Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
File: BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft (raw, json)
Hash identifier: WytxuBuRXjf+kd7k58QUWK25j5zkmHfDT8PeyS/H0Ik=
Subject key identifier: 0D:3F:05:E2:EC:36:DA:27:C3:13:B3:08:6F:E7:4B:6B:14:B6:F6:0D
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Certificate issuer: /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial: 01A020562F19EC91C8E3F23FA3DB62BCE5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
Manifest number: 0143
Signing time: Thu 20 Aug 2026 18:01:53 +0000
Manifest this update: Thu 20 Aug 2026 18:01:53 +0000
Manifest next update: Fri 21 Aug 2026 18:01:53 +0000
Files and hashes: 1: BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl (hash: ONkLwkcbsgjKw7Gz7MFUEJIQAb8efaf+JfAdYsYJ9DM=)
2: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (hash: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:2f:19:ec:91:c8:e3:f2:3f:a3:db:62:bc:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
Validity
Not Before: Aug 20 18:01:53 2026 GMT
Not After : Aug 21 18:01:53 2026 GMT
Subject: CN=0d3f05e2ec36da27c313b3086fe74b6b14b6f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:01:b4:bf:17:b3:a5:01:fb:f1:31:02:e0:
49:69:b0:e0:8a:fd:5f:2f:73:3a:04:07:5f:d1:2e:
99:2f:ab:37:47:97:fb:c6:27:0d:e6:73:eb:ba:54:
de:4f:a7:c2:2e:01:5a:15:a4:e8:01:5f:2d:41:05:
bb:28:d7:27:2d:ed:71:bf:1d:6a:30:7c:4a:a6:d0:
11:37:74:c3:9a:61:01:64:5f:c5:30:b0:36:77:51:
bc:db:92:65:bf:cd:94:60:78:10:46:a7:8d:49:ca:
d9:37:e4:6d:d8:09:f6:47:bb:8a:c9:c8:76:33:94:
51:53:75:aa:5a:eb:f5:f0:09:24:46:0d:c6:a2:8d:
67:1a:75:26:82:1b:e1:2a:ef:e1:fd:7e:09:c8:2d:
66:e6:e6:e5:cc:33:9c:d3:7d:13:d2:10:e3:96:12:
48:6c:ee:8e:3e:12:5b:60:4e:d2:8c:a9:67:f4:cf:
24:d9:e3:4b:79:05:1c:08:e6:0e:d8:bb:e5:49:3c:
33:92:75:37:10:7a:e9:77:3f:ad:e4:37:0e:34:bb:
4b:6d:34:4a:b7:20:1d:51:d3:e1:43:12:58:fc:5b:
d8:70:b5:14:41:c7:ef:79:aa:0a:cf:73:50:a9:df:
81:9a:9b:59:61:fb:37:99:2f:09:b4:6e:6d:32:00:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:05:E2:EC:36:DA:27:C3:13:B3:08:6F:E7:4B:6B:14:B6:F6:0D
X509v3 Authority Key Identifier:
keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cc:17:82:5c:f3:39:46:29:db:7e:ab:db:65:f9:c9:bb:7f:
25:82:31:3e:09:20:73:2e:99:09:f6:a8:e2:4b:0c:93:ee:4c:
64:44:14:01:0e:76:9e:d3:fd:d3:a0:ae:1d:9e:e9:4e:6c:02:
30:ac:b7:e9:db:5f:e0:54:4e:5d:e9:8a:2c:e5:29:3e:04:59:
0b:8d:1b:9f:8f:77:18:f0:65:91:88:95:31:3c:d3:b5:b9:df:
ad:b6:34:29:87:c3:04:f5:02:0c:46:b5:76:90:47:e0:8f:0a:
c7:ba:20:0b:1c:7b:a0:2b:7e:7a:b9:c2:65:8f:55:fc:78:12:
eb:e6:7e:48:d2:a3:66:f4:05:87:e8:49:ce:31:df:76:38:54:
6a:2f:da:43:e7:fe:8a:1c:f1:94:52:a1:b5:f4:4b:dd:e9:cc:
73:ca:ac:fe:5d:eb:9d:7b:48:d1:1a:e7:cd:49:cb:f2:87:c8:
35:11:e2:7b:d1:dc:03:0d:2a:8d:76:07:00:c6:24:0b:06:fa:
4a:1f:f6:98:a3:e8:11:53:00:60:e3:a0:91:df:c4:3a:34:4b:
a9:37:04:67:5e:1a:01:cc:58:ba:7e:58:b4:98:b1:0b:b9:ca:
33:0d:08:1d:b7:94:d8:89:f6:bc:97:77:50:64:08:a9:be:75:
98:0a:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:29 2026 by rpki-client