Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: 3QsCiOTD6br7ZPoO3xHgtLVXbEqd0V5ueK0nmdchcTc=
Subject key identifier: 2A:42:D3:FD:F2:FA:F3:FA:7F:5F:15:84:29:DA:60:ED:45:D0:7A:F7
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019D258330F4016F3FB4DC02C8EAFB7EABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 06DA
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: d/S2ycA8FNbCa1hAyjciLDytvjN9IQgN4fr/buuuKKc=)
2: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
3: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:30:f4:01:6f:3f:b4:dc:02:c8:ea:fb:7e:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=2a42d3fdf2faf3fa7f5f158429da60ed45d07af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:4d:ad:33:60:da:dc:8c:f1:fc:32:5e:7b:
19:32:96:6f:73:7d:ac:b0:d0:e4:2c:b9:bc:28:9a:
4a:bd:cb:ac:45:4c:33:4c:f1:1d:16:71:b7:41:dd:
e6:8d:19:bf:5e:93:4d:24:c6:22:3f:1a:43:57:d7:
b4:87:46:30:63:c5:6f:c8:7a:52:ad:38:d9:ba:14:
ca:96:25:91:a4:6e:9c:bd:45:8b:9c:20:c0:ca:ab:
1a:c4:e4:06:8f:ac:b1:b8:50:74:c3:07:ef:31:81:
ff:b6:76:9f:71:76:66:6a:cd:d9:93:68:24:68:2f:
56:7f:33:c9:df:a6:68:61:03:48:38:fb:d9:81:f6:
49:ad:a6:78:4f:1d:18:36:be:3f:8f:3d:61:e6:80:
ce:a5:f9:60:f6:69:52:fe:48:23:f1:fb:84:b8:b8:
8d:19:45:f0:7c:93:3a:47:20:c1:f2:73:69:da:4b:
c2:2e:c6:fb:f5:e5:29:78:c1:2a:8f:e8:e9:62:4c:
be:50:89:8c:69:06:91:0f:73:83:0e:3f:bb:93:b3:
6d:40:7a:8b:13:a3:23:c6:67:2d:67:e2:c6:87:2c:
7b:e0:91:b1:dd:24:c7:ea:89:69:5b:69:31:6e:e8:
cf:97:a8:9e:1b:2e:1b:63:71:cd:58:68:3b:60:23:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:D3:FD:F2:FA:F3:FA:7F:5F:15:84:29:DA:60:ED:45:D0:7A:F7
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:b9:51:fb:e0:8d:8b:fc:68:a9:12:1a:06:88:d2:0a:c3:
32:ea:20:b5:fc:c2:48:8d:65:2e:d6:87:bc:dc:24:be:2f:f5:
5a:ad:cf:ea:14:56:07:58:b8:d5:67:65:5a:c9:2b:89:d4:2a:
7c:ce:86:dc:fc:11:24:a7:c5:73:22:ef:94:79:b8:fd:d5:3e:
f9:7b:1f:0d:93:c6:6d:d4:42:7e:ec:d2:4f:75:b8:8b:1f:b8:
cf:0e:71:b8:3f:84:a7:53:85:2d:2b:07:d5:03:f1:21:1e:60:
4c:8e:cc:d3:c4:be:74:f4:58:de:85:f1:91:13:01:8a:c2:49:
ec:2e:4f:e5:f0:d6:77:75:1e:df:ff:81:1e:33:04:fd:f0:23:
42:f8:02:1b:d9:96:57:6e:b8:fc:e6:7c:6d:8e:aa:76:6b:4e:
ab:30:d4:08:08:75:4a:b2:00:7d:46:6f:b6:31:e8:ed:08:d4:
f1:67:77:50:ef:bf:3e:58:65:ee:f1:07:2d:fc:fc:37:9d:d7:
a7:2e:1c:e2:5a:8a:4a:ba:3c:77:13:6c:19:3a:a7:2d:a4:dd:
26:26:31:d3:9b:60:fd:fe:c9:da:27:d3:7d:55:54:e7:c2:72:
5b:79:19:7d:c9:08:7a:07:bb:71:88:6e:6b:6a:a3:27:2f:c7:
1b:91:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:46 2026 by rpki-client