Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: 8oZh12JLEMEiJlUMPmwLqkGzPD0iuV66ZUb51Z9uno8=
Subject key identifier: 16:AF:EE:41:72:8A:8E:97:02:6D:48:27:12:A0:F2:23:84:46:10:65
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 019FAABEB411D8DE4E66AEF92ACC96D0C69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 028E
Signing time: Tue 28 Jul 2026 22:00:52 +0000
Manifest this update: Tue 28 Jul 2026 22:00:52 +0000
Manifest next update: Wed 29 Jul 2026 22:00:52 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: 1NRtAUts/efp84tdKCqcoxobJQhTL7B5flR36zKKcWw=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:b4:11:d8:de:4e:66:ae:f9:2a:cc:96:d0:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Jul 28 22:00:52 2026 GMT
Not After : Jul 29 22:00:52 2026 GMT
Subject: CN=16afee41728a8e97026d482712a0f22384461065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:2e:87:8b:67:39:18:34:d7:a4:81:7c:f9:
b1:b3:28:37:7d:d4:92:f6:15:e5:80:d4:bc:32:e4:
39:5d:75:4f:a2:92:91:28:f2:e1:15:57:ee:51:91:
c3:5a:6d:fd:ca:4f:24:89:50:6b:79:c7:5f:45:c8:
90:e8:00:ab:e0:cb:b3:4d:f7:c3:38:a7:04:da:9c:
6f:35:5f:f1:49:eb:27:78:fa:2f:5b:31:0e:5a:3a:
61:84:e1:c0:bc:b5:fb:ea:f2:ec:fe:b1:c2:4b:1f:
15:70:54:4c:c3:53:bf:7e:25:a0:92:bb:9c:f7:ab:
6a:45:8a:55:89:4e:02:60:1a:12:91:a4:4b:3e:66:
79:83:85:76:88:be:dc:64:75:a4:ed:1a:bb:b6:47:
cd:bb:a1:7b:81:cb:ac:79:ab:9b:cf:93:43:b6:9d:
41:9f:ba:a5:11:79:9f:bf:e7:c2:10:68:80:8c:af:
c9:68:37:65:9b:3b:b3:09:0d:44:7c:62:62:d8:94:
08:93:a5:4e:e7:06:f7:5a:e7:db:c3:dd:86:ea:e4:
7f:ce:0b:06:e0:8c:e0:07:f6:03:e8:f5:41:fc:74:
74:80:78:b7:68:c8:cd:e4:d5:52:7c:0f:08:a6:79:
8a:da:5b:98:46:fb:cd:68:d8:d3:01:f8:5a:87:2b:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:EE:41:72:8A:8E:97:02:6D:48:27:12:A0:F2:23:84:46:10:65
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:70:b6:0e:d9:d5:f5:38:e3:5d:a6:e2:a2:3f:df:f2:eb:
9e:1f:91:62:41:a5:e2:c4:10:f7:26:3f:6e:cc:b1:e8:db:68:
8e:b8:1e:dc:3c:a8:62:2e:23:3f:97:c6:1b:b7:e7:b5:0b:c1:
92:4c:75:b9:49:35:c5:5a:93:56:2d:de:9b:2d:72:41:fc:cb:
2b:f0:9b:c9:d7:48:ed:d8:b5:69:5b:78:2f:92:58:97:51:b1:
77:51:0d:6b:22:19:6a:d3:b5:64:07:25:98:3e:e6:28:42:fd:
84:b6:1f:c4:91:7d:05:d7:9d:85:9b:38:c2:45:2b:71:50:41:
44:a7:9b:3b:36:64:d5:80:f8:31:a8:66:20:c9:8c:10:80:22:
5f:00:0b:99:fe:99:4e:73:fb:19:d1:dd:4c:8b:6e:ab:f2:59:
82:fd:ae:52:9a:5c:b1:0d:76:1a:89:76:bb:10:08:64:36:f2:
98:e4:e5:92:76:1b:5e:be:9e:60:5b:08:18:f0:a6:07:0c:3d:
c7:80:fa:ed:56:8a:17:72:51:3b:93:e7:2d:ac:9e:fa:cc:6a:
ff:66:70:88:22:a0:31:fa:03:11:b1:13:42:c4:83:6a:26:9a:
f3:6c:5f:20:3e:74:40:36:2a:7f:61:80:1b:e0:89:e6:89:10:
bd:cd:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:38 2026 by rpki-client