Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: f/P1ABgGx5idehpwHyiv7lmNuOKsUjKBRQbzwhO21ig=
Subject key identifier: FC:8D:0A:A3:4B:01:5F:D5:CA:34:EA:CB:34:E2:95:95:EC:29:CE:73
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 01A140B9E4625F460E8DFDB896DB6FC80E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1AAE
Signing time: Thu 15 Oct 2026 18:01:26 +0000
Manifest this update: Thu 15 Oct 2026 18:01:26 +0000
Manifest next update: Fri 16 Oct 2026 18:01:26 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: HpixfA7E9Yxui8cFYZvMN1Ko/rYddkwo+Q+Dk4AWtNw=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:e4:62:5f:46:0e:8d:fd:b8:96:db:6f:c8:0e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Oct 15 18:01:26 2026 GMT
Not After : Oct 16 18:01:26 2026 GMT
Subject: CN=fc8d0aa34b015fd5ca34eacb34e29595ec29ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:e4:06:fd:c1:c0:81:3c:93:e5:e1:e3:fd:
fa:e4:01:49:54:6f:0a:4b:7e:d4:08:e2:3f:d8:c9:
33:2b:b3:2b:bd:35:47:80:75:7d:55:57:17:82:33:
7e:ba:8f:6a:42:01:c7:67:e9:05:ea:48:f4:bd:c8:
39:cd:ea:a8:a5:95:a6:40:88:d2:e3:b9:4b:56:1a:
37:42:08:73:63:f5:d4:c9:15:25:5b:15:d2:8e:04:
c4:2c:f6:18:7f:ba:38:40:ee:66:78:a5:c2:87:3b:
56:d0:ff:d9:81:9b:3f:13:2d:c2:d0:0e:93:5f:17:
31:d9:e9:41:ca:25:59:36:0f:5b:12:c7:83:9d:b7:
aa:e5:d5:35:c9:19:ef:47:58:71:b6:e1:51:6f:32:
d3:2c:89:98:71:89:cd:ce:e8:a5:5f:87:2c:82:d7:
69:97:79:13:89:98:1e:87:02:28:cc:aa:3e:2e:7c:
40:7a:ac:f7:59:cd:ec:49:f5:c3:f3:b0:6a:db:96:
9d:a9:a4:ae:df:80:df:d9:79:94:66:08:90:e5:f7:
d2:87:cb:6a:c7:83:92:a7:ca:31:cf:9c:ec:25:71:
3e:9c:96:cf:ed:0f:dd:6a:c8:97:76:fc:4a:f5:a2:
c0:ef:7e:7d:a1:4c:a9:d9:04:42:e0:78:d8:22:1b:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:0A:A3:4B:01:5F:D5:CA:34:EA:CB:34:E2:95:95:EC:29:CE:73
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:34:90:ac:de:2d:ce:02:4c:b2:e5:31:0e:c5:e1:21:45:61:
af:96:64:63:86:29:30:a3:f6:9a:fe:d8:87:d9:a5:b1:9f:1f:
48:db:08:92:bf:6f:f9:84:3e:2d:4d:81:4d:1b:a7:4d:58:9f:
98:32:9c:de:df:92:1c:b7:be:93:e3:ca:ae:d1:e8:66:37:7d:
be:47:2a:f3:75:ed:7f:71:27:f4:fe:36:0e:cb:14:2a:75:8e:
93:7e:6a:53:ba:6b:a1:20:62:98:24:cb:1e:f0:d6:ff:e2:c4:
d5:95:70:9a:31:0b:62:eb:b4:81:cf:63:cc:db:7c:57:0e:e3:
ab:ab:d6:44:95:5b:09:88:db:86:1d:33:0a:e7:a5:97:72:a7:
b6:ba:31:2e:85:f9:0e:7f:ef:ff:e5:5f:d2:59:74:76:91:21:
d7:07:45:2d:f5:78:1f:57:8c:35:e3:e8:f5:37:e7:43:e6:37:
2f:ae:ba:fa:74:19:b2:fb:ba:30:19:99:18:55:13:bf:53:03:
70:12:55:c0:67:fe:c5:db:c0:3b:70:8c:a8:48:54:4e:1d:a6:
e2:0a:5d:99:78:d9:7f:6d:60:07:93:55:c6:ad:6e:5a:e2:1e:
99:96:72:e1:dc:ab:a6:b5:a4:84:d3:7a:64:87:81:f3:ff:26:
a7:e8:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:36 2026 by rpki-client