Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
File: BNokfsP0AQu8LqUqIqxkd4vKPkc.mft (raw, json)
Hash identifier: NronLW5Buxbe8h38dX9T3+PN0Vy5zDo6OPp5l1/BXVo=
Subject key identifier: 70:41:49:FB:4E:BF:39:AC:C8:93:01:D8:14:26:0E:F5:B6:45:5E:FC
Authority key identifier: 04:DA:24:7E:C3:F4:01:0B:BC:2E:A5:2A:22:AC:64:77:8B:CA:3E:47
Certificate issuer: /CN=04da247ec3f4010bbc2ea52a22ac64778bca3e47
Certificate serial: 01A04129A6A24A0BDF7A7719C5074F0A2A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
Manifest number: 0141
Signing time: Thu 27 Aug 2026 03:00:43 +0000
Manifest this update: Thu 27 Aug 2026 03:00:43 +0000
Manifest next update: Fri 28 Aug 2026 03:00:43 +0000
Files and hashes: 1: BNokfsP0AQu8LqUqIqxkd4vKPkc.crl (hash: 40nUm40PCcFQ90gDL4eCJlpE++scIc7mgw4c7fiNd+k=)
2: qNh9B_T6D7zIQKtKj3CH1wBuJrU.roa (hash: VVk6xhwAHQjOQSYBNf9v9JyyynNzDFxtsukm+hVtrgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:a6:a2:4a:0b:df:7a:77:19:c5:07:4f:0a:2a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04da247ec3f4010bbc2ea52a22ac64778bca3e47
Validity
Not Before: Aug 27 03:00:43 2026 GMT
Not After : Aug 28 03:00:43 2026 GMT
Subject: CN=704149fb4ebf39acc89301d814260ef5b6455efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:66:20:48:df:6f:cd:5d:44:34:57:73:2b:
91:2a:f8:20:a3:88:d0:e0:1d:71:59:90:a4:20:55:
47:32:f8:2a:be:93:46:14:f6:8f:78:d3:4b:c3:c2:
90:db:58:4c:94:fd:1c:eb:b1:93:b9:5b:93:52:1b:
8a:a7:b5:f0:d1:1a:5e:6b:27:51:95:1d:83:ca:dc:
12:68:10:0b:67:eb:6c:23:72:a2:51:a4:c0:74:42:
80:5b:2b:7c:c9:4a:e8:f8:9d:6d:fa:a4:51:63:69:
28:46:ff:68:a2:91:93:b5:c7:86:44:94:9b:5f:c7:
4d:51:c1:c9:e7:67:ed:b3:f2:98:2a:49:08:d9:92:
53:6a:f2:39:ae:ca:62:fe:aa:9c:8d:fe:99:3c:30:
39:62:f2:cc:19:e4:4e:06:1a:79:e1:56:62:aa:e1:
d2:2a:d5:51:46:f4:93:e3:27:4d:1d:0c:d2:e1:18:
fe:78:07:e1:01:81:3d:eb:94:b1:3e:1e:97:b7:9b:
02:36:7b:98:b1:7b:44:df:34:34:d8:af:c1:be:b5:
2a:39:ac:45:eb:72:6f:fb:9b:29:42:2c:f7:12:1f:
08:e0:f4:42:02:ae:ae:15:fb:42:e9:8b:04:de:85:
a8:18:e6:04:b5:79:72:69:75:e0:96:61:ba:cc:bf:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:49:FB:4E:BF:39:AC:C8:93:01:D8:14:26:0E:F5:B6:45:5E:FC
X509v3 Authority Key Identifier:
keyid:04:DA:24:7E:C3:F4:01:0B:BC:2E:A5:2A:22:AC:64:77:8B:CA:3E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:f9:67:c3:d7:d2:d9:57:1b:35:11:b4:71:e5:31:c7:46:
b7:e2:8d:90:ba:50:f7:4f:4d:0f:c6:cd:69:64:dd:fe:36:53:
e8:e5:1b:af:d7:f6:1b:e8:73:3a:84:b2:33:dc:9e:5c:27:1f:
03:20:b7:ba:81:89:96:52:c4:03:89:fb:cd:26:fd:e0:41:1e:
a1:48:61:7d:1d:b3:63:87:a8:1f:fa:c5:59:53:61:d7:82:fd:
b1:14:41:5f:8b:ef:e4:cc:f4:99:52:09:c6:39:0f:6b:d0:f2:
c2:ed:ef:28:6b:93:14:d4:36:9c:4b:b4:f0:d5:a8:93:e8:f3:
92:b2:18:55:0a:4a:82:56:5c:83:a2:d1:cc:17:87:9e:0c:47:
4f:0f:25:9f:bd:06:25:6d:11:66:93:06:98:9f:de:f6:43:93:
dd:1c:57:ce:24:f4:b8:3a:de:be:4f:0d:98:1f:1d:5f:f1:62:
90:d6:3b:6f:0d:2b:1c:6f:bd:82:f6:91:92:43:81:cd:85:92:
b1:27:1a:78:45:89:07:2c:d5:b1:32:e5:18:f8:3a:18:9a:21:
6a:30:bb:ab:20:02:54:21:86:b4:58:e1:66:75:eb:c1:4c:d6:
6f:0f:aa:8b:aa:fb:a9:86:4a:97:7d:ec:ab:fd:65:40:e2:bf:
33:96:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:26:47 2026 by rpki-client