Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: dNt+zWLmpV/HDCobPAQdgbndvZSQ6OdZeIM2zHt0YUg=
Subject key identifier: D8:75:D0:92:71:12:40:34:E8:B2:D9:43:E3:5D:B8:B1:6E:AF:6D:98
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 019F122EB6299FFC77B75C30C8AE7111A0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 023F
Signing time: Mon 29 Jun 2026 07:01:18 +0000
Manifest this update: Mon 29 Jun 2026 07:01:18 +0000
Manifest next update: Tue 30 Jun 2026 07:01:18 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: eDL1Bv3ewbxoA+RSFiXYMOPBrlJBsfGz/ZsvGXseQQw=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:b6:29:9f:fc:77:b7:5c:30:c8:ae:71:11:a0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Jun 29 07:01:18 2026 GMT
Not After : Jun 30 07:01:18 2026 GMT
Subject: CN=d875d09271124034e8b2d943e35db8b16eaf6d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:c6:ee:34:f8:c8:06:97:23:14:f8:df:5c:
cf:8b:14:67:78:a7:dc:44:83:65:dd:f6:0b:8e:d2:
85:13:75:2d:ef:8f:6d:ce:44:3f:a7:85:28:2f:d5:
aa:16:2f:5b:e7:bb:d9:f3:71:b6:5e:cf:63:11:76:
9e:c1:95:e9:3f:2e:e5:ee:1c:c5:3b:e6:83:e2:96:
cc:a7:59:c9:c8:b8:1d:39:17:17:df:55:3a:7e:14:
0a:d1:06:ed:57:66:b3:bc:75:37:ce:3e:e9:46:8b:
45:72:46:ed:cd:ec:2e:de:21:f8:1e:c6:ba:f1:10:
02:04:c9:4a:f0:60:f4:84:53:e1:01:75:05:51:87:
fc:e7:36:52:da:75:3e:74:49:16:fe:cf:b2:7f:65:
91:c9:0e:92:1e:c4:ac:5b:05:c8:2e:fb:77:b9:6b:
e0:59:b5:ff:2c:1f:9a:c3:6a:bf:5a:1d:a1:7b:d1:
ee:d9:ea:03:07:e6:b1:94:2d:1d:45:c9:f0:72:c8:
47:22:b8:bd:c1:35:a5:4d:fc:ef:9d:50:db:29:77:
c0:d7:6e:67:fd:7c:87:22:f9:5f:aa:41:55:61:b4:
b9:2d:16:a0:b4:de:54:3d:f7:b7:2e:46:c3:e4:8b:
05:36:43:0f:15:a0:d7:85:38:8f:f2:0b:f9:15:4e:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:D0:92:71:12:40:34:E8:B2:D9:43:E3:5D:B8:B1:6E:AF:6D:98
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6f:dd:ca:bb:91:50:47:a6:14:9d:85:e6:5d:6a:5b:7f:ae:
c7:33:0c:ef:5d:af:9b:ea:a1:34:c6:b7:26:62:aa:aa:c6:1d:
fc:c6:97:b7:95:ae:73:90:73:4a:9e:9b:a2:e3:e2:d1:78:38:
b5:08:8a:c8:4e:cf:2b:a2:e6:d7:a4:64:ba:cf:48:19:04:54:
c0:7f:ce:41:af:7f:c9:be:c8:c9:e4:35:b9:e0:8c:da:46:58:
5e:26:23:40:70:73:d9:60:e4:4c:2c:8f:d2:fc:c8:5a:a5:7a:
22:1f:d3:f1:af:f5:5a:8f:4d:b4:7e:65:a2:e6:99:11:f7:bc:
9d:8c:35:eb:ac:cc:0f:0c:f8:85:e0:7d:92:81:e0:ed:b3:9b:
86:22:fa:f3:70:ac:d3:12:69:5d:77:09:2f:d0:57:55:ed:3b:
19:4a:e9:d3:5d:56:0a:c7:5b:dc:58:71:c9:46:f1:87:d1:c0:
c5:c2:79:61:8a:78:fc:25:98:66:1e:f2:8f:95:8e:c2:59:e4:
e6:d7:f6:d3:0a:ed:12:03:cf:eb:6c:f7:71:6a:85:90:a1:2d:
da:ad:c4:cc:33:51:e0:0a:b5:5f:2b:5e:3c:30:3e:fb:8f:a2:
16:f1:c1:7f:b1:10:8d:6b:51:28:0b:58:94:8c:18:2e:2d:5f:
20:ea:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:50 2026 by rpki-client