Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: YhKIIYJi9n742lRwYyrlLkMPXpUjtMLAagedqx8GoRc=
Subject key identifier: 28:D7:4D:47:76:72:11:2A:E5:04:4E:3E:38:49:23:85:3D:82:E0:9C
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 01A0013815579608D88AD07AB1AD5CAEEBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 0857
Signing time: Fri 14 Aug 2026 17:00:47 +0000
Manifest this update: Fri 14 Aug 2026 17:00:47 +0000
Manifest next update: Sat 15 Aug 2026 17:00:47 +0000
Files and hashes: 1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 9N8IWAfWiGGgb29T1JR18JT54x9boTcIiYTLZ1rXMuU=)
3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:15:57:96:08:d8:8a:d0:7a:b1:ad:5c:ae:eb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Aug 14 17:00:47 2026 GMT
Not After : Aug 15 17:00:47 2026 GMT
Subject: CN=28d74d477672112ae5044e3e384923853d82e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:3a:3c:0b:de:35:63:08:70:a0:71:ff:15:
23:58:26:8a:50:ed:db:be:cd:94:f2:fc:89:b1:80:
bc:c2:8c:ec:c6:cd:57:53:d6:54:50:94:50:2d:64:
8a:72:c8:51:db:cb:86:14:19:75:88:21:ce:62:46:
19:78:da:68:45:42:13:25:86:c5:d8:61:21:73:7d:
47:31:93:2b:74:10:69:0c:1a:a1:b8:15:37:73:75:
20:58:ed:93:9e:ec:e7:f6:61:b0:f1:9a:17:f1:10:
b9:ae:de:8a:74:34:2a:f0:32:54:71:70:07:c7:32:
9d:06:64:36:26:d0:7f:ca:b8:48:25:c8:fe:36:0e:
dc:53:85:31:21:f7:d4:62:ac:ce:37:47:5c:df:d0:
15:d6:a8:66:f4:ed:c9:86:3f:56:8a:6e:62:37:89:
d6:66:ab:9b:a2:e2:26:8f:10:0e:0c:1f:d9:ad:28:
bc:ec:c5:eb:8e:5f:77:73:8b:f5:29:f7:e7:7d:6b:
4b:68:88:1b:70:f1:1a:3e:69:d3:11:de:e4:0a:f6:
f5:04:ec:2e:45:b5:15:c2:59:1c:7d:31:73:5b:52:
05:cd:0d:07:a7:8c:5f:b6:a5:48:c8:1d:93:22:0c:
5c:39:25:00:a3:d1:9e:f0:56:99:d5:6b:07:fa:d9:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:4D:47:76:72:11:2A:E5:04:4E:3E:38:49:23:85:3D:82:E0:9C
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fe:99:32:1e:ab:a3:11:ba:c2:96:49:3b:69:07:e6:c2:3f:
52:15:8a:ac:7b:06:4d:92:26:a5:12:8f:f0:a6:3e:70:fa:da:
79:87:1e:64:7b:d1:95:78:88:d6:cc:1c:17:5d:24:71:6c:63:
0b:ad:27:59:67:b8:55:39:63:c7:ed:08:cd:4a:8c:ef:d6:86:
71:32:52:59:10:4d:72:06:0f:df:a2:ea:df:f9:ab:bd:9e:f0:
94:c1:cf:75:df:62:0b:41:07:d1:bc:3c:df:52:4e:c2:92:ea:
6d:7f:93:9e:22:96:f8:f5:ed:dd:42:34:13:89:fc:5e:02:c2:
cd:fe:57:a3:7e:69:69:7e:9b:63:b4:25:9f:0b:ef:27:0e:be:
cb:a2:fd:61:ee:0d:c8:1d:b1:9c:55:ae:2b:eb:be:b6:48:5d:
d3:80:52:77:3a:17:aa:3a:86:e5:a2:5f:ff:f0:22:bf:01:0b:
1c:00:68:7f:9f:ae:58:5a:9f:48:55:97:47:b5:5a:99:2c:b1:
04:ce:f5:96:fa:f8:9d:c8:32:ea:32:ab:80:8f:78:c0:f5:e5:
b6:0b:a9:a1:f8:30:f4:84:77:53:45:db:a3:f8:a6:61:13:71:
6a:5c:0e:9e:13:f1:b4:9c:68:3e:c5:e1:32:9b:23:8e:1d:cd:
15:ec:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:37 2026 by rpki-client