Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: /MXydRKxkEa/2vb0k9rtwApXCT8RypFjJCvk4andNl8=
Subject key identifier: 88:8B:98:48:5B:63:20:03:B2:3C:58:A0:03:54:A4:B8:05:B6:3B:3E
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 01A0C821607BFBCB1B527A33C33F5B91EB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 08BE
Signing time: Tue 22 Sep 2026 08:00:25 +0000
Manifest this update: Tue 22 Sep 2026 08:00:25 +0000
Manifest next update: Wed 23 Sep 2026 08:00:25 +0000
Files and hashes: 1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: c3fhIsbYnzUNSl0YtxOxH+Hz7LEt/pFqjF21REhj9WM=)
3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:60:7b:fb:cb:1b:52:7a:33:c3:3f:5b:91:eb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Sep 22 08:00:25 2026 GMT
Not After : Sep 23 08:00:25 2026 GMT
Subject: CN=888b98485b632003b23c58a00354a4b805b63b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:74:fc:1c:42:21:83:17:b1:79:9b:88:82:
68:31:5c:a5:29:2b:91:9f:af:b8:47:ba:f4:26:74:
bd:ab:18:c0:53:56:e3:b5:38:a0:81:77:49:7c:5e:
e2:02:27:1a:87:40:69:0e:0e:50:52:3b:e3:b5:7b:
e4:fa:90:ef:b2:ff:e0:e6:bc:21:fb:4f:20:4d:15:
d7:b5:58:d6:36:fe:49:55:43:e8:ec:bb:f0:a6:77:
f3:a0:df:9a:5c:48:1e:e1:ae:f3:cb:34:4a:fc:41:
a3:4b:1d:1e:b1:37:11:c9:24:48:e2:43:f7:82:c4:
f4:f2:6a:c2:74:b7:c1:cf:73:2f:76:27:8f:6a:cd:
12:de:cb:1a:d1:ce:17:92:e1:d8:8a:d6:34:4d:0c:
d2:96:7e:49:c5:9d:2a:69:b5:10:fe:0b:b9:5c:68:
e4:15:fa:ad:e4:56:8d:34:d1:79:f0:fd:f4:b2:a1:
a9:d3:e5:a4:c6:ac:27:6e:c6:90:1c:4b:b2:f9:dc:
92:b7:c4:57:f6:95:0a:eb:7e:b0:27:16:de:a9:7d:
ea:9f:21:95:91:33:3e:93:c6:92:6c:8f:93:d0:59:
43:91:c5:1d:98:4d:05:87:78:71:70:d2:13:4a:67:
57:11:67:5c:46:fc:bd:2a:79:1e:66:24:30:25:2b:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:98:48:5B:63:20:03:B2:3C:58:A0:03:54:A4:B8:05:B6:3B:3E
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:b4:39:22:b6:0e:07:62:18:7a:02:88:22:30:e9:71:5b:
e6:d3:47:9e:c8:bf:38:05:cc:bd:9d:fc:75:9c:82:e1:5f:42:
4c:42:b4:3e:28:7f:ce:1d:77:e6:27:e1:9b:77:39:95:c7:3e:
d7:96:3f:0b:e5:a6:5a:bf:cf:38:30:8a:ee:79:f1:dd:49:82:
13:d9:c1:5c:61:80:fd:b5:23:7d:77:9a:98:d7:24:a1:f4:6b:
14:19:a7:12:a9:0b:82:ac:00:7e:7d:f7:a3:a8:2e:61:fc:5b:
87:74:c6:da:c1:9a:4b:d8:84:fb:6d:16:a7:1f:c8:fa:88:60:
d2:c5:83:dd:53:61:f4:55:c1:18:99:10:5e:95:00:ef:10:ed:
2a:d0:b3:a0:e7:3c:4c:a3:e8:80:8a:63:50:7a:2a:1b:62:0b:
f9:8a:81:cf:8e:97:95:c4:9d:99:98:7c:f5:33:58:77:9b:8d:
8a:18:01:62:0c:29:ea:56:c0:13:c8:54:74:28:76:ad:15:93:
aa:05:5d:7d:4c:84:1b:ae:a5:58:bc:fc:18:08:d2:01:1c:d6:
04:73:de:b1:cc:5b:af:df:7c:09:eb:02:82:bd:5a:ab:ca:81:
ad:72:67:0e:de:26:8c:33:a4:ce:0a:27:85:ef:f1:09:87:48:
83:86:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:13:34 2026 by rpki-client