Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: ki2x08FPmaQXwAiYxM7k+GZplg8Rjf6Wstu5nEsLUEc=
Subject key identifier: 20:B9:84:AB:B9:79:4F:6C:62:C3:1C:0A:57:8C:86:6B:B5:B4:00:82
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 019D3AF89829D9099AE9F82CC2839D8F3303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 014B
Signing time: Sun 29 Mar 2026 19:01:03 +0000
Manifest this update: Sun 29 Mar 2026 19:01:03 +0000
Manifest next update: Mon 30 Mar 2026 19:01:03 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: D0lJSF2YNyEaTL8eH3e9heIx3WkuB2KkfW//wxbmDbc=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:98:29:d9:09:9a:e9:f8:2c:c2:83:9d:8f:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Mar 29 19:01:03 2026 GMT
Not After : Mar 30 19:01:03 2026 GMT
Subject: CN=20b984abb9794f6c62c31c0a578c866bb5b40082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:4c:fa:3e:25:70:72:a2:2e:d4:7e:e2:fe:
79:16:7f:5c:90:bd:36:bf:9b:6c:45:28:ff:a6:49:
bb:6e:ba:fd:43:6d:de:3f:76:83:56:32:2c:1c:f2:
04:ad:76:b1:8e:ca:0d:3c:b6:89:60:cf:17:a6:f2:
24:b7:d9:ac:7f:2f:00:1e:00:9a:5e:5b:ca:94:13:
45:a3:69:8a:ad:5a:ba:66:d5:95:c6:24:27:0d:a2:
38:b9:67:31:95:2d:d0:b2:4e:72:03:04:6a:94:c4:
cd:88:42:23:9d:86:4b:da:8f:c5:65:64:77:56:fd:
84:4a:39:85:3c:04:c9:9e:22:96:9c:3c:dd:8f:25:
de:64:c4:7f:0b:20:7c:ef:de:b9:52:b4:61:03:72:
36:2e:af:6c:2e:17:31:88:d9:dd:24:53:3b:5d:8a:
56:9d:d3:02:3f:a0:f8:24:b0:c7:1c:c2:c1:42:c8:
98:5c:c2:f5:01:c8:06:fa:ae:dd:03:ea:81:27:80:
e6:49:d6:ab:fd:d8:26:2c:59:ac:c4:8d:89:f5:ee:
ab:3e:8a:ef:92:ec:7e:57:de:a2:5b:c3:d8:f2:29:
4b:06:2f:09:03:2d:11:b6:c5:9d:9e:e9:8a:10:4f:
af:c0:29:f3:ee:8f:40:96:d6:9b:07:5f:33:5d:40:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B9:84:AB:B9:79:4F:6C:62:C3:1C:0A:57:8C:86:6B:B5:B4:00:82
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:dd:fd:2e:d6:2c:7a:38:e0:a4:61:26:33:6d:d0:f0:a5:
ab:5e:74:d5:22:de:89:ca:97:5b:06:fa:18:70:d9:5b:08:3a:
33:89:87:99:04:af:5a:d8:b3:ca:47:f0:b2:ef:fb:ed:c4:ae:
cc:6a:51:55:e8:d0:e2:ff:e5:6b:85:07:f3:78:7f:78:d0:1c:
b1:93:90:3b:91:25:5f:35:e6:cd:81:32:3b:64:b8:37:7f:72:
2c:e9:67:8a:c4:c6:d5:63:1f:44:bb:7d:a5:05:4e:4f:2f:c0:
d6:34:a2:47:c9:45:de:96:98:bd:75:d6:f1:36:f5:53:95:f9:
22:08:80:30:dd:d0:66:3a:49:ad:c2:8a:25:9c:71:34:d2:eb:
9a:7c:c7:e7:74:72:2c:ae:83:0c:4f:60:70:ef:da:1f:ab:37:
72:ee:45:ef:dd:db:d8:0a:e4:89:8e:37:d3:a6:96:ca:89:66:
3f:e1:4a:f2:98:57:f8:c4:11:d0:20:da:41:ba:97:52:6a:21:
c8:fc:05:d5:87:06:7b:e8:be:cb:5b:d5:b8:1a:44:c6:fc:a4:
db:43:10:59:8b:d4:55:5d:67:8b:7a:8b:b7:a4:87:6d:f1:10:
5b:c2:6c:5e:7b:5a:64:12:b6:35:ef:44:bb:54:6e:47:1e:8c:
a4:13:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:37 2026 by rpki-client