Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: GZcNn/LSqv8PM8VHLP4IgHqsqsjIjoztakpbZczQKB0=
Subject key identifier: 06:FC:B4:D4:79:28:80:B4:E2:58:F9:1C:A3:73:0C:35:B9:F0:A1:87
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 019EB8EAC4CA30140E98B507174FB1466D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 0768
Signing time: Thu 11 Jun 2026 23:00:53 +0000
Manifest this update: Thu 11 Jun 2026 23:00:53 +0000
Manifest next update: Fri 12 Jun 2026 23:00:53 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: Rnmp/qFicJjbJHAnPDxq7G7rWHVLoQfy6MxUln3eu9A=)
2: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (hash: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:c4:ca:30:14:0e:98:b5:07:17:4f:b1:46:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Jun 11 23:00:53 2026 GMT
Not After : Jun 12 23:00:53 2026 GMT
Subject: CN=06fcb4d4792880b4e258f91ca3730c35b9f0a187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:5b:7f:4d:04:f2:ac:20:cc:5a:6e:39:f8:
12:66:8d:2c:15:ad:7d:53:29:90:29:98:4a:1a:30:
8b:85:04:3a:bd:f5:6a:7b:45:1b:7e:0f:77:b9:c4:
67:2b:1d:f8:4b:7f:a0:78:36:4a:9a:dc:b6:ca:93:
29:20:32:72:cc:19:af:95:ea:e2:f6:87:fe:b4:92:
8b:76:40:b2:a0:82:ad:fa:91:aa:85:da:2d:8d:8a:
02:66:ba:31:c5:72:93:8f:dc:7d:c5:aa:de:e2:1a:
2f:07:62:d4:55:ae:c5:35:22:7e:7f:2c:cd:5e:7a:
d6:1c:5a:fe:95:b1:36:76:c1:d9:f2:42:f4:ae:6e:
83:0d:52:74:a6:e2:f8:f6:46:e1:df:f2:20:3b:9c:
86:97:1f:d7:e4:69:25:70:5f:39:f8:e7:13:36:f7:
c1:1b:3f:83:ab:cf:1a:41:00:f4:1f:ec:ae:4d:bc:
ef:13:e4:21:1a:4a:51:97:fa:0d:23:60:96:b2:95:
98:21:12:7d:88:16:80:0a:09:19:48:a2:74:a7:8b:
57:d8:ee:aa:3a:0e:aa:cf:63:7a:03:07:11:bb:91:
41:ce:36:03:75:00:e1:36:10:3a:5d:68:ff:03:5c:
40:bc:1e:b7:fc:1f:26:76:11:8b:e2:22:7a:e4:ff:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:B4:D4:79:28:80:B4:E2:58:F9:1C:A3:73:0C:35:B9:F0:A1:87
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4a:f5:bf:0f:ca:cc:2f:70:3a:cb:60:da:2c:4f:11:44:4d:
fb:aa:d4:16:cb:65:8e:b5:56:cc:34:16:61:ab:f0:cb:ab:60:
4d:d2:b4:05:29:60:29:ab:bb:19:f4:66:ae:7c:87:93:7d:03:
46:12:d5:9a:24:6f:3a:94:50:5e:1f:82:c9:61:c6:27:9b:06:
0f:89:40:b3:2f:71:3c:dc:24:56:8a:f4:91:fe:de:6b:0b:9b:
d3:66:5a:e8:06:9a:24:69:62:57:08:40:15:52:35:c6:00:8f:
0d:9a:6a:3c:88:ba:b5:6b:f5:c8:45:ed:7d:19:c5:32:21:58:
a1:10:02:31:a0:66:c9:32:77:80:e9:5c:a0:23:8d:82:95:f6:
ee:64:27:4f:40:d1:f4:b8:cf:26:07:a1:6a:4f:1d:28:23:46:
1e:28:a5:e9:29:d6:8c:9d:11:73:1e:1a:fa:5e:b5:23:90:ca:
b5:01:39:93:52:c7:90:a8:a5:0f:07:b9:2d:98:4b:0b:ef:56:
6b:72:99:56:aa:4a:8c:94:9d:8c:29:e7:fe:12:19:e4:aa:b6:
60:50:39:b9:71:a3:8a:25:bf:bc:64:a1:bf:2b:ba:8c:ad:f5:
ef:e7:92:f0:12:aa:bb:1d:4f:74:0f:17:fd:fb:40:45:52:05:
d7:37:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:37:38 2026 by rpki-client