Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: 9TzDGmqdWPzKhm3FIfI1b0oBm4l425/vUe1LlZHAEGI=
Subject key identifier: 1E:8F:51:86:D8:AC:BA:7E:5C:B6:49:09:42:1E:81:A8:4E:B8:EC:84
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 019F90FEA56290E35CA362551FAAD1A5EB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 0EAB
Signing time: Thu 23 Jul 2026 22:00:35 +0000
Manifest this update: Thu 23 Jul 2026 22:00:35 +0000
Manifest next update: Fri 24 Jul 2026 22:00:35 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: Ae47MX2qvKS5/qTY/pAz1E4GhqBsnYkzRWx4zjxNooU=)
2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:a5:62:90:e3:5c:a3:62:55:1f:aa:d1:a5:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Jul 23 22:00:35 2026 GMT
Not After : Jul 24 22:00:35 2026 GMT
Subject: CN=1e8f5186d8acba7e5cb64909421e81a84eb8ec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:d4:5e:0c:b5:b8:9e:18:c8:57:ba:d6:80:
e9:f3:74:49:aa:2c:86:95:3d:70:b5:36:b7:ff:55:
74:27:52:ea:7c:d2:da:d4:05:18:b5:3e:4d:43:a5:
23:02:6a:95:2a:25:ea:f8:62:e7:a0:01:0c:ce:82:
69:2b:90:61:16:96:35:d5:96:8d:64:42:29:92:09:
c7:df:f6:48:f5:e1:ef:6c:4f:0d:95:4c:46:44:96:
96:35:97:46:49:de:77:fd:0f:c7:86:41:fc:d3:63:
f9:a7:ed:b9:c5:a6:0b:b5:d7:23:34:5f:97:b7:29:
a0:89:50:54:97:bd:e7:07:92:6f:dc:bc:75:0e:81:
4a:84:f8:92:38:f8:f5:31:f0:35:d8:d1:3a:d4:bd:
64:75:64:af:6e:b9:2f:94:bb:cb:2c:1b:b1:09:63:
6e:8e:69:8a:ea:c6:ce:4f:a3:fb:4b:4f:f7:33:bc:
6b:78:c1:df:ea:11:2f:0b:4c:73:1c:4e:fe:4b:86:
aa:d2:21:e2:1b:90:aa:2c:2d:29:92:bb:1e:1e:08:
4f:dc:8a:e4:81:cc:57:cc:b4:30:3f:e4:d1:6e:49:
9f:ef:ed:91:9a:72:4f:c2:e8:2c:00:1a:ab:55:d7:
41:bc:cf:21:9b:9d:be:98:e5:80:c2:b4:97:56:30:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:51:86:D8:AC:BA:7E:5C:B6:49:09:42:1E:81:A8:4E:B8:EC:84
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:90:01:30:01:a9:a0:b8:10:13:05:64:a7:36:04:0d:39:52:
3f:de:9e:a4:b9:62:24:74:d3:1f:73:4b:97:c3:03:08:0f:74:
2f:16:74:77:87:ed:37:26:3e:4f:7b:42:ec:93:68:9e:25:2a:
77:02:cf:ec:11:3a:c5:01:34:1b:48:d4:31:3a:cb:f3:c1:a8:
7f:68:42:b5:b1:77:a9:ca:c9:13:4b:e1:f6:77:d3:3d:10:45:
7b:98:90:8b:2f:84:fa:19:4e:57:f7:45:47:9e:35:5a:85:72:
e4:6a:69:7b:20:85:d1:56:85:6f:88:90:a3:20:11:58:8f:d0:
45:49:e4:b6:cc:d0:12:2a:95:7d:14:36:c1:a4:b1:f8:c9:e8:
12:b1:23:a8:a9:f3:c8:62:c9:4a:bb:8a:d4:34:e7:ad:98:d1:
bb:88:8f:0f:1d:fd:21:ed:d2:01:b0:2e:ac:ea:6b:3b:a0:0c:
55:e7:52:bb:6e:43:d5:9e:38:41:c8:5b:04:29:6e:bb:89:3c:
b2:3f:09:63:df:a2:d3:ac:35:15:74:f5:ed:a7:71:fd:f6:e7:
25:2c:0b:13:32:98:b0:8c:50:0d:bd:db:bd:ee:2e:16:b5:88:
0b:5c:33:29:10:fe:64:69:be:e7:36:79:ec:3b:d3:18:b9:4f:
c5:bc:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:37 2026 by rpki-client