Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: zW10PE0M0CG1p0xeSMmttjFcefRHAht1i6khjP9kbQ0=
Subject key identifier: B1:B0:CC:07:63:66:38:E9:D5:66:F5:28:05:4F:44:9D:CA:D3:7F:DA
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 019D3865C0A8853BDFD8353F779BE1245F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 0911
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: 0zNVlTFNAg4o0x1KfwSpCUZLLwVAWhm5+0D3KZKj6bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c0:a8:85:3b:df:d8:35:3f:77:9b:e1:24:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=b1b0cc07636638e9d566f528054f449dcad37fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:5b:48:3f:36:d0:f3:bf:cc:be:73:de:92:
a9:f1:4b:af:93:ed:69:06:a0:3a:05:20:5f:49:ad:
67:c5:80:cd:b3:54:c2:ad:0a:78:11:96:7f:9d:6b:
fa:fe:5d:0a:1f:fe:02:f2:d4:36:3e:19:e2:a7:51:
13:8d:74:55:2a:a9:bf:70:88:73:11:ba:9a:2c:78:
a9:5e:cc:b3:77:20:fe:42:03:39:df:c3:42:7d:dc:
73:fa:16:96:65:ca:c5:7c:c7:b9:ae:b4:37:85:25:
fe:20:f4:1b:4e:4e:f6:cb:2b:6e:7b:e4:68:49:a3:
06:af:92:2f:b9:c4:fa:d2:0c:3b:fd:67:80:dc:d2:
e0:15:e9:df:c0:4c:4d:9a:f4:0c:60:1c:74:96:9b:
07:06:28:08:59:75:7f:00:d8:93:bf:60:c1:b4:46:
e3:dd:3c:b3:88:94:57:cd:2e:b0:aa:12:4e:c5:9e:
26:d1:7c:29:4f:13:b1:2e:b4:28:0a:33:7a:e5:d2:
28:e7:8e:9e:a6:71:df:41:9f:ed:c7:96:64:f4:8d:
19:bd:1b:18:d7:96:00:2d:7f:eb:84:0a:15:28:cf:
64:90:23:2c:e9:d3:8c:d1:bf:87:1d:e0:ea:84:13:
78:e6:05:e8:19:b0:1e:a6:f1:89:11:c6:d4:ff:57:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:CC:07:63:66:38:E9:D5:66:F5:28:05:4F:44:9D:CA:D3:7F:DA
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fa:85:30:83:15:c1:91:f2:66:72:33:af:18:13:f8:29:60:
b8:7d:b9:c9:71:77:c8:5a:f2:3b:1d:b6:f5:3e:7c:80:14:c0:
0f:7b:bb:22:b7:8c:1e:f7:fb:48:e8:eb:9f:ad:d5:2b:2b:97:
08:1f:8f:af:a9:60:a4:42:a3:96:49:58:1c:fe:46:82:c5:5c:
bc:41:3c:7b:84:6a:6e:b3:3b:d8:8e:81:5a:68:58:d6:a2:98:
08:cb:92:73:70:ab:53:0f:be:69:ad:a5:3f:53:bc:36:d9:05:
08:61:71:7b:66:88:09:44:7b:80:ca:4a:51:b3:25:6e:53:3b:
2e:3d:14:d4:9a:50:90:f1:c9:b1:b4:4e:55:13:0b:0a:11:23:
13:32:d9:f7:5f:08:e2:ac:4e:3d:07:a5:42:5f:ab:ad:87:ad:
35:1d:8d:87:6d:f9:3c:80:11:0a:a7:3a:e6:85:ed:d1:c6:19:
48:83:d7:be:5d:a7:81:ad:d9:43:8d:09:fc:7e:84:a5:18:41:
79:54:e5:65:f5:6f:7f:76:0e:9d:22:9f:52:cc:86:b0:27:93:
de:bc:46:f0:9f:03:cd:3e:91:f3:63:bb:98:5e:ee:bc:82:e7:
9d:b1:31:13:9f:bb:02:db:e4:69:0c:ad:13:68:1a:a3:d9:9d:
68:6c:63:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcCohTvf2DU/d5vhJF+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzljZWJhOTUzYjA3ZGFhMjJhZjNjOGFhYjJiMWNkNGUy
MjQ4ZDAwHhcNMjYwMzI5MDcwMTI1WhcNMjYwMzMwMDcwMTI1WjAzMTEwLwYDVQQD
EyhiMWIwY2MwNzYzNjYzOGU5ZDU2NmY1MjgwNTRmNDQ5ZGNhZDM3ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnFbSD820PO/zL5z3pKp8Uuvk+1p
BqA6BSBfSa1nxYDNs1TCrQp4EZZ/nWv6/l0KH/4C8tQ2Phnip1ETjXRVKqm/cIhz
EbqaLHipXsyzdyD+QgM538NCfdxz+haWZcrFfMe5rrQ3hSX+IPQbTk72yytue+Ro
SaMGr5IvucT60gw7/WeA3NLgFenfwExNmvQMYBx0lpsHBigIWXV/ANiTv2DBtEbj
3TyziJRXzS6wqhJOxZ4m0XwpTxOxLrQoCjN65dIo546epnHfQZ/tx5Zk9I0ZvRsY
15YALX/rhAoVKM9kkCMs6dOM0b+HHeDqhBN45gXoGbAepvGJEcbU/1e48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGwzAdjZjjp1Wb1KAVPRJ3K03/aMB8GA1UdIwQY
MBaAFG55zrqVOwfaoirzyKqysc1OIkjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yY2M5ZjYtMDVmMy00MGQ5LWI2YWUt
MDdmZmI2NmM1NGRmLzEvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yY2M5ZjYtMDVmMy00MGQ5LWI2YWUtMDdmZmI2NmM1NGRm
LzEvYm5uT3VwVTdCOXFpS3ZQSXFyS3h6VTRpU05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfqFMIMV
wZHyZnIzrxgT+ClguH25yXF3yFryOx229T58gBTAD3u7IreMHvf7SOjrn63VKyuX
CB+Pr6lgpEKjlklYHP5GgsVcvEE8e4RqbrM72I6BWmhY1qKYCMuSc3CrUw++aa2l
P1O8NtkFCGFxe2aICUR7gMpKUbMlblM7Lj0U1JpQkPHJsbROVRMLChEjEzLZ918I
4qxOPQelQl+rrYetNR2Nh235PIARCqc65oXt0cYZSIPXvl2nga3ZQ40J/H6EpRhB
eVTlZfVvf3YOnSKfUsyGsCeT3rxG8J8DzT6R82O7mF7uvILnnbExE5+7AtvkaQyt
E2gao9mdaGxjnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:15 2026 by rpki-client