
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: 3IX0uKPz6MT/PgRJh9xzV4lCsHWUE/wU3Fi9Dyb/TqI=
Subject key identifier: 54:D8:72:37:6F:C4:6C:E8:23:18:BB:8F:9F:FA:7C:89:C8:24:04:74
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 01A17BBB8963ABA8C1910252F85AB84468F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 08D6
Signing time: Tue 27 Oct 2026 05:00:50 +0000
Manifest this update: Tue 27 Oct 2026 05:00:50 +0000
Manifest next update: Wed 28 Oct 2026 05:00:50 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: bhnMqU9LbqR9lvmH5843suTYvXld2Z0Y8O6YxoWd6VE=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:89:63:ab:a8:c1:91:02:52:f8:5a:b8:44:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Oct 27 05:00:50 2026 GMT
Not After : Oct 28 05:00:50 2026 GMT
Subject: CN=54d872376fc46ce82318bb8f9ffa7c89c8240474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:6d:56:0c:a4:b5:41:b8:e4:c2:36:be:c0:
f0:4f:4f:7c:55:0f:2f:56:19:5e:43:6d:e8:0e:3f:
e4:11:eb:e8:4a:e3:e4:b1:5c:f2:52:48:cf:5d:8c:
6b:49:c6:fe:d5:5f:fb:cd:18:0c:b2:df:d6:b2:0b:
28:f3:0d:4f:05:ea:39:04:c0:c5:79:9f:97:b7:0d:
40:c0:07:59:3e:64:d6:60:68:8e:56:ca:c8:ea:76:
f5:ce:b3:e0:3c:8c:ed:92:12:f3:cb:ad:c3:15:b3:
2e:5f:a7:ae:2d:e4:0b:4c:7d:4c:e6:ab:c7:2d:73:
9f:a5:6b:22:1e:9b:f2:ec:3f:3c:d0:79:8d:8b:db:
c5:b9:77:5b:92:05:72:2b:88:c6:d3:0c:20:e7:56:
a0:9d:8f:d6:60:05:9f:df:54:26:ce:9d:db:98:e8:
7a:71:f9:2c:13:c8:95:05:9b:9e:5b:d1:d3:9a:c8:
87:b4:b6:a2:f2:e8:c4:31:74:07:7e:e6:20:34:c6:
8f:03:d5:95:21:a0:c0:69:79:ac:13:7a:de:b0:34:
50:07:f1:72:83:a5:6a:58:af:d9:95:0e:ff:b8:68:
48:85:ab:51:b0:1b:26:85:e5:a9:c7:5d:ea:fe:e6:
f5:b2:83:71:e9:bb:df:8b:8f:49:af:63:b7:81:62:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:72:37:6F:C4:6C:E8:23:18:BB:8F:9F:FA:7C:89:C8:24:04:74
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:60:14:72:16:18:7c:1a:43:4d:08:0c:95:1b:af:a3:3f:0c:
24:9f:18:4f:19:ad:55:d0:77:58:19:27:94:e2:49:f9:a2:4a:
45:c0:9d:ef:f8:55:66:d7:09:07:87:c9:7b:9c:fb:88:96:f6:
eb:0e:3e:0c:2e:d5:57:15:0c:04:f3:88:c0:2f:2b:04:66:7f:
b2:eb:1d:96:21:bc:d4:76:5a:a4:02:57:68:95:2d:2d:cd:3c:
cb:80:a2:02:39:4c:c4:49:af:7a:4d:b1:0d:53:7a:2f:e1:26:
ab:f5:f2:ca:1e:2d:f4:5c:aa:de:db:95:55:c3:4c:78:22:c5:
b0:f9:7b:30:a7:a3:4d:63:c9:f3:35:3a:ae:7c:ce:27:4b:0e:
45:84:c8:d1:49:bf:c4:5e:64:87:be:d5:84:dc:81:0b:df:94:
05:1c:49:1e:d8:07:d1:45:6d:99:4d:79:3c:fc:79:8b:6d:17:
76:37:6b:6a:4e:b5:fa:88:f6:28:94:4a:52:98:a5:b9:1b:de:
87:e6:fb:18:17:c7:e7:b3:f9:61:be:c4:a1:d1:c6:4f:84:d8:
4f:4c:4e:f3:3d:76:c2:4d:06:aa:38:fd:2a:e6:3d:62:01:ad:
08:84:fd:6a:28:99:6c:f0:0f:61:05:f5:97:2b:4e:3d:83:69:
cf:a7:fd:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7u4ljq6jBkQJS+Fq4RGj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj
MmY5NWEwHhcNMjYxMDI3MDUwMDUwWhcNMjYxMDI4MDUwMDUwWjAzMTEwLwYDVQQD
Eyg1NGQ4NzIzNzZmYzQ2Y2U4MjMxOGJiOGY5ZmZhN2M4OWM4MjQwNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+dtVgyktUG45MI2vsDwT098VQ8v
VhleQ23oDj/kEevoSuPksVzyUkjPXYxrScb+1V/7zRgMst/Wsgso8w1PBeo5BMDF
eZ+Xtw1AwAdZPmTWYGiOVsrI6nb1zrPgPIztkhLzy63DFbMuX6euLeQLTH1M5qvH
LXOfpWsiHpvy7D880HmNi9vFuXdbkgVyK4jG0wwg51agnY/WYAWf31Qmzp3bmOh6
cfksE8iVBZueW9HTmsiHtLai8ujEMXQHfuYgNMaPA9WVIaDAaXmsE3resDRQB/Fy
g6VqWK/ZlQ7/uGhIhatRsBsmheWpx13q/ub1soNx6bvfi49Jr2O3gWLd0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTYcjdvxGzoIxi7j5/6fInIJAR0MB8GA1UdIwQY
MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt
MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0
LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGAUchYY
fBpDTQgMlRuvoz8MJJ8YTxmtVdB3WBknlOJJ+aJKRcCd7/hVZtcJB4fJe5z7iJb2
6w4+DC7VVxUMBPOIwC8rBGZ/susdliG81HZapAJXaJUtLc08y4CiAjlMxEmvek2x
DVN6L+Emq/Xyyh4t9Fyq3tuVVcNMeCLFsPl7MKejTWPJ8zU6rnzOJ0sORYTI0Um/
xF5kh77VhNyBC9+UBRxJHtgH0UVtmU15PPx5i20Xdjdrak61+oj2KJRKUpiluRve
h+b7GBfH57P5Yb7EodHGT4TYT0xO8z12wk0Gqjj9KuY9YgGtCIT9aiiZbPAPYQX1
lytOPYNpz6f9tg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:31 2026 by rpki-client