Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: 9c9Q4hxRscZ+Mdr4b9CbzRWb/ZbHLvTgZNB0+Ssqk3U=
Subject key identifier: 2A:4F:B0:B7:D2:9F:91:33:1F:17:24:92:80:19:24:A1:B4:22:A4:17
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 01A0CFDAE86ACB5E153FAA7D7A96C831D287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 08C2
Signing time: Wed 23 Sep 2026 20:00:25 +0000
Manifest this update: Wed 23 Sep 2026 20:00:25 +0000
Manifest next update: Thu 24 Sep 2026 20:00:25 +0000
Files and hashes: 1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: moSsKezGuPVTYlHa2F0IYXm6IY64CLb+14V8Z4Lk3x0=)
3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:e8:6a:cb:5e:15:3f:aa:7d:7a:96:c8:31:d2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Sep 23 20:00:25 2026 GMT
Not After : Sep 24 20:00:25 2026 GMT
Subject: CN=2a4fb0b7d29f91331f172492801924a1b422a417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:59:de:5a:da:12:ff:85:75:b1:df:5c:65:
5b:dd:8e:36:a3:a0:13:a1:c0:5e:d4:b1:ac:7e:9a:
0d:f6:67:e3:b0:b4:c0:89:4a:f1:c9:ef:4a:d8:af:
8c:21:6d:6a:28:f4:b7:7c:73:48:15:2e:06:13:11:
7f:4a:56:51:1c:3d:c4:aa:17:74:d7:99:19:f9:18:
09:09:5f:c3:e8:be:86:47:c8:aa:a8:73:95:55:d2:
d9:c7:b3:4c:47:65:7c:e9:ad:ac:71:1a:26:50:50:
13:b8:21:f8:b0:ee:97:22:e2:9a:ab:2f:f4:6d:82:
71:97:ac:25:d7:cf:38:bf:27:3e:cf:03:ad:82:54:
2c:bc:6f:6b:ba:1a:74:bd:c6:fa:3f:e1:b2:23:e1:
0b:26:b9:5f:23:ff:2f:5e:91:f5:29:db:08:d8:25:
56:e1:f2:e7:cb:1f:b8:a1:2b:14:d1:b5:4d:1f:f8:
0b:90:79:45:fe:e9:55:12:6b:9a:d6:33:8d:5d:c8:
39:19:03:9c:ba:80:a8:8d:d6:78:c9:ec:88:4a:80:
25:2f:e7:48:d8:f7:96:8e:12:b7:e2:71:ff:29:47:
d0:80:be:50:0f:a6:ef:ab:b0:17:cd:01:86:c5:7e:
0e:de:ea:fb:88:03:d6:39:fd:4b:14:f6:bb:d4:57:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:B0:B7:D2:9F:91:33:1F:17:24:92:80:19:24:A1:B4:22:A4:17
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7e:bc:d0:60:81:4a:3e:34:5c:30:d7:d0:52:fa:76:0c:19:
24:6f:10:31:7b:92:24:d2:22:45:03:6c:f9:25:66:f9:11:88:
1d:92:9f:2b:52:01:f6:c9:07:95:ff:fd:4a:e6:0d:14:33:67:
a4:e5:71:ef:ed:51:e2:a6:7f:f7:75:46:c0:92:22:13:ca:25:
2e:0c:90:fc:a3:cd:93:08:ba:10:b0:1a:dc:19:84:55:95:c5:
49:33:5a:c3:48:8a:5f:fe:61:3f:13:54:e6:b4:b6:d5:1a:15:
9e:41:d2:ed:8f:32:3c:79:74:7d:0f:d8:2f:90:5c:b1:a6:cd:
76:ba:cf:48:7f:af:58:4d:5b:65:69:4c:c9:75:dd:5f:32:4f:
9e:14:79:4e:d7:41:dc:d8:30:d8:b5:ca:34:99:7d:46:96:38:
52:67:d4:00:db:9d:4c:c4:51:da:ec:76:d5:a8:b3:cf:ab:04:
43:79:47:ee:3b:83:df:d1:9d:fd:1f:c0:72:a1:8d:78:06:01:
d6:28:c0:86:4e:27:17:7f:55:6a:e5:86:0a:8e:9f:e5:d9:d2:
a5:f6:0d:75:e6:be:a6:1f:b8:a9:88:c6:cd:42:3c:9f:d1:a3:
ba:ac:25:50:f0:46:e1:7f:82:13:a6:77:41:78:e8:0e:34:4b:
af:c3:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:26 2026 by rpki-client