Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: 2WSTrWHCFurpD33gJrLj90MuFKTffikXABkFoxmME1Q=
Subject key identifier: 1D:D1:6B:F2:D1:97:98:9E:F9:CE:F3:8D:64:89:89:04:F3:BA:D9:9F
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 01A15966A6346D1A7193EB983E8F69EEDFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 036D
Signing time: Tue 20 Oct 2026 13:01:01 +0000
Manifest this update: Tue 20 Oct 2026 13:01:01 +0000
Manifest next update: Wed 21 Oct 2026 13:01:01 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: pftAIUACMy0C/B+Qm9L7G4rcqdd25vQt1mmqzOyqs6M=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:a6:34:6d:1a:71:93:eb:98:3e:8f:69:ee:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Oct 20 13:01:01 2026 GMT
Not After : Oct 21 13:01:01 2026 GMT
Subject: CN=1dd16bf2d197989ef9cef38d64898904f3bad99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:eb:75:22:e1:2a:b3:b8:25:5b:8c:5d:46:
a4:08:5c:77:b0:3b:e0:18:9e:da:f2:3e:bc:2a:4d:
5a:4c:69:c5:8c:74:33:d5:b3:dd:83:90:9c:6f:a3:
df:71:50:5e:00:23:ca:6f:ca:1b:93:04:9c:2d:54:
d9:0b:02:1b:f5:2b:2b:5a:d4:fb:8a:f1:49:4a:b0:
bf:aa:6b:6e:0d:1f:3a:82:2e:67:9c:72:44:ce:74:
1e:d4:07:fa:9f:c7:01:96:95:28:50:9c:28:9b:a0:
5a:91:f0:6a:90:84:d8:f2:02:53:87:20:7d:62:b6:
26:86:6f:02:d3:d8:10:05:29:4e:d6:2b:35:74:5a:
d1:8f:b6:e1:59:3a:82:97:2f:9d:f1:d6:1d:15:96:
53:d0:0a:29:1a:16:9e:49:9a:f3:08:9e:3e:09:89:
00:33:ae:c7:bd:d8:82:86:9a:38:63:e6:41:d8:89:
50:a8:f3:0d:7b:5f:b3:89:8f:af:1d:f9:65:5b:c7:
68:df:be:90:00:c2:fe:71:fa:24:c8:0a:94:46:fc:
75:00:8c:d2:52:70:05:fc:ce:40:40:c4:46:6e:ae:
7a:c2:d3:79:1a:09:38:7b:e7:c0:40:42:93:3e:8d:
0d:99:41:ce:9b:1e:61:31:cf:f6:ea:4f:40:6d:d2:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:6B:F2:D1:97:98:9E:F9:CE:F3:8D:64:89:89:04:F3:BA:D9:9F
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:42:b2:65:81:88:38:88:ef:58:dd:99:09:ee:ab:02:6c:f3:
0b:0c:27:44:9b:cf:89:cd:5f:f7:36:d2:c5:9a:23:d3:13:90:
ed:d8:9a:91:92:d6:69:69:51:e0:65:60:1b:2a:e6:62:8d:6d:
6d:9d:a6:64:87:f0:ff:dd:fa:62:25:27:9f:30:2a:81:b4:4a:
6a:0b:59:96:3b:d7:74:78:a8:87:da:d3:68:11:ac:0b:9f:6b:
1f:ce:78:f0:79:1f:7e:a8:ec:b1:79:da:f4:99:e6:62:7d:7f:
76:81:ed:eb:e2:7a:42:e9:3e:e8:0f:9b:0b:ad:ac:05:35:3e:
1b:82:56:a1:57:13:5e:d4:67:6d:f6:a3:1f:97:54:99:38:34:
5a:0e:1f:fd:71:ab:87:13:9b:4c:34:f3:54:4f:0d:fb:ab:e9:
ed:39:6f:d8:b0:7f:5a:49:37:a1:d5:b3:c5:86:ed:e4:74:e9:
ff:01:9d:ae:bb:99:4e:97:29:7e:4b:c0:e3:ac:88:6d:ff:34:
66:24:20:c5:00:12:c8:41:7b:f8:14:de:59:bf:2a:34:f8:e6:
71:ce:85:e5:0d:6f:4b:07:6c:01:6d:fb:7c:39:8c:08:e8:fd:
6e:96:f7:8e:03:e2:28:28:ee:52:1f:20:df:87:a4:90:da:55:
77:92:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:09:48 2026 by rpki-client