Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: BJhf9fLAdNcg3Uro/BaDke8/iTxJFhBUUftMdqwXYy0=
Subject key identifier: 78:C7:83:B5:C3:AE:F1:11:EC:C7:0E:66:BF:72:E3:23:87:C1:05:E5
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 01A003946C0EEC942AC5056D69CB05A9D4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 02BC
Signing time: Sat 15 Aug 2026 04:00:53 +0000
Manifest this update: Sat 15 Aug 2026 04:00:53 +0000
Manifest next update: Sun 16 Aug 2026 04:00:53 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: 9J2Lzfe1rsY6NFEoMKJLQrrDm1/c9MO9OvsihZXIlo8=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:6c:0e:ec:94:2a:c5:05:6d:69:cb:05:a9:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Aug 15 04:00:53 2026 GMT
Not After : Aug 16 04:00:53 2026 GMT
Subject: CN=78c783b5c3aef111ecc70e66bf72e32387c105e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:ac:0e:02:a1:c4:ab:f3:10:ab:39:b4:b7:
8c:c3:6f:14:7f:71:4a:62:54:df:84:e7:0a:89:02:
53:c0:0c:95:2c:55:1f:34:ca:82:51:97:32:eb:20:
e0:03:04:50:73:39:0a:03:0b:87:3d:ae:f9:94:95:
8d:9e:91:bb:2e:2a:55:84:62:6d:e8:0f:0a:73:06:
f3:8b:20:42:b8:63:0f:9b:f6:5e:b2:b7:f5:79:3d:
5b:c3:ef:fa:c6:72:58:12:67:cc:35:d1:07:f5:fc:
ce:6a:a0:90:54:25:dd:cd:4f:4d:81:68:5a:25:d6:
d1:66:fb:d0:05:42:1b:b9:34:ab:e2:45:a2:ca:e4:
af:b2:65:6a:43:e9:7f:a9:c9:44:c2:81:89:98:8e:
72:4a:75:58:54:cc:a9:5f:a0:61:4a:48:1b:7e:2d:
cb:4d:f7:14:13:9e:8a:68:25:66:69:17:20:5f:d8:
16:b0:3a:79:79:c1:de:f0:af:a0:8c:2d:60:43:76:
b8:74:a6:1d:2f:16:28:73:51:89:92:76:b4:73:1c:
70:6e:5d:2e:98:8b:e6:0d:f2:f2:5f:3e:22:08:1a:
30:0d:b6:b2:9f:a2:15:07:8e:42:78:e4:8a:07:23:
63:4b:06:5a:f9:2f:fb:a8:47:78:02:8c:7a:06:a3:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:83:B5:C3:AE:F1:11:EC:C7:0E:66:BF:72:E3:23:87:C1:05:E5
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ee:fc:13:0e:04:ee:cc:47:53:22:a5:b9:49:0b:5a:9e:c2:
98:7e:79:e6:24:e0:92:7f:00:dc:5b:a8:3f:8d:3b:27:68:b3:
20:79:9b:d5:24:e9:b3:eb:92:f9:6c:44:28:c3:6f:ac:24:5f:
bb:94:bb:ff:03:9c:18:5c:62:fe:f2:4a:97:92:26:17:64:24:
84:77:b2:30:e1:cc:3b:75:41:55:18:09:28:bf:f4:1c:ea:a3:
b0:98:ae:2d:c7:83:2a:96:2d:a1:db:65:75:16:b8:ce:33:c7:
c2:02:b3:e7:f3:ae:38:51:4b:a6:f8:ef:eb:2e:ba:c2:e3:7c:
5a:8e:06:5a:8d:aa:95:6b:2e:0e:d2:4b:19:59:6a:b8:3c:ca:
fc:78:a9:f6:87:a4:d9:74:68:aa:14:a8:74:1a:90:b1:52:fd:
e2:09:5f:64:83:06:2e:55:f2:9c:d7:85:75:2e:53:f7:58:a3:
7c:8d:d1:8b:86:04:1a:72:db:ad:bb:08:23:2a:13:f7:f4:fd:
3a:3d:d6:5c:43:22:61:1f:05:7e:d6:60:db:fe:fb:49:90:ef:
2f:7c:96:ec:51:80:f8:4e:dc:d8:67:84:73:89:84:78:05:d9:
bc:10:94:df:d1:a5:4a:41:d6:0a:6f:c6:ae:06:5d:31:b6:5f:
93:a2:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:50 2026 by rpki-client