Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: WlVoziMz9BceRozDLBavTWuf2O+AIdSw7ZZVZ3MZb58=
Subject key identifier: F1:E4:68:C9:20:66:3E:DE:02:01:79:17:E4:A4:B3:6F:66:56:72:62
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019DA30AEC52FFCB426BEAB4CCB2AA27BCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 071B
Signing time: Sun 19 Apr 2026 00:01:35 +0000
Manifest this update: Sun 19 Apr 2026 00:01:35 +0000
Manifest next update: Mon 20 Apr 2026 00:01:35 +0000
Files and hashes: 1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: wgMvd5r2VHykstI0jjgrx6zRjpv9IVvEBeOS3GIZ3DM=)
2: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
3: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:ec:52:ff:cb:42:6b:ea:b4:cc:b2:aa:27:bc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Apr 19 00:01:35 2026 GMT
Not After : Apr 20 00:01:35 2026 GMT
Subject: CN=f1e468c920663ede02017917e4a4b36f66567262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:13:be:16:73:31:c3:5f:5f:3d:30:62:24:
2a:0f:fc:ae:1f:44:1d:c0:d1:66:d2:35:86:3d:df:
8a:05:25:94:74:6e:3b:a6:41:b5:fa:d1:19:02:b1:
ce:58:c9:6c:a7:a6:ef:fe:dd:96:64:3b:92:c5:28:
46:d0:6d:a2:2f:17:2f:40:0e:69:e9:1e:6f:f2:63:
17:0e:b9:04:15:00:c1:49:17:80:5c:d7:da:6a:a9:
77:b7:2d:e2:6d:af:50:25:8c:32:34:75:68:44:57:
5c:f3:eb:6d:d0:45:1d:8c:2f:c7:12:73:30:08:c4:
c2:a1:18:09:9a:21:42:99:e5:ec:84:24:ea:2d:99:
a0:4e:36:58:1b:e0:82:54:f0:7c:b5:e5:7c:24:92:
aa:1d:ae:39:ce:c6:01:9a:98:c6:43:91:a4:ae:13:
4f:90:e5:90:ed:95:40:78:4b:5f:ca:a2:6b:a6:58:
e3:ca:a0:16:c2:e0:d0:e0:60:5f:aa:b4:c2:5b:3c:
c5:47:11:cb:7b:5e:7c:23:ba:a3:5c:2f:f3:e7:81:
b7:2f:41:02:48:c0:57:74:df:ef:e1:a9:37:04:9e:
71:04:25:a3:86:26:af:1c:c8:56:7c:a0:0b:21:49:
45:e6:81:13:cb:2d:d7:fc:03:50:a1:66:a8:ef:f3:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:68:C9:20:66:3E:DE:02:01:79:17:E4:A4:B3:6F:66:56:72:62
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:1f:36:e5:4a:f2:d0:51:ec:2c:b1:db:48:fc:10:e2:74:
8b:a2:bc:23:9a:c2:57:17:a8:18:76:c6:d1:fc:d1:2c:43:ac:
4e:78:3d:a8:62:22:34:49:cd:56:e1:67:2b:b7:40:5a:ee:00:
62:8e:12:f9:16:9e:2e:c4:3a:23:1b:7a:37:ff:02:f3:99:92:
8f:66:2a:b6:06:45:6c:a3:72:24:bc:c3:00:f1:9c:2c:63:d5:
18:b8:ab:0e:11:eb:d4:a3:df:4a:4e:d7:7e:6d:d6:e2:56:35:
82:07:52:90:02:f3:3b:5f:7d:f9:1a:6f:b5:54:83:fd:01:78:
b3:f4:44:7c:c4:3a:dd:a2:d0:16:f4:29:27:ec:24:78:63:4b:
d5:c0:03:05:0f:c3:bf:6a:e2:7e:7f:ab:29:71:0f:4d:fb:0d:
d4:08:e0:49:b6:b8:37:98:2d:24:33:71:7d:68:6d:11:0a:7b:
da:58:08:7d:7d:43:bb:87:1b:ef:9d:77:55:cb:6e:b2:ac:7a:
5c:97:65:a9:37:67:cb:ba:c9:04:c1:d5:16:fa:fa:a4:41:db:
87:a2:1b:12:b1:80:f3:57:da:2c:ee:49:c9:dc:6a:ad:09:3e:
19:51:18:0c:78:77:0b:1f:64:4a:20:7a:08:2c:5d:6b:79:d2:
56:46:39:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:04 2026 by rpki-client