Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: shAXue7com9cQ92vk/MZRvYmZ+40TB3Z/YpY6ycD7TA=
Subject key identifier: FF:ED:1E:52:0D:CD:AA:12:EA:4D:7D:CC:4C:04:4D:19:A9:FB:2C:5C
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019FA86238FC578E14D2F7F2645D6F559D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 0829
Signing time: Tue 28 Jul 2026 11:00:37 +0000
Manifest this update: Tue 28 Jul 2026 11:00:37 +0000
Manifest next update: Wed 29 Jul 2026 11:00:37 +0000
Files and hashes: 1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: lPQ9RFahPdtG9LC6m2IF1wBee7sQdGDpGltpBoMWXvQ=)
3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:38:fc:57:8e:14:d2:f7:f2:64:5d:6f:55:9d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Jul 28 11:00:37 2026 GMT
Not After : Jul 29 11:00:37 2026 GMT
Subject: CN=ffed1e520dcdaa12ea4d7dcc4c044d19a9fb2c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:bb:a2:29:ee:bc:a4:47:19:2c:8f:3a:5f:
b6:e3:02:e5:6e:90:0a:7f:b2:05:c2:80:c4:6e:5e:
9d:73:8f:ff:f9:71:1c:74:02:a9:30:07:83:5c:ff:
ab:32:a2:92:ea:98:69:8c:03:79:4d:4a:67:e1:ce:
76:9f:33:62:50:2b:41:fc:83:84:0b:52:1a:35:a0:
af:21:b8:c0:64:77:a9:eb:42:8a:f3:75:d3:ab:e2:
e1:de:cb:e3:1a:43:ee:26:84:a1:4d:10:c3:e7:2f:
43:d3:c3:dd:3e:3f:bc:f3:aa:c4:59:11:15:88:bf:
c6:84:49:99:43:75:68:2e:d5:61:d2:dc:92:2d:2e:
58:d5:0c:a7:b0:d7:73:7f:7c:c3:89:74:49:79:56:
e4:16:7e:fb:33:64:19:99:cd:e7:fc:82:e9:5d:b8:
e0:55:a8:79:51:62:01:86:cd:a8:91:18:ce:f9:23:
b3:d7:1d:e0:34:a0:2c:32:66:40:4b:a6:77:61:ae:
dd:7a:ae:3d:7d:d3:e6:53:b9:2a:2a:57:65:ca:63:
3d:be:bb:06:6c:2d:26:cd:90:82:f4:59:81:45:2d:
45:3c:f2:43:d1:70:4c:b7:cc:0c:3d:e7:53:be:4e:
18:82:a7:54:4f:b8:99:b0:ef:fc:c0:24:fe:1d:9b:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:1E:52:0D:CD:AA:12:EA:4D:7D:CC:4C:04:4D:19:A9:FB:2C:5C
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7f:06:5e:ab:3c:04:5d:71:2e:11:c8:bb:db:82:52:d7:d3:
a9:75:ee:4e:f5:a0:5b:b4:98:e4:30:7f:1a:36:08:b9:d0:73:
36:1c:30:a1:91:3f:35:d8:4a:34:fb:2a:53:27:25:f6:fe:af:
16:c1:24:23:e2:99:5a:be:52:43:ae:aa:30:ea:96:8a:4c:3c:
5e:43:e6:80:8e:db:6c:80:c9:9d:22:e5:2d:ab:33:0c:2e:bd:
16:29:a6:21:27:9d:e0:96:aa:bc:90:50:b5:89:6f:c8:77:73:
7e:a3:ca:30:21:55:d6:bd:b7:84:c1:61:8e:eb:fe:60:08:07:
f7:1c:79:9d:cf:48:33:bf:b4:0e:70:19:73:3e:cb:85:63:a0:
55:12:9a:39:66:06:b4:45:0e:e0:9c:45:51:7e:68:03:5c:d7:
7e:bd:a3:ee:69:55:bd:65:2b:c3:b1:f9:70:3e:aa:b9:02:9d:
d5:d5:32:26:3c:0f:69:4a:ee:49:ee:74:67:b6:4e:fa:5b:52:
07:8c:49:38:44:bd:25:ba:cb:47:5e:03:2b:ae:1c:e5:68:07:
b6:69:0a:1f:d3:97:e3:20:af:9c:da:3c:76:53:7a:4a:11:6c:
23:27:0c:fb:27:e2:56:1e:8c:a5:0b:76:31:d2:f6:1f:49:49:
35:1d:fe:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:35 2026 by rpki-client