Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier: ijsTT0J3gMxGyCzG+tcCcrrPIYiN2G0x+H2OohQnUrc=
Subject key identifier: 75:F5:8A:AA:4F:86:F3:2C:BB:F5:74:0F:10:E3:49:4E:39:F7:B3:01
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial: 019F8FB50100770A1EE711BCB559BB263217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number: 0280
Signing time: Thu 23 Jul 2026 16:00:31 +0000
Manifest this update: Thu 23 Jul 2026 16:00:31 +0000
Manifest next update: Fri 24 Jul 2026 16:00:31 +0000
Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: 7sXjbxpwg/5zlcQQ9yJII5WAmTG+8Gl2ZGvJnsHd3pE=)
3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:01:00:77:0a:1e:e7:11:bc:b5:59:bb:26:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Validity
Not Before: Jul 23 16:00:31 2026 GMT
Not After : Jul 24 16:00:31 2026 GMT
Subject: CN=75f58aaa4f86f32cbbf5740f10e3494e39f7b301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:0d:93:a2:3c:7c:5e:06:e5:39:e1:03:13:
09:34:7f:dd:08:6e:e2:31:b8:58:61:89:6f:37:4f:
a2:2d:da:33:ec:eb:9f:b8:0c:80:8f:4f:0d:f0:9d:
f3:77:86:2b:19:f8:f7:ed:a1:89:64:49:3c:39:9a:
f5:c5:f2:b8:be:bd:b3:47:c5:c5:30:37:54:4e:68:
82:c5:87:44:cd:11:2c:23:ed:8c:56:a4:e7:4e:7c:
79:44:32:13:28:e5:ee:ea:c7:60:d0:0e:0b:8c:7d:
e3:1b:b8:c6:98:95:ce:b9:8e:6c:c6:e6:d3:4e:a1:
34:97:52:f4:02:b0:5b:b6:7a:07:42:91:43:70:c0:
e8:b0:9c:39:33:f5:35:65:f5:7c:75:4f:ac:40:0d:
9e:4b:bc:30:3a:64:b2:f6:bc:33:89:ce:12:d8:1f:
45:09:7e:9f:28:02:62:40:36:75:a1:3d:eb:4a:c2:
a4:7a:b8:fa:88:55:ba:a4:c7:50:e6:00:1a:9c:3e:
b7:b1:2f:38:7e:37:b2:d6:3a:21:54:d6:a8:3d:ab:
23:91:1d:b6:ab:cc:ce:93:e1:89:8d:90:3f:7e:6e:
89:57:81:75:38:13:9e:d4:f1:6f:c6:c2:97:f1:17:
46:b0:29:39:c3:7e:ea:96:1b:23:cf:eb:c1:a6:c4:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:8A:AA:4F:86:F3:2C:BB:F5:74:0F:10:E3:49:4E:39:F7:B3:01
X509v3 Authority Key Identifier:
keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1c:54:7b:a7:1c:8c:b4:a1:72:38:27:08:a3:f6:68:35:18:
87:3e:59:d3:a5:be:6e:7e:81:ac:69:a9:f1:28:54:73:1f:b5:
3e:60:b1:85:dc:08:61:cb:12:c9:f0:76:62:ae:68:28:0d:fa:
b8:d8:e8:88:c6:48:2a:1a:a9:b1:da:8c:96:98:fb:97:77:f3:
bd:85:fe:46:33:c6:57:bf:25:24:dd:2f:25:a0:5a:28:51:47:
4a:d2:01:f3:c1:f0:c1:47:eb:8c:15:b7:fc:9f:96:75:35:c8:
8d:4e:06:a2:6f:14:20:fc:75:c6:0f:2d:a2:51:1c:20:3a:46:
66:67:76:f6:57:ba:28:35:6f:f9:89:73:12:e2:2f:95:18:62:
66:20:aa:1b:f1:3b:fe:07:48:e1:f1:e5:1a:83:a3:f0:a8:d7:
5e:37:35:b2:c0:a7:e0:db:5a:70:b4:b8:29:36:b7:0e:27:58:
ec:40:de:1c:18:d8:4e:f3:fa:13:9b:9e:b6:34:30:27:70:b4:
0d:71:b1:77:d7:21:cb:aa:a9:a0:34:64:5e:be:75:ba:cb:42:
18:10:4c:cc:52:8d:69:eb:f5:06:4b:6b:56:d4:ad:9d:6e:2c:
d9:a5:92:ab:35:0e:4d:d2:66:a1:a4:45:fe:af:94:22:bf:7e:
48:82:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:09:52 2026 by rpki-client