Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: E35kQ56cVPLLosg0A7qebIBuaCBqn7cup42BNc78Dbw=
Subject key identifier: 73:49:68:7F:92:8B:58:D8:14:CB:56:8E:8C:CF:D8:4D:DD:3A:EB:29
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019CA9EAC8C6FE6E3D8CAEF957CB883B3F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 069A
Signing time: Sun 01 Mar 2026 15:01:02 +0000
Manifest this update: Sun 01 Mar 2026 15:01:02 +0000
Manifest next update: Mon 02 Mar 2026 15:01:02 +0000
Files and hashes: 1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: TXpWoJbmJwkPYfNTqPTVYDU9psLnddmVS9waZk2JUd8=)
2: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
3: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:c8:c6:fe:6e:3d:8c:ae:f9:57:cb:88:3b:3f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Mar 1 15:01:02 2026 GMT
Not After : Mar 2 15:01:02 2026 GMT
Subject: CN=7349687f928b58d814cb568e8ccfd84ddd3aeb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:d7:70:5f:4a:80:39:f2:5b:ca:a0:45:e4:
d8:f8:17:1c:06:67:96:73:8f:a0:00:b8:6e:df:63:
1a:1d:ef:87:1d:0a:7e:6c:cd:1d:92:6d:f2:73:37:
e1:dc:9c:15:91:76:81:34:74:89:c3:8a:76:fc:f8:
8c:dc:82:85:a0:f9:a2:66:3e:ca:e3:a8:ca:79:a7:
1a:62:86:cf:84:3d:4e:35:f4:1f:20:6d:85:b1:ea:
a9:a3:5a:77:23:f7:04:01:83:b4:d8:80:ff:4d:28:
02:56:2f:d6:99:a0:4c:ac:a2:ed:c4:b0:0d:44:9b:
56:22:84:82:20:15:74:bb:6c:b0:d0:6a:82:23:db:
d9:ce:df:1a:e9:7c:4f:18:42:79:9a:51:b5:44:6d:
d1:fa:38:78:7d:c0:15:80:a1:18:22:c2:ad:3f:00:
44:04:7a:1d:b7:ce:65:30:f1:eb:fa:00:57:e3:eb:
de:c2:4d:14:66:d7:4f:9f:2d:5e:5d:4e:b6:62:f9:
9f:b9:c5:c5:c5:06:c0:59:a7:00:e5:b9:30:06:7c:
35:f4:1d:96:c5:58:e1:55:8b:a7:80:bc:1a:70:5c:
d8:f7:92:04:70:ed:73:2e:66:90:52:ee:ed:9d:16:
9a:0f:b0:32:d4:3f:76:63:70:bb:77:a0:5e:fb:ff:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:68:7F:92:8B:58:D8:14:CB:56:8E:8C:CF:D8:4D:DD:3A:EB:29
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:27:39:77:53:4e:e9:f9:08:21:00:4a:03:5f:8c:5f:2d:5b:
84:a1:c5:d9:ab:7b:f7:7e:1c:3b:55:c9:db:f6:63:a9:eb:cd:
31:73:0e:c3:b3:08:9a:94:19:d1:b2:90:e8:26:6b:d5:4b:a5:
ca:c1:13:2f:9f:c0:67:05:5c:58:eb:bc:df:b8:21:07:91:4a:
f0:18:ff:d7:42:b2:67:53:b9:5c:3f:73:69:a9:8c:10:e1:17:
11:a4:85:df:79:90:e1:89:eb:2f:f6:86:b7:a2:e5:91:e5:fc:
57:94:87:9f:09:4f:1c:89:61:08:a8:83:cb:01:1a:c2:f2:0d:
dc:9e:09:27:8d:72:83:f3:8f:be:a5:91:ea:61:62:e6:db:a9:
a2:1c:41:78:cf:7a:3e:7e:07:fe:f5:a5:22:a6:d8:49:6d:8a:
ed:6f:fc:74:2a:3f:38:70:65:b4:fa:a3:96:1b:17:dd:9b:20:
f4:e4:14:e6:3b:ce:97:d7:be:63:0b:62:06:b6:56:48:74:9d:
06:24:18:77:63:70:9f:95:a6:7f:42:2a:c6:84:99:03:b5:3f:
05:14:bc:8e:ba:89:15:b7:f9:81:f9:38:eb:7a:b5:16:81:09:
9e:63:14:7a:c7:c4:47:88:01:9b:e6:ca:b0:b5:9c:05:d5:91:
66:be:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:12 2026 by rpki-client