Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: +3H0qLzO8wBPBt38Sxl2za6LN+tVKQ+dNHaNzaNJJEs=
Subject key identifier: C4:87:E9:79:9E:63:6F:6C:9A:FD:AF:6D:3C:67:BD:1E:E7:BC:28:5B
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019CE3A35097B0DE2FEFD68FBE9E2F84BA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0675
Signing time: Thu 12 Mar 2026 20:00:56 +0000
Manifest this update: Thu 12 Mar 2026 20:00:56 +0000
Manifest next update: Fri 13 Mar 2026 20:00:56 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: G9a2R+1nsZhtTtyyZQ2vXmPTcrni5Om1DayPGg8/1uM=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:50:97:b0:de:2f:ef:d6:8f:be:9e:2f:84:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Mar 12 20:00:56 2026 GMT
Not After : Mar 13 20:00:56 2026 GMT
Subject: CN=c487e9799e636f6c9afdaf6d3c67bd1ee7bc285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:20:00:29:14:dc:3a:b4:7f:28:22:f6:36:
d2:9a:f4:5e:f4:73:e3:95:20:bb:05:52:58:7e:24:
c7:58:21:97:82:d2:63:ad:d4:43:e0:bb:2c:6f:1b:
61:4e:2c:0a:a4:0b:63:9a:42:fb:93:12:5e:5a:b5:
c1:ab:e2:d6:4b:24:8b:8e:e8:dd:e2:82:0a:13:a0:
5c:45:d9:9b:ee:46:9d:a5:30:6e:05:ee:21:9f:d9:
2c:3a:76:d3:3c:ae:50:0b:14:28:37:6a:eb:d1:c3:
9a:d4:c5:af:d0:b4:71:8b:8e:81:01:32:2f:f3:4c:
b8:3d:dd:5a:4a:0b:9c:a4:2c:8b:cf:80:00:3c:e4:
e2:eb:97:02:ba:80:a9:76:27:6e:d4:97:d3:11:ae:
05:86:e0:2c:22:7d:40:de:e0:28:3d:ab:29:0b:7c:
61:f4:fa:45:81:e8:84:0a:ba:b6:3c:fb:f9:33:3a:
f3:da:0d:99:2f:a6:98:ca:c1:29:d8:6f:b0:4b:79:
55:a3:62:90:74:dc:ee:07:d4:29:bb:86:26:b7:ec:
8b:80:4a:36:ab:bb:18:52:88:03:0f:83:e4:6c:f6:
4f:4f:de:1e:05:94:69:26:75:1a:9b:4e:8d:d4:7e:
d4:e9:f0:c9:23:ad:05:f8:8b:2f:34:30:26:ac:e0:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:E9:79:9E:63:6F:6C:9A:FD:AF:6D:3C:67:BD:1E:E7:BC:28:5B
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d1:48:d2:5d:38:67:b6:cc:e7:30:8b:81:24:5a:f6:2d:05:
f8:d2:6c:3b:a2:fb:46:2a:72:36:4f:ec:90:cc:9b:b9:f7:a0:
4a:73:91:d4:99:5e:6d:46:b6:4b:24:af:9e:d8:73:f5:b1:05:
8b:2e:3e:db:02:dc:29:cb:4c:b3:da:32:ff:18:f9:2e:b5:e7:
ff:90:bd:30:3c:01:89:95:1e:e0:4e:47:02:54:5c:7e:ac:8a:
02:d6:44:b3:c6:3b:61:89:ac:e5:c3:34:ff:84:23:17:21:7a:
c4:02:32:e3:dd:76:8b:0b:64:29:8c:82:85:f3:e8:1e:5f:ce:
7a:9d:39:33:31:4a:cc:c3:f2:dc:32:17:23:d9:fb:70:59:84:
9a:7c:e8:4e:3a:c5:fa:27:a2:2f:c6:36:25:fd:25:27:8c:be:
76:20:23:ce:4a:9a:a1:5d:e0:af:c2:00:79:68:96:48:2f:c7:
bd:91:ee:1f:5c:42:ff:30:1f:bf:e2:0a:e1:d7:b9:06:d1:db:
59:84:d1:05:0e:fc:87:44:72:e0:00:d7:ca:da:62:a4:6b:a0:
a8:05:d3:b0:f6:e6:4e:21:77:84:cc:c6:4a:94:03:13:e1:be:
cf:12:07:11:44:ba:71:99:07:38:5e:c2:9c:1b:03:3e:03:aa:
5a:59:7f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjo1CXsN4v79aPvp4vhLoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj
MmY5NWEwHhcNMjYwMzEyMjAwMDU2WhcNMjYwMzEzMjAwMDU2WjAzMTEwLwYDVQQD
EyhjNDg3ZTk3OTllNjM2ZjZjOWFmZGFmNmQzYzY3YmQxZWU3YmMyODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIIgACkU3Dq0fygi9jbSmvRe9HPj
lSC7BVJYfiTHWCGXgtJjrdRD4LssbxthTiwKpAtjmkL7kxJeWrXBq+LWSySLjujd
4oIKE6BcRdmb7kadpTBuBe4hn9ksOnbTPK5QCxQoN2rr0cOa1MWv0LRxi46BATIv
80y4Pd1aSgucpCyLz4AAPOTi65cCuoCpdidu1JfTEa4FhuAsIn1A3uAoPaspC3xh
9PpFgeiECrq2PPv5Mzrz2g2ZL6aYysEp2G+wS3lVo2KQdNzuB9Qpu4Ymt+yLgEo2
q7sYUogDD4PkbPZPT94eBZRpJnUam06N1H7U6fDJI60F+IsvNDAmrOBP/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSH6XmeY29smv2vbTxnvR7nvChbMB8GA1UdIwQY
MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt
MDgxYjE3OTkzM2M0LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0
LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdFI0l04
Z7bM5zCLgSRa9i0F+NJsO6L7RipyNk/skMybufegSnOR1JlebUa2SySvnthz9bEF
iy4+2wLcKctMs9oy/xj5LrXn/5C9MDwBiZUe4E5HAlRcfqyKAtZEs8Y7YYms5cM0
/4QjFyF6xAIy4912iwtkKYyChfPoHl/Oep05MzFKzMPy3DIXI9n7cFmEmnzoTjrF
+ieiL8Y2Jf0lJ4y+diAjzkqaoV3gr8IAeWiWSC/HvZHuH1xC/zAfv+IK4de5BtHb
WYTRBQ78h0Ry4ADXytpipGugqAXTsPbmTiF3hMzGSpQDE+G+zxIHEUS6cZkHOF7C
nBsDPgOqWll/Ug==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:43 2026 by rpki-client