Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
File: BNokfsP0AQu8LqUqIqxkd4vKPkc.mft (raw, json)
Hash identifier: 7MJVnZO1XMn0UajjQhtpGuz6z8NVhPEHKhHtMa+kEoU=
Subject key identifier: D2:55:CD:89:EF:9D:99:22:E2:14:A4:FE:51:D9:30:7A:A0:61:DA:07
Authority key identifier: 04:DA:24:7E:C3:F4:01:0B:BC:2E:A5:2A:22:AC:64:77:8B:CA:3E:47
Certificate issuer: /CN=04da247ec3f4010bbc2ea52a22ac64778bca3e47
Certificate serial: 01A0CC35C8B80E383C3575A557DD83DAF057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
Manifest number: 0189
Signing time: Wed 23 Sep 2026 03:01:11 +0000
Manifest this update: Wed 23 Sep 2026 03:01:11 +0000
Manifest next update: Thu 24 Sep 2026 03:01:11 +0000
Files and hashes: 1: BNokfsP0AQu8LqUqIqxkd4vKPkc.crl (hash: oNaDqffeN4geg3YkXtiuL/8T6gxTZxC7+5KTgFwXmgE=)
2: qNh9B_T6D7zIQKtKj3CH1wBuJrU.roa (hash: VVk6xhwAHQjOQSYBNf9v9JyyynNzDFxtsukm+hVtrgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:c8:b8:0e:38:3c:35:75:a5:57:dd:83:da:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04da247ec3f4010bbc2ea52a22ac64778bca3e47
Validity
Not Before: Sep 23 03:01:11 2026 GMT
Not After : Sep 24 03:01:11 2026 GMT
Subject: CN=d255cd89ef9d9922e214a4fe51d9307aa061da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:7e:dc:de:7f:87:ab:81:29:27:e5:4e:d5:
35:3e:d5:0c:6c:ff:ef:d6:ef:90:bd:55:dd:25:10:
77:f3:77:b9:cc:14:a0:32:69:38:d4:80:38:07:dd:
2a:79:69:52:2e:51:2a:af:ec:26:62:6d:bd:3c:d0:
a7:2e:83:f3:74:44:b1:ba:78:b9:ad:07:56:ee:6a:
91:17:cd:a0:f4:fc:73:c5:56:9d:eb:48:06:65:09:
41:e1:a0:10:92:80:10:46:14:91:a3:d1:84:c3:21:
5a:29:c6:02:a0:51:0e:99:44:55:74:ed:c1:60:d0:
44:a3:fe:3e:6f:e4:aa:09:90:e6:cc:33:47:fb:52:
2b:ac:c8:ec:0b:3b:66:44:27:8b:c4:41:b8:fa:38:
4d:c1:f9:c3:ea:60:be:47:96:1a:74:ae:77:80:fe:
c3:f2:3c:5e:8d:30:5b:d5:1a:90:84:27:65:63:90:
3f:fc:b6:65:c0:10:63:5e:48:12:e9:c8:02:7d:69:
96:c1:06:4f:fd:d6:ea:60:f8:1b:6e:7e:30:46:22:
9a:9a:58:03:e0:7e:66:81:5f:77:d4:7d:bf:93:d9:
9c:5e:bd:a3:8c:ab:35:73:48:94:54:35:cd:17:33:
a8:74:63:40:8a:b9:28:17:e4:d0:bc:1c:81:c8:4d:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:CD:89:EF:9D:99:22:E2:14:A4:FE:51:D9:30:7A:A0:61:DA:07
X509v3 Authority Key Identifier:
keyid:04:DA:24:7E:C3:F4:01:0B:BC:2E:A5:2A:22:AC:64:77:8B:CA:3E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNokfsP0AQu8LqUqIqxkd4vKPkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/76d161-e1bb-46d7-bc72-05b0cf2ce19a/1/BNokfsP0AQu8LqUqIqxkd4vKPkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:de:87:f2:d6:e2:cb:ac:96:38:90:c3:2e:ab:e5:df:c6:
9e:59:1b:77:1d:6f:f2:5f:dd:9e:83:cf:6d:e5:04:06:af:7e:
a1:5e:b3:d5:ec:15:69:a6:70:a4:c6:b7:e3:37:6a:1c:7e:ed:
e8:da:dc:e6:d9:29:54:97:a5:a3:d8:70:a7:76:55:d1:0f:72:
43:77:55:32:4b:17:8d:2a:e1:96:e4:2a:3c:61:1c:aa:b1:eb:
0e:7e:e9:32:94:87:a4:d2:1b:a4:ab:83:7f:08:57:62:d4:ea:
98:d9:57:0b:b3:aa:de:9c:2a:4a:a7:42:55:d0:81:a6:6c:3d:
d8:7a:94:dc:66:67:64:bb:0b:df:30:0c:78:97:24:8d:ee:eb:
cb:ac:89:88:ea:a7:38:b3:4e:50:6b:1e:06:6e:3c:d0:37:af:
e6:3a:6d:49:21:bf:fa:fc:01:d1:a5:78:70:27:db:6b:d6:f9:
17:1c:15:0b:5d:29:96:26:95:eb:1b:95:6a:10:f9:12:fe:c8:
be:8d:56:4b:0d:ff:48:56:1b:58:48:11:a5:73:06:27:6d:2b:
76:bd:11:b4:22:d3:b0:e4:da:b9:f7:b3:c6:76:cf:72:60:f3:
58:d3:a5:73:c3:8b:44:e6:0a:d6:51:a7:dd:c1:5c:ca:59:8a:
fc:72:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:46 2026 by rpki-client