Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: UNLf0ftmSBZYfVZyuAARP2d631OxMu92enr8eUs48DI=
Subject key identifier: 6D:3A:B4:B0:49:1D:05:9E:66:2C:01:CD:0C:DD:68:35:87:A3:0C:FB
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 01A0C5FCBE1390E59A426C2635775FB0FBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 0F4B
Signing time: Mon 21 Sep 2026 22:01:10 +0000
Manifest this update: Mon 21 Sep 2026 22:01:10 +0000
Manifest next update: Tue 22 Sep 2026 22:01:10 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: kAYJvFHGx1NZ2VllTQs8HdFvjyC4dzAsw61rgTbuKGY=)
2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:be:13:90:e5:9a:42:6c:26:35:77:5f:b0:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Sep 21 22:01:10 2026 GMT
Not After : Sep 22 22:01:10 2026 GMT
Subject: CN=6d3ab4b0491d059e662c01cd0cdd683587a30cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:64:08:6a:60:16:ea:d1:68:4a:fb:0d:9f:
cc:9d:f9:f1:76:dc:a2:8d:9e:21:1e:d8:54:e9:8b:
ee:e7:9b:f5:04:94:c2:88:7b:f8:9e:aa:07:cc:8a:
cb:39:29:f6:d0:f0:59:17:9a:89:c2:b6:a3:03:f1:
07:46:3b:57:8a:0b:95:85:23:42:26:ac:eb:21:0b:
d1:3f:86:d8:ed:9c:ad:9f:65:40:f3:32:0f:e3:a2:
9f:e3:2e:80:0c:80:0f:6c:d7:46:f4:3b:30:5a:69:
42:33:37:ca:79:06:00:3d:47:32:69:c8:99:03:cc:
b4:a7:cf:30:5a:b6:70:82:07:b5:d9:45:a8:e8:fc:
80:02:c5:08:e9:7d:9a:ef:ed:4b:4c:48:f6:1a:37:
54:ab:2a:5a:ab:94:6a:9d:79:c1:d0:7c:50:17:35:
e7:8f:22:c2:9a:69:f5:e6:2a:fd:0c:c2:2d:a7:b4:
5c:76:24:47:67:07:5b:48:db:85:76:72:2a:93:00:
52:b1:46:2f:66:3c:e1:05:18:32:8b:0e:96:15:7b:
45:da:1d:5f:43:f1:17:8c:27:4c:53:42:dd:6e:e0:
41:a5:23:31:98:eb:6f:95:fe:c4:6a:cf:d5:55:7b:
7d:f3:0f:cb:80:97:de:dc:18:7f:cc:61:f6:e6:c7:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:B4:B0:49:1D:05:9E:66:2C:01:CD:0C:DD:68:35:87:A3:0C:FB
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f2:46:fb:7a:6a:27:f8:f6:1b:55:fe:63:40:8a:df:35:fe:
4a:09:d8:a8:70:a2:c3:a6:93:6d:b4:36:d8:95:63:d9:5d:7f:
a0:cb:3d:67:b9:33:29:b4:da:61:99:85:c9:78:80:11:02:26:
4a:bd:1d:6f:45:91:e0:c6:fe:64:87:29:59:1d:ef:1a:9b:fb:
78:3f:ff:47:f8:ce:53:64:0c:ae:70:be:6c:76:d1:88:da:ad:
a4:03:ad:d2:a7:aa:08:8f:08:04:81:a1:78:76:1e:64:98:60:
b1:4f:f5:0b:6b:d1:91:25:23:98:72:4a:34:33:21:e5:77:9e:
36:d3:d9:5a:83:e3:88:e8:a9:71:a6:3d:ac:e4:e5:3c:30:2c:
1c:3f:4d:8d:07:05:45:52:b5:92:85:9b:e4:45:2a:5a:9c:e2:
0f:1f:da:ba:c4:78:8f:9b:5f:55:d8:5e:74:e4:dc:cb:9c:84:
f4:a6:c5:5a:22:eb:17:5c:e8:6c:38:73:96:c1:5c:5e:a4:50:
41:72:a7:c5:99:85:ac:f8:79:ee:ec:58:d0:e2:d5:c1:2d:2b:
71:5f:7d:3d:e2:b9:46:34:de:58:b2:2c:b6:92:a0:15:e9:b3:
a7:a0:71:8f:d0:2d:58:5b:62:db:a3:fb:83:fd:ac:7e:a8:85:
99:d9:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:17:52 2026 by rpki-client