Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier: 2HvYk+TCBpCWs/4Z5BIKx3+7DG+0xmW2MXauSygyCTA=
Subject key identifier: 28:9A:0C:48:FA:C1:96:28:EB:69:D1:1F:7A:85:3B:A2:A2:6B:42:8B
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 019D386640172AF3E087C67EB3CDFCDF51F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: 1ZFRAd/5EB3ThiyEffl9PeWu45/vM1nACmgnsD68/As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:40:17:2a:f3:e0:87:c6:7e:b3:cd:fc:df:51:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=289a0c48fac19628eb69d11f7a853ba2a26b428b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:9c:23:60:06:be:96:e3:30:07:e9:a0:de:
8a:53:e1:9b:b3:77:ad:2e:ad:ff:76:92:8f:72:dc:
cd:bb:5d:b5:9c:c9:39:64:c9:56:c1:31:31:4b:83:
6c:22:1d:5f:46:95:83:1e:04:6e:ec:19:b9:99:69:
be:3d:53:d0:cd:c9:87:21:bd:29:a0:c6:2e:87:0a:
aa:c5:5d:af:67:15:dd:ce:01:ae:9f:30:12:c7:2c:
80:ca:1c:64:76:1b:5a:ea:c8:e1:c5:8b:39:5c:e3:
38:75:d9:a2:40:d4:7f:37:40:a6:c2:e4:15:76:df:
91:64:db:49:90:49:36:e3:5f:a5:c0:7e:aa:16:71:
bc:97:ca:5d:39:5d:bb:e3:16:78:72:d8:c0:dc:93:
b0:c8:4b:81:d8:16:85:da:63:24:56:d8:20:d3:b9:
46:de:51:78:e1:a3:30:1f:d0:f4:48:9d:01:3d:31:
8d:39:af:16:18:99:aa:a6:b3:2e:23:d4:15:9c:ee:
c8:40:d1:91:e5:2b:7c:c4:d0:23:27:42:05:b0:6b:
e7:f5:d3:66:8d:bd:7c:2a:c4:c6:ee:22:cc:5f:fa:
bc:d9:46:6d:2c:96:05:bc:a7:22:dd:6e:8d:09:b4:
2a:0e:b7:1b:07:56:ab:a9:a5:df:b5:11:2e:08:63:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:0C:48:FA:C1:96:28:EB:69:D1:1F:7A:85:3B:A2:A2:6B:42:8B
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:97:33:48:db:fb:7f:61:43:79:da:62:aa:e7:38:69:73:
54:7c:41:cd:b5:cd:0f:a8:4c:4c:bf:a6:15:8c:29:a7:79:ae:
0c:0b:63:1f:ad:22:a4:55:cf:84:f8:f3:69:62:9a:d9:07:0a:
2f:05:49:2c:8e:3f:f2:ef:6c:37:6a:84:55:a2:e9:8e:1a:ee:
59:6d:64:e9:2a:96:5e:6a:b3:b5:77:84:4f:a9:15:ea:c7:81:
9a:57:b2:e0:8e:c1:f4:61:d1:31:76:cf:a1:25:68:03:0a:ad:
ec:30:38:84:a9:d9:6f:c6:3c:1c:cd:50:94:68:7d:ee:55:60:
0d:68:11:a7:a7:69:8e:d0:fa:e0:d8:6f:ec:58:06:17:04:ba:
37:77:20:48:72:32:af:1f:00:62:c9:66:36:d8:ec:a5:d8:ef:
2a:97:85:8d:7c:9e:12:58:47:59:f4:c4:c3:99:1b:27:65:cc:
2d:66:e4:cf:c3:3c:7a:e0:5c:63:6a:58:ca:f4:98:da:78:17:
7f:16:6b:4b:70:ac:f4:02:8d:16:3e:4e:e7:ab:53:e6:24:08:
c9:d3:3b:e1:57:e0:4a:56:6d:13:e8:b1:b7:85:bc:7c:19:bc:
5e:46:a5:e4:55:01:6f:10:6c:42:04:35:51:9a:c5:3f:04:4a:
0e:bb:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:47 2026 by rpki-client