Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: 6OYe20sbjAskbfmSu8hklZzQIqg1X346p3SZsjnBG0Q=
Subject key identifier: F8:CD:4A:B4:81:1C:29:07:F6:72:4C:74:22:8D:BA:B5:7C:43:1C:52
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 01A13DB849299680B3DF120481BE7D0BFBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 0F89
Signing time: Thu 15 Oct 2026 04:00:49 +0000
Manifest this update: Thu 15 Oct 2026 04:00:49 +0000
Manifest next update: Fri 16 Oct 2026 04:00:49 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: 6BIjfx1BTO4lDybkySxaZ5+JV5U01K+KdzG/EUWIMgg=)
2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:49:29:96:80:b3:df:12:04:81:be:7d:0b:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Oct 15 04:00:49 2026 GMT
Not After : Oct 16 04:00:49 2026 GMT
Subject: CN=f8cd4ab4811c2907f6724c74228dbab57c431c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:0a:17:67:84:44:6a:bc:d4:b3:63:d1:d1:
67:b6:19:cc:c8:a0:02:fe:49:d5:33:17:c4:18:14:
3b:a4:56:4f:7b:75:3c:46:ea:15:ff:75:ad:d9:32:
eb:47:eb:69:19:89:09:a4:8d:23:63:cf:a5:8d:0a:
cd:aa:fc:dd:a2:45:d6:a7:0b:8a:1d:41:aa:4d:3e:
a6:a7:78:00:db:ba:b0:9c:58:c2:8d:04:91:85:c6:
87:37:46:42:6a:a3:f5:d9:82:20:f4:20:50:51:82:
a8:fa:37:e6:14:4e:fd:52:41:dd:b6:98:17:20:f4:
30:66:a9:4d:81:7d:15:60:f0:42:ad:3b:d3:6d:54:
be:b9:62:1f:15:cf:ff:30:bb:36:94:7c:6c:15:06:
5e:dc:ae:9e:28:90:d9:b7:bb:ce:25:ef:a8:2a:40:
4e:b7:60:7e:af:77:4f:83:ad:6e:b8:03:a1:09:07:
1e:05:c7:e9:0f:d3:00:3c:a0:ea:d6:ac:f3:a9:78:
f0:db:be:55:41:bc:78:c0:62:bf:52:16:8d:71:a1:
a8:80:b9:dc:a0:35:e1:b1:fc:6d:76:3c:b4:3f:4f:
cc:96:80:90:a3:18:17:88:59:7c:5f:38:45:06:49:
46:4d:25:57:a0:9b:68:1a:67:51:9c:4d:3a:e3:d0:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:4A:B4:81:1C:29:07:F6:72:4C:74:22:8D:BA:B5:7C:43:1C:52
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:5e:23:65:c8:01:43:00:86:e3:64:2f:51:9e:98:4b:38:dc:
f2:82:35:3f:62:de:1a:6b:08:19:ba:2c:fb:7c:0f:0d:f0:f2:
81:30:f3:af:39:07:af:7d:a3:9a:54:49:7a:8d:96:3e:69:c8:
a1:d5:9e:87:65:44:04:53:77:e7:63:ce:bb:ba:09:3d:18:79:
ca:c4:19:08:86:d3:ba:21:59:a7:9f:8e:d0:6d:bf:f1:75:61:
89:51:0a:26:ef:f6:c1:a1:9e:41:9f:27:ca:90:b6:02:bf:1d:
64:7b:36:ea:46:ad:9c:5c:0f:d0:d0:5c:d1:8a:34:3d:00:18:
15:2d:83:49:94:22:a8:5f:99:8f:b6:fb:c7:5d:74:d3:1e:c7:
5a:22:b6:55:63:05:6a:1e:66:4f:08:73:72:79:07:9e:9f:aa:
83:33:24:bd:1c:89:97:72:72:6f:90:33:b4:3d:ae:aa:04:71:
6a:c6:1b:83:f5:e9:58:fd:ac:7b:4a:b7:50:38:3f:2c:bc:15:
05:10:e8:e3:3c:5e:ea:a9:f3:ae:0d:25:ef:b5:51:f9:72:5f:
26:a7:9d:af:77:5e:71:8e:41:02:cd:01:b1:73:9a:d1:0e:fb:
ae:1f:87:3d:8b:33:e2:6f:b7:90:26:10:7d:7a:62:d6:e2:49:
08:b3:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:51 2026 by rpki-client