Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: LLKGJ9UNpUMzK9+TNSLQNQRusMk+QUt4PgCSPZnS2KY=
Subject key identifier: 52:57:A3:A1:21:0B:14:37:A2:94:88:BD:57:B1:72:85:B0:95:29:25
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 019DA52F66D24F7F18D1114BA708A731F505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 0182
Signing time: Sun 19 Apr 2026 10:00:40 +0000
Manifest this update: Sun 19 Apr 2026 10:00:40 +0000
Manifest next update: Mon 20 Apr 2026 10:00:40 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: b730JhsV+iG/wu4IqFH73NFGUp6PoziaGizfG7xPSVI=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:66:d2:4f:7f:18:d1:11:4b:a7:08:a7:31:f5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Apr 19 10:00:40 2026 GMT
Not After : Apr 20 10:00:40 2026 GMT
Subject: CN=5257a3a1210b1437a29488bd57b17285b0952925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:c4:94:fd:a6:1e:82:f8:e3:84:53:79:83:
f5:47:7a:ea:68:7d:a8:52:43:a2:43:93:ee:6e:1f:
bf:50:f9:5b:71:09:91:6a:39:3a:42:f5:ad:b7:c6:
63:33:45:43:ca:80:ce:55:b5:dc:06:ed:d3:f9:23:
48:d0:6c:aa:0b:83:48:06:d6:ea:04:58:14:ae:e0:
97:aa:dc:44:ad:29:26:ae:ed:fe:14:55:77:77:6a:
90:12:59:c2:1c:29:3a:fc:c2:16:1b:ab:94:74:93:
4a:cd:26:8f:c2:cf:d2:57:92:ae:1b:05:db:97:cd:
0a:07:12:ab:73:50:b3:af:5b:c4:bf:b3:19:c3:30:
55:b8:37:ae:7d:33:c3:94:01:d0:bd:e8:97:bf:45:
6f:3d:8d:f4:7e:e1:cf:78:0c:84:3b:14:97:09:bd:
e8:53:2f:21:a4:62:71:44:9e:11:c6:30:f9:6a:e8:
c1:d6:b9:7c:65:d6:c0:97:2d:8d:36:09:e9:f3:bf:
52:48:fb:24:3c:ed:27:49:16:6e:49:ca:ff:0c:c8:
92:01:90:e0:a6:90:a5:7f:6c:3a:8e:4b:7f:ad:2d:
b5:6b:2d:5d:67:fb:b6:7c:27:46:09:ba:d7:8f:a3:
58:f0:cd:2c:65:0a:5e:1e:3a:9d:46:b9:2e:83:ee:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:A3:A1:21:0B:14:37:A2:94:88:BD:57:B1:72:85:B0:95:29:25
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2c:3f:f2:88:b0:17:97:bc:fa:03:ac:fc:83:52:3e:37:87:
dc:07:e1:6c:ae:9e:eb:2c:9c:c2:30:b6:fa:91:9b:5b:68:65:
f8:3c:3e:d8:8a:bd:61:0f:cb:38:18:41:68:1a:ab:2c:84:c6:
e0:95:8b:83:d8:70:14:c2:36:f0:bf:a0:90:34:16:17:30:6c:
47:6b:53:d9:18:32:a8:08:13:6f:4f:f5:0c:fe:d8:77:2d:6f:
1a:cb:82:de:b7:0c:0e:b2:66:f0:5d:63:40:84:19:59:70:70:
df:83:83:35:b2:e7:e8:c9:67:cf:0b:78:34:78:10:10:b4:1a:
4f:39:ad:8b:29:59:3a:7c:46:e3:2f:d6:c1:40:45:6c:5e:8d:
f2:1b:e4:35:d7:7c:8c:63:cf:c4:0f:37:14:17:77:ef:05:0d:
20:9e:92:10:41:72:f4:2b:ce:d6:5d:52:76:34:b5:04:af:da:
79:92:11:b9:7e:30:9c:39:00:90:1d:3b:93:a7:16:26:84:c4:
9c:c2:9c:e3:d7:0e:47:44:91:2b:7e:9f:86:87:74:01:e8:45:
81:b1:a9:43:0d:36:43:00:0b:6c:a3:08:3a:1c:9e:16:06:12:
32:12:a4:43:cb:bb:ec:56:ad:99:0c:01:d1:c6:91:9c:ec:52:
e1:fb:3b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL2bST38Y0RFLpwinMfUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzIwZWI0MDdkNWIxYjliMjQ0NTNiODI2Y2FhNmYwNzRl
N2QxMmQwHhcNMjYwNDE5MTAwMDQwWhcNMjYwNDIwMTAwMDQwWjAzMTEwLwYDVQQD
Eyg1MjU3YTNhMTIxMGIxNDM3YTI5NDg4YmQ1N2IxNzI4NWIwOTUyOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlobElP2mHoL444RTeYP1R3rqaH2o
UkOiQ5Pubh+/UPlbcQmRajk6QvWtt8ZjM0VDyoDOVbXcBu3T+SNI0GyqC4NIBtbq
BFgUruCXqtxErSkmru3+FFV3d2qQElnCHCk6/MIWG6uUdJNKzSaPws/SV5KuGwXb
l80KBxKrc1Czr1vEv7MZwzBVuDeufTPDlAHQveiXv0VvPY30fuHPeAyEOxSXCb3o
Uy8hpGJxRJ4RxjD5aujB1rl8ZdbAly2NNgnp879SSPskPO0nSRZuScr/DMiSAZDg
ppClf2w6jkt/rS21ay1dZ/u2fCdGCbrXj6NY8M0sZQpeHjqdRrkug+7kRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJXo6EhCxQ3opSIvVexcoWwlSklMB8GA1UdIwQY
MBaAFAZyDrQH1bG5skRTuCbKpvB059EtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzct
NzhjMGMwMmY3OGEyLzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzctNzhjMGMwMmY3OGEy
LzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCw/8oiw
F5e8+gOs/INSPjeH3AfhbK6e6yycwjC2+pGbW2hl+Dw+2Iq9YQ/LOBhBaBqrLITG
4JWLg9hwFMI28L+gkDQWFzBsR2tT2RgyqAgTb0/1DP7Ydy1vGsuC3rcMDrJm8F1j
QIQZWXBw34ODNbLn6Mlnzwt4NHgQELQaTzmtiylZOnxG4y/WwUBFbF6N8hvkNdd8
jGPPxA83FBd37wUNIJ6SEEFy9CvO1l1SdjS1BK/aeZIRuX4wnDkAkB07k6cWJoTE
nMKc49cOR0SRK36fhod0AehFgbGpQw02QwALbKMIOhyeFgYSMhKkQ8u77FatmQwB
0caRnOxS4fs7hg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:34 2026 by rpki-client