Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: Fwlb31sE/kPQx8smC6uJbNPKM7wYlCJIl1y/iXMF5jA=
Subject key identifier: 24:1A:C5:90:CB:CB:C4:C8:E3:50:07:69:A8:33:3D:20:D2:0A:60:62
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019DCF3E32612EA6B70E68FA19DD9F07FD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 06EF
Signing time: Mon 27 Apr 2026 14:00:52 +0000
Manifest this update: Mon 27 Apr 2026 14:00:52 +0000
Manifest next update: Tue 28 Apr 2026 14:00:52 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 0e5hb5WNTmQ2mIJmrjB/L5cdKRngArWsY0iUNm86pU8=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:32:61:2e:a6:b7:0e:68:fa:19:dd:9f:07:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Apr 27 14:00:52 2026 GMT
Not After : Apr 28 14:00:52 2026 GMT
Subject: CN=241ac590cbcbc4c8e3500769a8333d20d20a6062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:03:ff:63:69:d8:f8:4e:58:5a:1a:01:2b:
8b:10:48:b9:8e:10:e9:19:96:6f:d3:d3:6a:b9:16:
af:3f:a0:99:39:02:e1:b8:47:7c:98:fa:09:14:d0:
8d:63:aa:58:c7:8b:74:a5:8b:41:fb:2f:75:e1:48:
31:fe:6d:6f:e3:fd:7e:bd:8d:19:04:6d:42:90:8c:
df:5e:0d:15:34:38:ba:fc:b3:81:09:d5:bf:86:e1:
e1:d1:bd:f4:5e:39:d3:d5:4e:21:a9:12:92:8d:b4:
7c:30:1b:41:26:3c:7c:11:67:c0:af:0d:1b:1a:78:
27:ef:38:be:3f:eb:af:9c:a2:6d:e0:89:9d:de:7f:
a2:c4:4e:cd:fe:56:7f:dc:65:6b:cf:9c:dc:5d:5d:
51:b7:12:80:98:0c:a2:97:78:db:6a:87:bd:85:07:
63:ed:e4:0b:58:7e:1c:e9:6e:6d:44:7d:4c:9c:4f:
59:7a:e9:27:56:be:4e:6f:77:a2:8b:fb:db:4e:63:
5f:e5:8b:35:a5:56:4b:ba:32:2b:75:56:19:b0:04:
0d:5c:e3:55:02:2c:42:6b:55:8c:26:b1:ea:cd:d4:
b3:6b:40:b0:cb:41:e7:cd:eb:ae:21:83:e9:04:ff:
13:ef:a9:a9:87:28:1f:8b:9e:e1:f6:63:42:1d:b5:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:C5:90:CB:CB:C4:C8:E3:50:07:69:A8:33:3D:20:D2:0A:60:62
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:1b:c2:31:53:08:37:a0:60:b5:b0:26:cd:13:be:02:2f:
13:ac:04:fd:82:ef:ef:0e:c9:91:c5:19:08:0b:98:9c:44:e9:
d8:47:32:9b:3e:73:4e:c8:a8:d1:63:94:32:46:0e:e0:53:23:
44:d6:5a:bb:66:96:fe:98:e5:c2:ab:7c:e6:ee:9c:e5:19:22:
e7:3a:14:98:a4:10:ae:56:bd:4b:d5:f2:c4:57:fd:fb:3f:a6:
6c:99:f3:d1:6a:e4:8a:5f:eb:bf:5e:03:10:33:2e:e8:12:af:
a3:9c:f5:2c:8d:26:ef:d2:a9:40:50:0b:c3:4d:98:f0:2c:fe:
f0:a5:57:64:f3:3d:36:c5:0f:4b:7e:58:2b:ee:ff:7a:95:22:
60:98:7b:a1:00:b5:36:99:58:c3:e6:94:12:ef:3c:6f:cb:7f:
2d:33:34:8f:89:91:3e:8e:b7:03:33:00:34:bf:41:38:73:5e:
d7:9e:eb:00:d5:4a:cd:5d:44:4a:b7:13:9f:5c:07:2b:44:6c:
54:dc:9c:ed:39:9a:ad:9d:95:9a:57:83:63:d9:6f:f6:e6:ae:
fb:eb:24:84:6b:5e:8d:8f:9f:83:e2:55:3a:99:1b:34:94:8e:
b4:b3:f4:04:b0:fc:e0:a6:b0:bb:0a:f4:8b:9a:d9:b3:cd:70:
35:72:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:48 2026 by rpki-client