Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: jXiszBaxCCmQLbZk6Cpu1VfA2dm1tUx7++vhwKf341U=
Subject key identifier: 28:96:9B:FB:19:B1:F2:6F:3A:4F:D2:A4:63:B1:F1:26:F5:C0:79:3C
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 01A00213FB61C24F89DF5BFB4ACCEBE6CA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 21:00:59 +0000
Manifest this update: Fri 14 Aug 2026 21:00:59 +0000
Manifest next update: Sat 15 Aug 2026 21:00:59 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: CYeeXnRvDPW3WYJCLwW+pZsN0jb3HjvVwIW9BBeP0mw=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:fb:61:c2:4f:89:df:5b:fb:4a:cc:eb:e6:ca:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Aug 14 21:00:59 2026 GMT
Not After : Aug 15 21:00:59 2026 GMT
Subject: CN=28969bfb19b1f26f3a4fd2a463b1f126f5c0793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:0f:02:03:3c:d3:bb:ca:74:3e:51:1a:40:
08:fe:a7:a4:79:76:82:0b:f7:50:f9:cc:2d:bf:a2:
f4:8e:bf:c4:f3:5a:be:9c:78:13:2b:97:ca:53:c9:
d9:9c:85:8c:d9:86:1d:ae:9b:81:61:bd:36:a9:aa:
22:f6:b1:35:61:ea:12:fa:10:a9:37:97:df:f8:b4:
b9:7b:56:33:e1:4c:ba:e4:55:d8:0b:2c:ef:71:4d:
f5:13:46:a5:4a:c5:4a:94:dc:7f:34:fb:48:94:07:
ac:b5:f1:70:9a:52:4d:2e:59:fb:2c:f0:f1:d2:98:
19:c7:44:f7:6e:e5:62:0a:37:ff:81:aa:ba:c1:f4:
9e:73:c0:94:af:a2:f5:9b:43:3e:e3:22:f2:44:9f:
c4:8f:7a:0d:53:f4:01:e6:c7:7c:69:f0:b4:70:89:
8e:90:aa:5d:2c:4a:69:e6:32:41:0c:9a:e7:51:03:
77:f9:35:c3:85:03:9b:45:39:c9:37:00:d1:69:24:
08:b6:e1:35:d3:ac:98:19:f4:80:bd:6a:4b:e9:99:
ae:17:79:24:63:1c:15:2a:69:01:50:9c:12:84:33:
d7:73:33:e4:56:50:8c:63:b3:28:4d:f6:14:96:df:
92:7c:85:dc:88:bc:dc:86:5b:c1:e0:de:e0:6e:3f:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:9B:FB:19:B1:F2:6F:3A:4F:D2:A4:63:B1:F1:26:F5:C0:79:3C
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:f3:b8:b4:20:64:ea:b0:66:46:82:85:f6:4e:76:ba:e5:
49:3d:1c:3d:7c:1a:60:1c:ba:29:64:76:b2:08:a0:2e:ec:a1:
30:2f:ac:3d:a5:84:f0:0d:aa:ea:cf:01:c2:0a:b8:51:b2:30:
ff:31:df:7a:f0:81:9f:3c:59:4e:86:20:98:45:40:e3:fa:74:
bb:d3:31:b9:54:c6:e4:5d:53:8c:10:7d:fa:46:78:44:13:a0:
94:03:19:2a:8b:99:7e:bb:e4:8d:bc:31:42:95:2b:72:70:d1:
d4:40:f6:e6:71:ab:bc:3d:de:eb:05:cf:d2:e4:74:81:d0:c5:
b9:ac:09:46:20:24:f2:41:3f:06:e5:50:d9:aa:45:4e:c8:81:
3f:46:18:9d:b1:f1:59:69:9d:dc:76:97:18:3d:67:d9:d6:99:
ac:f5:37:92:06:26:35:54:7c:4e:e4:58:f9:1a:6b:98:1a:46:
7d:25:5c:bd:01:7d:3f:f7:c8:fb:c6:9e:22:3b:ac:70:3c:9b:
ee:77:11:f4:83:c8:25:22:15:ba:18:a9:d4:d9:1a:be:f0:34:
4b:e0:0c:2c:d7:69:66:da:2c:1c:d6:da:63:88:36:99:36:4e:
19:03:ec:0c:20:17:fc:da:3d:46:d4:59:58:a5:ae:e8:8e:3a:
8b:a6:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:28 2026 by rpki-client