Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: 0hYaFYZ/chgjI1s5AJw86g8F6ey0xueCgbYBzJe8p1s=
Subject key identifier: 4A:86:B9:43:6A:F3:4C:03:41:04:E8:30:F6:0B:0B:12:98:72:5A:F7
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 019D39776FE30710647B5551D37DD21595A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 1044
Signing time: Sun 29 Mar 2026 12:00:21 +0000
Manifest this update: Sun 29 Mar 2026 12:00:21 +0000
Manifest next update: Mon 30 Mar 2026 12:00:21 +0000
Files and hashes: 1: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: FRCTFwD3dJQ9t6rcASp0Y19yq09U7z4DI1wNrzEM9bg=)
2: uW6MqNVytVrssfUBxC2o5Ci36m0.roa (hash: 0xEUcG7sHwDRILOo98qDKEy+k04HnajY0Lu0XSxmDN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6f:e3:07:10:64:7b:55:51:d3:7d:d2:15:95:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Mar 29 12:00:21 2026 GMT
Not After : Mar 30 12:00:21 2026 GMT
Subject: CN=4a86b9436af34c034104e830f60b0b1298725af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:31:a8:3b:ba:16:61:c6:de:b0:ae:2a:c7:
aa:ea:79:04:97:d3:f6:c0:50:6f:9d:61:a4:f5:ae:
dd:d7:79:ca:99:06:a6:a9:e0:37:2b:57:3a:ed:a8:
3f:c9:ca:c0:08:06:02:15:f2:f2:c7:d3:d9:b8:3d:
21:3f:f3:b1:db:1c:7d:3c:e9:fc:6f:ad:ab:7b:6c:
b0:64:84:8c:f3:b2:1f:9e:b6:96:a9:d4:a2:ca:a0:
f8:86:99:14:fc:e1:cc:da:3f:22:db:f1:2b:4b:3c:
3d:62:29:0a:45:bc:00:21:3b:7d:61:d7:b8:1e:0b:
a4:66:16:e2:ea:9d:de:28:2f:ae:0e:ae:4d:2a:00:
ef:e6:7b:31:aa:78:41:82:60:dd:41:34:86:2a:71:
a5:16:d1:ed:0d:38:0b:eb:c5:22:79:cc:af:3a:e6:
e5:4c:a0:d9:37:70:81:04:f1:3c:68:d5:4a:ed:a4:
c3:2d:93:8e:57:5c:e9:b7:77:1c:e5:96:1d:df:12:
5d:78:ac:85:62:11:b4:ee:f5:cc:63:e1:f4:b1:59:
61:f4:60:43:47:a6:cd:32:24:03:25:61:cc:88:f7:
9c:ed:54:56:05:60:24:a6:92:18:27:00:16:ed:88:
67:f1:b8:f2:a4:89:f1:2f:05:26:ff:80:16:19:34:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:B9:43:6A:F3:4C:03:41:04:E8:30:F6:0B:0B:12:98:72:5A:F7
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f1:62:8f:8b:55:b0:8a:c7:f4:42:72:c3:b3:18:fc:7b:b0:
10:40:f4:9a:86:1a:6b:b8:90:31:0f:d0:af:21:f8:c4:e9:74:
a5:f9:0c:e5:fc:b7:58:bc:ae:b2:b5:bb:9f:92:0a:07:84:4c:
03:5c:44:0c:1f:16:28:77:28:eb:7c:a8:95:be:8b:25:af:5f:
7a:33:27:c5:44:64:50:78:09:23:93:3a:3a:45:a0:8c:49:8e:
1f:18:90:af:0e:f7:b1:7e:51:b3:95:ae:46:84:6c:60:5f:36:
04:65:dc:4d:2a:3c:08:7d:73:1a:4f:f3:f8:04:ca:b8:96:96:
3a:f8:fb:b5:e4:b3:ba:1f:90:b9:2b:26:88:27:27:45:f0:fd:
a6:ae:e5:6c:72:1e:2a:76:59:44:e8:0f:b5:aa:6b:2e:de:23:
ad:80:2a:4e:c9:28:0a:03:9f:a3:7a:69:be:5f:15:fd:ea:e6:
3d:60:55:ae:98:9e:e2:34:55:ca:dd:31:12:d1:33:c4:44:66:
e7:2e:0f:23:a4:e9:13:ab:75:69:cf:55:f6:21:ba:3f:fe:a7:
05:62:6e:55:f6:d7:d2:f2:0c:5a:ed:cd:16:86:ba:6a:cf:a5:
e8:81:a5:19:57:9c:af:57:28:82:f1:76:bc:08:dd:6f:60:98:
b8:7e:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:55 2026 by rpki-client