Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
File: BNokfsP0AQu8LqUqIqxkd4vKPkc.mft (raw, json)
Hash identifier: f70UrGSIkP35N5xql8rP+3OEWgg7gCa+7GREjRsHN84=
Subject key identifier: 9E:EB:83:93:92:7F:77:B9:E0:0C:68:FC:25:2C:D9:2F:11:C2:53:6C
Authority key identifier: 04:DA:24:7E:C3:F4:01:0B:BC:2E:A5:2A:22:AC:64:77:8B:CA:3E:47
Certificate issuer: /CN=04da247ec3f4010bbc2ea52a22ac64778bca3e47
Certificate serial: 019F8F7DE46C1DF7ABBF03950960694420AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
Manifest number: E5
Signing time: Thu 23 Jul 2026 15:00:20 +0000
Manifest this update: Thu 23 Jul 2026 15:00:20 +0000
Manifest next update: Fri 24 Jul 2026 15:00:20 +0000
Files and hashes: 1: BNokfsP0AQu8LqUqIqxkd4vKPkc.crl (hash: K3tphpmRzxRf1Hyw7tD96rGaSkft+WnYWuTOhsJ2xjQ=)
2: qNh9B_T6D7zIQKtKj3CH1wBuJrU.roa (hash: VVk6xhwAHQjOQSYBNf9v9JyyynNzDFxtsukm+hVtrgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e4:6c:1d:f7:ab:bf:03:95:09:60:69:44:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04da247ec3f4010bbc2ea52a22ac64778bca3e47
Validity
Not Before: Jul 23 15:00:20 2026 GMT
Not After : Jul 24 15:00:20 2026 GMT
Subject: CN=9eeb8393927f77b9e00c68fc252cd92f11c2536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:ef:10:b5:49:c5:5d:45:d0:2f:d6:d3:e3:
79:71:80:b3:15:6c:c2:ed:3f:80:0d:55:5a:9c:90:
13:dc:df:f8:15:b3:28:01:f0:89:a9:88:66:dd:35:
5d:78:be:44:8e:09:d3:56:e4:85:b0:81:3f:75:99:
7b:3e:74:ee:20:66:90:ea:89:e7:2c:4a:8e:47:a7:
c4:cf:92:64:49:24:8f:38:15:27:5a:ef:ce:ff:94:
97:b7:54:75:1f:7c:84:6c:49:02:5d:0d:86:a4:15:
de:b7:40:d9:d4:c4:3a:0b:aa:2f:ab:42:e0:8e:5b:
75:ee:e9:2b:35:03:a7:84:1f:e8:8d:0d:41:61:34:
e0:84:ee:9b:4c:b6:f8:a2:a6:94:6c:02:b3:77:89:
ac:a0:2e:6a:dc:bf:a2:d8:a4:e1:e6:0d:08:2f:e1:
08:60:19:1e:a9:ef:f3:71:e9:03:93:4f:c8:2d:76:
fe:af:3b:34:4f:8b:c6:b2:45:84:5f:37:cc:a4:82:
a5:f2:e1:c9:63:55:1b:52:da:7d:57:3a:77:14:36:
cf:40:d9:aa:6d:b5:37:6c:7d:6d:37:03:8b:8b:03:
4f:17:ae:66:4f:22:4b:dd:0e:a3:6b:a0:50:a6:89:
fd:5d:88:72:63:f1:f5:af:f0:c2:97:ed:af:4e:7d:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:83:93:92:7F:77:B9:E0:0C:68:FC:25:2C:D9:2F:11:C2:53:6C
X509v3 Authority Key Identifier:
keyid:04:DA:24:7E:C3:F4:01:0B:BC:2E:A5:2A:22:AC:64:77:8B:CA:3E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:ae:a9:cd:af:c0:3b:0e:97:44:8e:e2:0c:b4:92:2f:98:
2b:1f:e1:0c:6c:4f:9f:b2:b5:df:96:0b:ca:b5:70:e0:61:d4:
22:54:54:b2:13:21:65:25:05:31:26:05:4a:eb:dd:32:55:2f:
ed:94:d3:62:9d:cd:26:f1:31:1b:4c:ad:95:1f:69:85:bf:4c:
c3:86:70:63:8c:00:45:c0:b9:66:a4:13:33:1d:f1:6a:69:b7:
7e:1b:77:c5:c1:74:6d:0b:f5:3c:08:31:de:c0:2c:b0:53:50:
dc:12:6a:4f:4c:3a:67:b9:f6:c6:fe:1a:39:e6:87:22:32:f2:
1f:e9:4e:7c:8d:72:92:06:eb:5d:96:6b:ff:fa:01:01:4f:80:
a0:14:e4:3b:6d:2d:26:85:2d:0b:dc:1a:28:65:60:60:f2:64:
99:38:85:f6:94:f7:82:70:ba:24:77:8b:58:bb:67:30:93:b2:
e0:fa:a5:96:0c:de:13:bf:b9:80:98:c9:39:e1:e4:d6:47:c5:
7f:68:f5:31:de:31:8d:38:b7:25:8b:6f:1b:b7:9c:f5:f6:8b:
e9:8f:21:d0:fe:ef:28:77:4e:96:6d:21:fc:07:7f:b5:88:12:
9f:c7:1b:3c:db:3c:c0:85:2f:dd:17:bc:45:14:67:0a:80:49:
38:31:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:26 2026 by rpki-client