:
45:f7:35:10:6e:16:17:c3:7d:4d:28:57:7c:83:35:
f2:48:7b:7c:5f:9c:1c:96:57:96:c9:81:95:b4:24:
b0:43:cd:2d:bc:14:a9:dd:95:b8:71:2f:cb:6a:01:
b8:29:51:ac:3f:88:c4:6d:0b:46:c7:8a:1f:75:6f:
fb:6e:7d:b8:27:d9:7b:f1:ac:cd:78:23:7f:ba:30:
2a:14:11:06:3d:83:1e:2b:24:ca:12:6e:1c:74:c7:
68:d4:4b:4e:c6:5c:9f:18:57:1b:a8:8a:60:3a:49:
88:c2:21:61:11:fe:13:66:4d:fb:c7:f3:1f:c0:9f:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:C4:A6:64:15:14:B7:09:F7:F4:3F:58:DE:D9:88:75:46:4C:A2
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e9:06:58:1c:8c:9a:f1:85:4d:48:a5:ec:47:c4:d9:12:65:
59:d1:b1:e9:e6:62:27:8e:0a:05:52:41:85:bc:c7:d3:ba:22:
a5:0d:e8:bd:6c:83:a6:0c:80:6d:66:d1:1e:a3:1b:26:4c:d4:
d2:8e:2d:2c:38:c7:ec:2f:74:8d:d2:73:e2:ce:fd:a2:5f:4f:
6a:34:31:24:c3:dc:dc:6d:f8:60:e3:b2:d0:39:93:9e:02:e8:
8c:fa:1a:2d:f4:9a:b6:49:b9:f2:7b:de:98:04:16:a0:85:96:
a3:83:b1:30:a2:06:a3:15:c6:01:5e:01:1f:44:1d:4b:c7:a3:
02:cc:e6:c2:c2:ee:fc:5d:79:e0:74:b3:fe:ff:4f:fa:eb:36:
cb:0f:48:80:6f:bc:6b:57:d1:10:54:76:ed:dd:e0:fc:7d:3e:
aa:3c:f3:b5:89:e1:47:3c:a0:be:61:97:99:d4:50:21:ed:25:
e7:a1:c2:1e:f1:7b:ce:3c:85:d4:9d:b2:c3:a6:e2:6b:b6:4f:
aa:6e:30:9c:52:bb:e7:01:b3:ba:4d:c7:b3:39:52:e4:57:da:
1e:d2:d5:75:7a:a3:a3:67:c4:aa:7e:b3:4d:f2:e4:ab:1e:c6:
0f:49:92:c2:b5:37:95:1a:77:7e:35:97:0f:d5:df:77:db:5a:
c0:23:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:50 2026 by rpki-client