Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: l5NsmyVCuFvjAZNKJD5kpHF00ej9a45cLHgstMHh0gU=
Subject key identifier: 29:67:4B:AF:FE:BB:35:56:65:ED:4B:A1:7A:58:19:EE:43:AC:1D:C6
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 019D39099EC82912E2B830BEB4D13D82C825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 13BC
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: sqJW0osYUUgoLqG0QLYpX4PkvRoO3s3uHsKnVmjYaxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9e:c8:29:12:e2:b8:30:be:b4:d1:3d:82:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=29674baffebb355665ed4ba17a5819ee43ac1dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:e9:67:b4:ca:f1:59:b4:d7:20:3a:6e:21:
ab:d2:58:50:bb:b7:34:d2:80:7c:dd:6f:86:df:a4:
37:3c:35:9a:cf:df:1f:ff:d3:30:46:2b:7f:f8:ae:
25:9a:88:f8:3c:bb:00:8d:ea:eb:8d:e8:03:49:8d:
fb:e9:95:f4:94:89:c7:5d:e9:12:52:0a:17:a2:32:
65:a6:a1:cd:49:8d:c7:05:34:10:12:ca:45:73:a9:
f4:f9:5d:0b:9f:af:09:08:79:2e:b7:43:7e:14:5c:
df:bf:10:f5:a5:56:4b:4a:6a:a7:d8:7c:83:ab:3e:
fe:44:36:27:7d:69:3d:78:17:1f:31:a6:62:94:79:
ee:e7:70:33:7a:65:ac:d9:1d:eb:1d:9a:41:6a:26:
42:9c:f2:e1:e1:94:60:56:4d:f7:7a:b6:ca:4c:05:
d3:1e:9a:5a:04:be:d4:15:89:03:ad:00:6b:c7:02:
5a:87:5b:d7:75:61:22:66:a7:bb:a4:90:91:38:80:
aa:1b:f1:62:ec:28:77:4a:51:2c:d5:23:97:5b:ed:
24:64:a6:52:ba:96:cc:60:fe:4f:c3:7e:df:92:67:
8c:b1:65:e2:54:b2:b9:50:10:ac:30:d3:b9:21:b1:
84:3c:42:b2:4e:c1:86:7c:fe:80:91:5b:75:a0:8e:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:4B:AF:FE:BB:35:56:65:ED:4B:A1:7A:58:19:EE:43:AC:1D:C6
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ef:df:c5:fe:ec:e6:cd:0d:06:53:b0:58:90:24:53:7e:9f:
44:5d:c2:4d:32:d7:1a:42:03:15:5c:fd:d9:85:4c:7e:46:9b:
82:dd:35:2c:38:2a:bd:d3:f7:97:0e:f7:89:27:6a:a8:25:79:
86:0f:74:2a:53:3b:61:08:a2:15:dc:7d:12:e4:22:2c:52:6f:
03:cb:4c:ad:43:2b:10:0e:ee:e1:27:26:e3:a6:42:95:e3:0c:
3d:5f:b6:06:7f:25:3d:a8:4e:f7:a4:80:97:e5:4b:fd:82:67:
34:fe:e3:a5:94:3c:c2:79:f9:54:91:fe:e4:97:63:13:c0:f7:
b9:46:fe:d5:23:c9:0c:58:02:e2:0d:81:d1:d3:71:a3:42:76:
50:5b:5c:3a:9e:dc:a0:22:53:22:3f:8e:3a:3b:2f:7a:10:4d:
d0:f7:09:74:93:de:ae:eb:23:de:d6:40:16:f8:23:ec:0c:be:
d2:24:cc:fc:bf:12:50:7b:07:59:79:0b:d4:37:b0:be:27:91:
0c:c3:b4:73:9b:d3:c9:1a:b9:94:06:0e:05:d2:77:a7:f5:ed:
0a:4c:aa:5f:e4:82:24:72:bd:2c:25:e1:05:f0:b7:65:95:a7:
c9:de:42:ef:68:99:b6:d9:41:2e:9e:2c:33:0b:ba:da:4d:17:
83:c7:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:30 2026 by rpki-client