Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: r6nYDDS9md/jEFMY7bDYNBLaQcJlN4dlCR/klDjx0lo=
Subject key identifier: 9C:F4:E9:C4:66:B0:B1:29:33:03:08:F4:FE:4D:AD:D6:60:B9:20:B0
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 01A0E1ABA1369F45B5023FE4D2458D7BA5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 032F
Signing time: Sun 27 Sep 2026 07:01:56 +0000
Manifest this update: Sun 27 Sep 2026 07:01:56 +0000
Manifest next update: Mon 28 Sep 2026 07:01:56 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: zxVMyX4Ckx9LQpXh924DfMIsrODuNx26CeXnUu6sLfI=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:a1:36:9f:45:b5:02:3f:e4:d2:45:8d:7b:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Sep 27 07:01:56 2026 GMT
Not After : Sep 28 07:01:56 2026 GMT
Subject: CN=9cf4e9c466b0b129330308f4fe4dadd660b920b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:7b:3c:7b:c8:b5:26:3b:75:fc:e3:9f:28:
5b:5b:87:02:7a:74:01:30:51:1b:7e:f1:57:b4:3a:
82:9c:0f:8b:32:b7:4f:93:cb:81:33:8d:a6:a2:d9:
3b:a1:71:dc:c2:ac:09:f7:8e:22:a6:17:1e:65:f8:
79:cc:a9:a6:32:39:59:fc:21:d1:3f:ec:4b:00:35:
90:22:ca:e0:e2:8f:ae:cb:fe:48:c7:22:2c:d6:fc:
29:bc:5c:a8:9c:9d:1d:71:de:8f:25:e4:07:d6:1f:
53:7c:b3:d2:14:7a:37:9e:69:b0:12:8f:cd:d0:de:
6b:cf:75:f8:ee:c7:a2:18:6b:e4:84:c5:b4:dc:58:
a1:d3:9f:be:69:ef:22:91:a5:85:73:66:bf:64:2d:
ab:db:4f:65:33:25:13:3e:e2:51:8f:62:ec:51:95:
56:2b:8e:dd:9a:5d:8b:c7:05:21:8c:02:09:b8:36:
51:b1:af:21:d4:c5:01:89:c9:99:a3:ea:29:04:1b:
76:23:d0:4a:7f:a9:a8:74:48:ff:77:e9:d8:c6:ad:
a2:73:9e:94:37:e4:de:1b:14:62:cc:a9:27:2e:d5:
e8:94:fb:4e:44:f6:16:d7:b6:26:b5:d2:e3:b8:4c:
5e:a3:39:69:ed:5d:d0:5a:bf:b9:c2:8b:b7:08:d7:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F4:E9:C4:66:B0:B1:29:33:03:08:F4:FE:4D:AD:D6:60:B9:20:B0
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:d3:06:0e:3e:aa:94:24:7e:0b:74:30:e0:50:fe:8e:af:
3a:dd:8a:ea:31:5d:a8:99:fb:5e:5f:44:32:9d:c1:64:05:b2:
c3:12:0c:95:42:d7:e7:e0:5a:6a:ae:38:06:77:81:40:2c:8c:
22:22:e8:d8:fe:c1:81:28:6c:c5:ba:9f:9e:7f:b7:5e:02:01:
77:e4:8f:8e:97:3d:eb:4d:d0:c5:66:96:f6:ba:f0:36:46:e7:
8b:46:ae:31:a9:26:53:10:42:ba:d0:da:b4:a2:c7:d6:a8:4c:
c8:e9:43:5f:d0:18:75:29:eb:12:7f:e4:a5:47:2b:49:ab:d1:
33:d6:de:b5:46:15:a5:02:84:bd:0a:96:75:3b:97:09:9f:ca:
a4:83:83:b1:36:f5:30:53:e3:b7:48:8d:eb:df:ab:53:4d:dd:
3b:a9:eb:e4:70:c7:21:d4:02:bc:48:a0:5d:53:ce:60:39:10:
16:a5:a7:d6:51:c9:67:53:f4:d2:e2:36:1d:59:a8:4e:eb:d2:
d4:35:01:43:f2:a8:f4:19:d9:39:17:04:72:97:a8:54:eb:7a:
d7:ae:5e:95:7c:39:68:c4:c6:07:fd:45:5d:17:c3:d9:a2:35:
9b:1a:e7:75:76:6d:10:ba:d0:bc:8c:91:0b:ce:db:fe:8f:19:
fd:f0:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:40:51 2026 by rpki-client