Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: 1JKPYy4eJ8Nwmxk/AfDPUpNvpgx4TRMNo3w4NfE87gk=
Subject key identifier: 2D:D6:83:DA:AD:58:15:B7:4E:D0:6F:67:82:FF:F2:AB:B1:EE:99:9F
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 01A13DEF33D283F08A712F3019EBCA3BEE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 08FB
Signing time: Thu 15 Oct 2026 05:00:48 +0000
Manifest this update: Thu 15 Oct 2026 05:00:48 +0000
Manifest next update: Fri 16 Oct 2026 05:00:48 +0000
Files and hashes: 1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: hjg2plAiwhmL+EJLNa/pQdU8aT1dv0Ft8N9x4MoQdtY=)
3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:33:d2:83:f0:8a:71:2f:30:19:eb:ca:3b:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Oct 15 05:00:48 2026 GMT
Not After : Oct 16 05:00:48 2026 GMT
Subject: CN=2dd683daad5815b74ed06f6782fff2abb1ee999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:4d:92:d6:e1:b2:81:75:dc:12:e4:bc:05:
b1:f4:a0:c3:cd:9e:64:74:ea:82:c2:67:27:d4:04:
34:34:59:92:26:34:92:a0:29:01:03:aa:93:bb:d6:
6b:4e:8f:72:19:05:88:49:22:df:49:76:08:51:e9:
99:19:eb:dc:37:c9:8d:2c:99:fa:a2:19:b8:d9:de:
90:31:92:1b:bb:0f:d8:d0:c0:44:59:c8:09:5c:b3:
a9:e2:17:69:58:8c:8c:60:f1:fe:fc:79:98:5b:cb:
e4:ac:62:4c:a2:e3:59:1a:9f:70:e5:73:13:e9:78:
7f:8e:b1:fd:98:cb:62:36:0d:a8:70:24:f1:3c:21:
07:23:3d:43:f6:68:b6:72:b5:ce:c0:1d:0e:8b:bd:
06:fb:32:ea:d2:29:fc:d1:61:2c:2a:b3:32:2b:8b:
b2:a7:8d:14:04:8a:12:1e:87:26:6a:9c:ec:39:0a:
11:95:e9:b6:b9:0a:79:78:44:33:41:8b:53:e6:f3:
21:e2:62:ac:9f:a4:96:b2:2b:f1:86:aa:d1:64:ec:
01:6a:cb:b0:10:7e:e1:8b:52:03:ec:e6:25:cf:b0:
4f:00:0d:fa:26:9c:4d:ed:eb:80:89:c6:51:d0:35:
46:17:68:df:2a:88:12:16:73:47:a8:70:df:7a:8a:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D6:83:DA:AD:58:15:B7:4E:D0:6F:67:82:FF:F2:AB:B1:EE:99:9F
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:a4:83:84:d6:96:32:3d:72:fb:ad:ac:10:1f:49:48:94:
0d:67:1f:83:f0:ce:12:b5:0d:ae:91:33:e9:9a:c5:27:6f:a7:
3a:12:36:3e:22:14:3a:59:1c:f0:b0:50:48:de:4b:a7:5a:39:
44:ee:d0:d9:ed:49:16:ed:31:b9:32:f9:e3:2e:fb:19:fa:e6:
ff:67:6d:78:60:00:26:92:49:a9:51:07:df:15:42:aa:3a:1b:
93:fe:8b:ae:19:dc:a8:27:1a:28:f6:03:9b:dd:b8:27:b2:bd:
54:72:19:03:83:56:33:d9:d9:6e:47:d4:98:b0:c9:fd:30:d4:
e5:d3:60:29:20:1d:72:7e:e8:fd:53:a5:57:29:38:3c:e4:f1:
5a:79:02:9c:43:54:6c:0b:6b:9a:7d:c4:ed:e4:ad:22:ed:4d:
10:13:8c:0f:8e:95:d5:07:af:69:3e:a3:44:ff:68:0d:d5:ad:
5a:7f:e9:28:38:8c:bb:97:cc:9a:1c:b8:dc:26:b2:91:e0:ad:
23:5b:a4:95:d4:2a:af:20:b7:11:1f:7b:19:a2:77:b3:21:c1:
0a:55:aa:ee:cf:d3:cf:a4:17:d2:7f:c2:5f:17:c2:94:c2:0d:
3e:42:23:6d:4c:92:ae:0a:13:b2:71:cd:c3:33:d1:89:08:c8:
9f:6c:ad:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97zPSg/CKcS8wGevKO+5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjYxMDE1MDUwMDQ4WhcNMjYxMDE2MDUwMDQ4WjAzMTEwLwYDVQQD
EygyZGQ2ODNkYWFkNTgxNWI3NGVkMDZmNjc4MmZmZjJhYmIxZWU5OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOFNktbhsoF13BLkvAWx9KDDzZ5k
dOqCwmcn1AQ0NFmSJjSSoCkBA6qTu9ZrTo9yGQWISSLfSXYIUemZGevcN8mNLJn6
ohm42d6QMZIbuw/Y0MBEWcgJXLOp4hdpWIyMYPH+/HmYW8vkrGJMouNZGp9w5XMT
6Xh/jrH9mMtiNg2ocCTxPCEHIz1D9mi2crXOwB0Oi70G+zLq0in80WEsKrMyK4uy
p40UBIoSHocmapzsOQoRlem2uQp5eEQzQYtT5vMh4mKsn6SWsivxhqrRZOwBasuw
EH7hi1ID7OYlz7BPAA36JpxN7euAicZR0DVGF2jfKogSFnNHqHDfeopMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3Wg9qtWBW3TtBvZ4L/8qux7pmfMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluukg4TW
ljI9cvutrBAfSUiUDWcfg/DOErUNrpEz6ZrFJ2+nOhI2PiIUOlkc8LBQSN5Lp1o5
RO7Q2e1JFu0xuTL54y77Gfrm/2dteGAAJpJJqVEH3xVCqjobk/6LrhncqCcaKPYD
m924J7K9VHIZA4NWM9nZbkfUmLDJ/TDU5dNgKSAdcn7o/VOlVyk4POTxWnkCnENU
bAtrmn3E7eStIu1NEBOMD46V1QevaT6jRP9oDdWtWn/pKDiMu5fMmhy43CaykeCt
I1ukldQqryC3ER97GaJ3syHBClWq7s/Tz6QX0n/CXxfClMINPkIjbUySrgoTsnHN
wzPRiQjIn2ytXA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:59 2026 by rpki-client