Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: g1pyCFJUdIzeWK7GGZXIjDQNqkeMB78XMLYSYCASRQc=
Subject key identifier: AF:49:BF:E4:4A:05:F9:1C:19:D3:84:9E:17:07:AA:52:1E:ED:43:6A
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019FAA50743833183D0460864E11C99EEC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 082A
Signing time: Tue 28 Jul 2026 20:00:26 +0000
Manifest this update: Tue 28 Jul 2026 20:00:26 +0000
Manifest next update: Wed 29 Jul 2026 20:00:26 +0000
Files and hashes: 1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: oQdr5+U0/XNGXDNVKoLjw77K2dW7mVVTvcYXNO1ngEI=)
3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:74:38:33:18:3d:04:60:86:4e:11:c9:9e:ec:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Jul 28 20:00:26 2026 GMT
Not After : Jul 29 20:00:26 2026 GMT
Subject: CN=af49bfe44a05f91c19d3849e1707aa521eed436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:46:54:bd:66:72:80:38:23:6b:22:17:26:
b6:f4:df:d1:e9:73:0c:70:3e:11:9e:39:80:67:d2:
d2:46:f7:ee:c7:5c:d7:da:f8:29:f4:1c:3d:18:8a:
6f:bd:89:f6:68:1b:1d:98:6c:1a:4a:9d:03:90:cb:
f1:98:96:17:a0:35:7f:76:ec:7c:f9:d6:52:92:cc:
66:a0:d6:53:5f:bb:bd:91:01:5f:d2:6a:e5:cb:40:
c7:c8:4f:0f:9d:c9:00:38:e3:55:41:54:8a:ce:15:
b1:1a:58:e3:22:50:06:1f:42:7b:38:22:05:15:5c:
e2:4c:ff:67:0d:50:02:d7:56:e5:60:f1:d8:96:27:
1b:a9:e8:4b:2c:c8:72:79:86:92:ee:24:d7:0e:38:
f7:d0:d7:1c:b2:03:b7:eb:d0:78:1c:ed:40:99:ad:
57:47:a1:72:52:97:69:da:33:da:65:31:df:a5:8c:
21:fd:0b:7b:6d:8d:92:40:5d:fc:37:3b:fb:71:65:
29:ea:8c:cd:31:51:7d:24:1f:ce:c0:2f:70:c0:c5:
46:a5:fd:7b:15:92:46:6d:61:e0:a9:23:3b:c8:57:
4f:a0:f9:8f:6d:3a:dc:76:de:65:f7:0b:96:8d:e9:
43:5d:da:ae:0e:39:ab:1f:7e:8c:e8:6a:2c:e1:f2:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:BF:E4:4A:05:F9:1C:19:D3:84:9E:17:07:AA:52:1E:ED:43:6A
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:06:3d:69:7e:be:44:ea:14:81:9b:ac:94:00:76:fe:a3:
db:0f:b8:6a:08:a5:3e:99:c8:05:8d:9d:2b:7e:0a:0b:d2:15:
a6:9e:90:12:7e:b8:d9:17:aa:60:27:d5:5f:fb:ab:c4:cd:24:
0f:84:65:82:89:38:66:5d:14:24:12:45:a7:b6:ac:b4:8f:69:
db:c5:67:6a:d2:0f:d1:4e:3d:d4:6f:9b:68:14:5f:5b:9e:b6:
5d:34:87:53:33:ea:e0:d1:df:1d:1c:39:41:9e:d3:32:b5:d3:
8d:b4:af:7a:79:f0:86:ed:51:e5:b7:ab:77:3e:70:e2:b1:3b:
fc:c4:ab:65:71:0a:18:89:d9:1a:47:d4:4a:4a:3c:8e:d1:14:
15:77:2e:01:eb:8e:7e:60:c0:55:c7:88:32:65:fe:f4:d1:6d:
8c:44:1a:45:a4:6c:be:a4:bc:cc:7e:40:81:cd:51:35:f8:bc:
cc:79:4e:91:b0:a4:1b:e5:3b:d5:04:3f:bb:91:d2:c3:0d:52:
3a:d3:31:b1:d5:55:8c:70:43:89:16:c7:16:b6:52:c0:23:bb:
ca:dc:34:01:3d:0b:46:2b:29:6b:7f:1d:15:aa:51:36:74:98:
78:48:3e:a7:7f:83:5e:8f:87:74:23:4f:7d:9e:e8:cf:25:75:
42:93:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:46 2026 by rpki-client