Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: +L3nc2Id6Bi1kHtZtMc77TS9RNCRB7kSnVyGvlM0HMo=
Subject key identifier: E8:43:23:14:3E:AE:E6:D1:04:20:D2:49:C4:42:6F:AF:19:3E:1A:C9
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 019FAA1956D7EC6D6CB885C0B4C1C349FEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 0EB8
Signing time: Tue 28 Jul 2026 19:00:14 +0000
Manifest this update: Tue 28 Jul 2026 19:00:14 +0000
Manifest next update: Wed 29 Jul 2026 19:00:14 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: tSZUQ6/1sxA2wntdhoR4HIJFG/6+bnTq/NoNc8Y/DtE=)
2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:56:d7:ec:6d:6c:b8:85:c0:b4:c1:c3:49:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Jul 28 19:00:14 2026 GMT
Not After : Jul 29 19:00:14 2026 GMT
Subject: CN=e84323143eaee6d10420d249c4426faf193e1ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:eb:3c:d7:24:ce:e5:d5:a4:2e:a2:09:cb:
c8:5e:b0:8a:94:de:3a:c7:87:94:70:d6:3f:49:b8:
8e:4a:98:5d:f7:b3:81:bd:6d:de:47:20:b7:71:4f:
65:14:50:78:2b:99:55:da:ed:a1:50:3d:6c:02:b6:
eb:17:22:d2:c2:41:f2:98:9f:d1:bf:e0:a9:66:7d:
9b:36:77:b1:4f:4e:fb:a9:95:b2:15:ca:b8:1d:ca:
f5:4d:ba:dd:9e:ad:2e:de:93:c9:18:d5:12:bd:c9:
40:4b:66:10:5f:be:95:8d:69:b3:82:6d:bb:46:a7:
24:e1:cd:8d:94:af:4c:cf:41:4d:45:5e:05:c0:c6:
d7:9b:fd:5a:7b:9c:f2:6b:e2:c8:48:bb:bf:00:7e:
66:cc:34:ee:41:69:b2:04:a5:db:16:5a:ad:5a:de:
43:8f:91:90:c9:15:a3:7b:f6:dd:0d:b3:f2:9d:4a:
89:1e:3e:cc:6c:f1:40:71:75:52:c8:0d:cc:51:36:
ed:d5:26:c1:27:29:4d:5d:da:a0:db:90:13:83:b1:
a2:5a:34:84:01:65:3f:4b:c6:12:d0:e0:b2:d6:de:
7f:84:55:35:60:a6:f7:9f:2c:95:51:4b:62:41:e0:
f1:d3:6e:a7:bd:07:3a:83:f2:d8:be:0a:b2:41:8a:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:23:14:3E:AE:E6:D1:04:20:D2:49:C4:42:6F:AF:19:3E:1A:C9
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:78:da:8a:6d:a7:91:0b:8b:e0:49:43:ad:03:2f:8c:e4:0d:
3b:52:5a:f7:ab:78:fb:f7:b5:3e:f5:5e:d9:f5:25:f1:4d:22:
16:2c:2c:38:2b:e0:bb:0c:a9:9e:f0:72:9a:b1:8d:40:fc:8d:
4d:7b:f9:b6:6d:29:d6:67:15:b7:79:7b:f7:4a:d1:58:57:a8:
25:1b:58:1a:ed:90:6e:15:e6:ec:90:bb:d9:0c:7f:d7:a0:18:
6c:ba:54:60:7c:0d:4a:83:c7:a3:9f:81:f0:4b:57:ec:65:c4:
f5:ec:5c:9c:74:df:ac:36:98:6d:0a:99:f4:a9:c2:1f:09:30:
ea:b0:7e:1c:94:f3:f5:ae:99:f9:43:20:a4:bb:0d:fc:9c:fa:
3b:a3:5f:c2:e7:c2:38:cb:b4:fc:14:1d:bb:f1:98:42:10:22:
cd:be:18:0c:bf:22:0e:de:c6:de:47:3d:22:da:5d:4a:71:67:
86:2e:30:75:29:a4:c6:a6:d1:24:4b:c0:28:51:ee:46:dc:a0:
9b:5d:e2:3a:16:2c:f8:b4:b4:ec:ff:9c:c8:7e:a5:23:2e:8a:
ae:09:57:ae:f9:5e:96:99:36:a1:9e:67:2f:37:bb:9a:a6:a2:
66:20:00:a4:a3:bf:7f:58:64:19:3d:92:91:a8:86:1b:dc:20:
a0:4a:9b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGVbX7G1suIXAtMHDSf70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDI5MjExZjkyZTU2MGYwYjc4MzRiYjI5MzJhYzYzY2Fi
ZmExNGEwHhcNMjYwNzI4MTkwMDE0WhcNMjYwNzI5MTkwMDE0WjAzMTEwLwYDVQQD
EyhlODQzMjMxNDNlYWVlNmQxMDQyMGQyNDljNDQyNmZhZjE5M2UxYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPjrPNckzuXVpC6iCcvIXrCKlN46
x4eUcNY/SbiOSphd97OBvW3eRyC3cU9lFFB4K5lV2u2hUD1sArbrFyLSwkHymJ/R
v+CpZn2bNnexT077qZWyFcq4Hcr1Tbrdnq0u3pPJGNUSvclAS2YQX76VjWmzgm27
Rqck4c2NlK9Mz0FNRV4FwMbXm/1ae5zya+LISLu/AH5mzDTuQWmyBKXbFlqtWt5D
j5GQyRWje/bdDbPynUqJHj7MbPFAcXVSyA3MUTbt1SbBJylNXdqg25ATg7GiWjSE
AWU/S8YS0OCy1t5/hFU1YKb3nyyVUUtiQeDx026nvQc6g/LYvgqyQYrigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhDIxQ+rubRBCDSScRCb68ZPhrJMB8GA1UdIwQY
MBaAFATSkhH5LlYPC3g0uykyrGPKv6FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQt
ZThkMTkyOTYzOTVjLzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQtZThkMTkyOTYzOTVj
LzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnjaim2n
kQuL4ElDrQMvjOQNO1Ja96t4+/e1PvVe2fUl8U0iFiwsOCvguwypnvBymrGNQPyN
TXv5tm0p1mcVt3l790rRWFeoJRtYGu2QbhXm7JC72Qx/16AYbLpUYHwNSoPHo5+B
8EtX7GXE9excnHTfrDaYbQqZ9KnCHwkw6rB+HJTz9a6Z+UMgpLsN/Jz6O6NfwufC
OMu0/BQdu/GYQhAizb4YDL8iDt7G3kc9ItpdSnFnhi4wdSmkxqbRJEvAKFHuRtyg
m13iOhYs+LS07P+cyH6lIy6KrglXrvlelpk2oZ5nLze7mqaiZiAApKO/f1hkGT2S
kaiGG9wgoEqb1A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:58:01 2026 by rpki-client