Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: pnCXFxbBMgcuPYaQHTWON0/vB4cUYxVAb7bMzDVfsLM=
Subject key identifier: 49:8F:91:AA:46:4C:EB:B5:15:CD:2D:35:8F:80:8E:FA:B7:0B:39:FD
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019D38D301B391EE472A1F1505D0F4B9F762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 06E4
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: Q6hc8KMvcmrEnR1B1ZOdZdEqQSSCjV8HmzEoYnYG2rk=)
2: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
3: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:01:b3:91:ee:47:2a:1f:15:05:d0:f4:b9:f7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=498f91aa464cebb515cd2d358f808efab70b39fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:02:b7:9c:5a:1b:f0:de:68:b4:08:bd:de:
80:02:49:ab:d0:d9:7f:b2:1d:e3:da:91:85:f1:3f:
e8:fd:b9:4b:3a:2c:59:b2:fc:5d:26:21:39:d6:12:
38:94:e7:b3:f3:05:3f:7c:ee:9b:5a:4a:50:fd:15:
3e:07:13:15:ee:78:f0:3e:6d:1a:36:c7:9f:4c:83:
9f:f5:cf:6e:47:ef:b5:96:62:5f:ce:68:86:51:1c:
ba:80:e9:6d:7b:96:93:e3:d0:da:69:67:d4:d0:82:
84:d3:f8:5e:ea:e1:b3:56:ac:62:39:98:4a:27:ea:
90:15:8c:83:09:77:f6:c2:96:86:e8:fb:79:9b:cb:
36:1d:a4:1b:50:ba:77:82:cf:36:30:bc:32:85:b8:
86:25:fe:24:06:8c:17:fd:30:05:b8:a1:56:e8:7c:
10:0d:f9:6d:3c:ee:da:28:ae:11:c6:11:c9:b8:a0:
87:47:78:f6:8c:57:5e:21:5c:fa:a7:f2:6a:8a:15:
98:e2:86:22:9a:fd:c0:da:be:cb:89:88:63:e0:6e:
df:0a:19:4b:ab:5f:0f:ce:12:c9:9c:7f:02:7d:59:
f4:60:86:96:8f:36:75:8f:cd:45:56:8d:41:ce:8a:
b4:c6:f3:34:e9:c4:69:b8:ab:f2:9f:f1:ea:a0:07:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:91:AA:46:4C:EB:B5:15:CD:2D:35:8F:80:8E:FA:B7:0B:39:FD
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:3f:d5:cd:e0:58:f1:36:58:3c:23:f7:c3:a3:54:e2:cf:
09:43:61:79:da:3f:8a:b8:fe:50:52:5f:f3:45:f4:fb:0d:4c:
9b:be:52:59:4f:86:44:a8:6b:37:4f:b0:61:fb:0a:d2:db:d7:
79:6e:19:b4:1b:13:ac:b2:c4:b0:67:45:e0:96:b0:5f:ad:a6:
46:b0:f7:50:1e:70:d4:a8:3b:80:3f:80:43:47:05:41:d5:f8:
d3:7a:b0:90:49:31:f6:67:38:0a:16:03:02:83:a0:95:bc:61:
b2:3b:06:d1:d1:ba:f5:b6:99:cc:6a:6e:19:ae:f9:19:d7:99:
17:69:40:75:7a:12:1c:e8:43:71:a0:6f:79:e0:3b:db:a9:d5:
83:48:20:f1:f6:75:60:49:54:4b:21:a8:ed:11:f4:5a:9e:eb:
53:02:f3:1c:8c:f1:12:f6:25:db:c6:0f:68:f8:b7:ea:e5:d9:
3c:f1:12:93:76:cd:49:9b:47:9f:bf:d7:ce:cb:bd:92:d4:82:
ab:a3:ac:d3:be:74:d2:2d:91:5d:3b:b4:00:05:2b:21:fb:af:
2c:3d:55:cb:05:17:9c:e7:be:24:05:8b:f8:7f:7c:9e:60:3e:
7c:91:8b:d4:82:47:3d:f3:12:f3:df:ee:70:56:b5:d3:29:34:
e8:6c:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:31 2026 by rpki-client