Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: pvAN7S/f+470ucaGqWW9agsYeE5VDuvZ5Cm5L8l76kg=
Subject key identifier: 6B:9D:C7:96:3C:38:75:AA:6F:9B:55:55:6D:8A:46:A6:A0:7A:66:72
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 01A0D3835FD48310DC6C3EFCA8A42B086DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 0F52
Signing time: Thu 24 Sep 2026 13:03:17 +0000
Manifest this update: Thu 24 Sep 2026 13:03:17 +0000
Manifest next update: Fri 25 Sep 2026 13:03:17 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: az6CI9wBCVxXbeqmf5shNCvx4SsH6JaeO6OFsc0QSyM=)
2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:5f:d4:83:10:dc:6c:3e:fc:a8:a4:2b:08:6d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Sep 24 13:03:17 2026 GMT
Not After : Sep 25 13:03:17 2026 GMT
Subject: CN=6b9dc7963c3875aa6f9b55556d8a46a6a07a6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:51:63:33:0d:9f:d2:01:0a:4d:23:3f:7c:
34:d1:80:1f:9b:57:bc:99:6f:77:6e:5a:d5:3e:3a:
9d:54:f4:0a:12:f3:e4:db:b6:01:ce:d4:32:75:a5:
b9:4c:2d:1d:48:19:1b:b5:4e:26:2c:89:57:91:7f:
eb:8f:c2:cd:c7:39:69:84:f6:af:56:bc:7b:28:33:
d9:2a:10:35:dd:86:d6:52:07:e6:57:fd:62:a3:d2:
70:86:4d:a2:3a:7a:76:b3:ba:4a:e5:dd:5b:a4:73:
27:56:53:61:f8:2e:8d:7e:23:6a:d6:b3:fb:e9:9c:
77:aa:cb:b6:c2:9b:a3:99:19:47:2f:88:64:5f:69:
18:27:c5:56:f9:f1:91:d6:ea:35:87:15:5a:d9:08:
88:2e:be:ed:ab:2a:62:82:62:22:a4:6e:6a:49:42:
f8:12:64:06:d1:08:ec:b3:11:e5:31:40:81:8f:74:
89:1d:bc:d1:19:b0:f6:cb:60:1d:67:3a:24:b0:ca:
f4:3d:85:c7:a5:b8:75:15:65:b1:a2:19:1c:9e:07:
31:48:d3:0a:50:82:3b:40:ec:b0:07:97:a7:d7:1f:
0d:af:83:5b:70:1d:12:bc:58:8d:43:f9:0a:4f:a7:
7e:aa:5f:1b:15:72:e4:b3:bf:f3:41:a2:96:30:8e:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:C7:96:3C:38:75:AA:6F:9B:55:55:6D:8A:46:A6:A0:7A:66:72
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:18:10:06:c4:68:94:a9:ad:24:4d:6a:16:0a:c0:d9:82:4b:
30:eb:80:d3:96:30:df:b8:4b:0d:b0:de:69:4c:59:8b:bb:f5:
b2:93:ed:95:71:07:61:85:dc:42:2f:e5:75:a7:e7:aa:e2:a0:
d3:b7:06:0c:53:db:de:f3:dc:db:0c:25:4c:f6:ce:e5:99:c5:
37:1e:f2:89:61:99:a5:0f:8c:04:f0:d9:e2:c3:34:95:08:4b:
b9:5e:b5:59:26:44:e8:38:e1:0e:41:dd:de:55:82:0a:cd:82:
78:68:7a:5f:63:d0:d8:7d:e2:ea:81:d3:a6:86:7d:b0:06:e5:
ca:ca:41:c4:d0:23:2c:1d:ab:63:fb:eb:77:10:b3:17:f0:5e:
fa:db:0d:f6:34:fa:45:a8:c1:20:7c:fa:fd:e3:d0:51:a1:16:
2a:ab:6d:dd:34:c3:5b:b6:4d:7d:15:64:b5:10:42:74:b0:a2:
75:f5:aa:1f:a0:2c:65:45:83:ef:7d:72:ee:a7:ab:8a:98:8f:
00:46:59:0f:f4:78:53:e9:cb:f4:8e:90:d5:64:13:45:6e:61:
35:8c:fe:46:69:9f:0c:94:3f:aa:ab:a9:70:95:7b:19:b3:3b:
4a:7b:e3:81:fa:5c:ca:59:c1:a5:ec:d1:d6:4e:9c:8e:9c:fd:
e5:a2:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:35:20 2026 by rpki-client