Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
File: BNhWAsroYaFGaoWobO-1rLA4qxI.mft (raw, json)
Hash identifier: qOekk2sPqPyOqD0dAfBi16nrduVvZcNW+h3pZmmhhUk=
Subject key identifier: CF:84:34:96:4C:84:63:6E:F6:65:1D:E9:9B:8E:DA:86:1F:75:DC:30
Authority key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Certificate issuer: /CN=04d85602cae861a1466a85a86cefb5acb038ab12
Certificate serial: 01A0CEFF870F23F97A0C2D02E4120BCEFF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
Manifest number: 016B
Signing time: Wed 23 Sep 2026 16:00:47 +0000
Manifest this update: Wed 23 Sep 2026 16:00:47 +0000
Manifest next update: Thu 24 Sep 2026 16:00:47 +0000
Files and hashes: 1: BNhWAsroYaFGaoWobO-1rLA4qxI.crl (hash: Z6YkcTA+haVdYbbyGQOyfNDAcTG4f0HhAPPAXlQsJa4=)
2: W4Jd97wklYPbtC1yRMX3CKRKmZA.roa (hash: 1Sm8Xnqv2nrDhx2KEVkLvXTxHHoxXzQJhfn447Uj43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:87:0f:23:f9:7a:0c:2d:02:e4:12:0b:ce:ff:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d85602cae861a1466a85a86cefb5acb038ab12
Validity
Not Before: Sep 23 16:00:47 2026 GMT
Not After : Sep 24 16:00:47 2026 GMT
Subject: CN=cf8434964c84636ef6651de99b8eda861f75dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:3c:cc:84:5e:db:91:05:f1:63:d7:a1:4c:
83:1e:77:63:68:06:7a:d5:1c:30:b4:d2:b7:a2:ef:
ba:40:e9:56:67:c8:56:f1:25:05:5d:ba:9d:a6:7e:
d1:49:19:cc:75:a5:79:e6:4f:ff:f8:4e:1b:68:15:
26:f1:e8:a5:88:15:cc:ea:eb:39:84:53:da:84:ed:
75:47:b7:be:fe:9a:00:30:f4:e9:44:83:a6:95:dd:
83:e8:89:08:40:76:b2:0c:bc:71:b1:ba:8a:31:67:
e2:a7:cc:62:7b:5b:b7:c3:ff:91:a1:f9:ad:20:f0:
82:80:11:4d:b6:10:a3:1e:77:a6:44:63:da:22:d9:
5f:7b:87:02:de:aa:59:46:76:6c:a4:7f:f6:0e:d4:
7b:d3:ad:3c:36:b2:e0:3e:3c:ac:50:00:cc:36:bf:
e7:3b:b4:ea:56:50:e7:4e:cc:81:93:62:8d:10:a0:
96:dc:43:0f:a7:a2:05:77:a6:e8:9d:6f:12:43:f7:
e4:fb:aa:13:0c:b6:78:de:79:5e:c8:e5:c7:0d:fd:
d2:cd:3a:3f:61:92:6d:ca:f1:67:ab:0e:d2:8c:3a:
d0:b2:8e:9a:d8:0d:4f:5b:7e:a4:37:70:39:74:db:
fb:b4:2d:03:57:de:15:51:85:bf:ad:c2:a6:5e:36:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:34:96:4C:84:63:6E:F6:65:1D:E9:9B:8E:DA:86:1F:75:DC:30
X509v3 Authority Key Identifier:
keyid:04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5c:fd:f1:89:04:21:92:28:7b:ea:93:1b:e9:ab:45:32:ca:
93:e0:bd:7d:23:12:bc:2e:54:6c:b3:28:32:e9:ba:ec:b1:c2:
41:98:16:0c:97:bd:65:76:b5:0c:de:45:d0:00:f4:a6:61:71:
45:d3:c8:44:68:6d:53:ea:a8:04:b1:a6:e5:19:a9:a4:e3:e7:
4d:c3:59:65:51:0b:1e:97:8a:4d:0f:2b:55:3e:47:5d:d1:35:
f2:4c:e7:b5:84:77:a1:3c:40:78:5a:7a:67:43:d6:84:d8:00:
3a:18:d8:4b:66:01:b8:9a:7d:69:ae:6a:e9:2a:89:6e:54:90:
0d:82:a5:c2:2d:dc:60:e7:5d:94:06:c3:f5:a5:50:92:c4:c1:
6c:80:17:30:c4:05:85:b5:24:c4:07:5c:b6:ab:1c:0f:9b:fc:
ff:11:fc:d3:8a:09:98:dc:bd:18:21:6d:08:d3:70:2d:dc:e5:
1c:b5:f0:19:ec:90:dd:fd:be:a2:ae:8c:6d:c6:ed:b8:ee:3d:
30:cb:17:15:2f:59:3e:21:88:b8:b7:2b:9b:ed:26:87:72:ca:
77:99:7b:12:1a:2d:c9:6b:78:e5:7a:d2:e0:1b:ae:61:a6:22:
df:3d:af:82:31:84:7d:06:cc:38:56:1c:b8:27:30:3d:7e:35:
55:e4:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:56:00 2026 by rpki-client