Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: 35N/YGvQj1H6EFdJtBjUgH+6dv0J7Kc32l6yqL1Xr58=
Subject key identifier: D8:75:67:73:DA:ED:08:34:5D:B7:F8:F2:F5:C7:8C:47:09:94:A3:E4
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019D397801B9C89F771BB0D9FFCACA1D28C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: +hDM98aO7F1YNYHfEC7ADNvY0DlyNNgBgv43ay/2nYw=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:01:b9:c8:9f:77:1b:b0:d9:ff:ca:ca:1d:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=d8756773daed08345db7f8f2f5c78c470994a3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:3e:fe:57:07:bd:31:d8:dd:64:81:34:7b:
a6:5b:e0:c5:3a:ab:df:62:5e:a7:b6:5c:ca:65:dd:
a1:0c:aa:c9:7e:3d:f9:29:24:e4:26:a1:69:79:c5:
57:93:21:57:b8:a9:db:d9:bc:1b:9d:36:94:ff:f8:
de:16:b7:f7:ac:8e:21:9f:43:88:dd:8c:81:74:d1:
80:7f:ff:35:39:e0:eb:7b:47:1c:f7:0f:18:d3:ab:
81:52:40:e8:29:af:fa:66:09:ad:7c:db:12:62:84:
4b:5f:3a:6d:ca:a8:fe:58:4b:86:41:e9:09:2d:09:
a5:0f:f0:87:c8:80:d0:5e:87:95:5b:09:48:13:52:
8a:38:6b:c2:80:10:e2:16:c2:9b:25:a1:b7:4b:59:
63:dd:92:e1:ea:27:17:72:b8:76:9b:1b:38:70:21:
c0:83:89:98:98:0d:7b:48:57:1d:24:20:d8:cc:1f:
ae:d7:ae:b4:99:a0:cd:a7:c0:96:04:f8:fa:7b:de:
f0:af:9b:d3:5f:23:b0:c4:57:72:5e:77:6c:04:af:
9c:df:f4:37:b4:b5:cb:9b:c5:8f:3b:7e:24:14:52:
5a:13:a7:a8:6c:e7:56:a9:dc:b6:6f:a4:4c:cb:16:
12:3d:4e:07:b0:7f:e0:66:50:0c:28:e2:85:ea:e2:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:67:73:DA:ED:08:34:5D:B7:F8:F2:F5:C7:8C:47:09:94:A3:E4
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:79:6a:a7:51:43:5a:fc:d2:61:1f:e4:9d:b4:e6:06:d6:
72:66:1a:c9:0a:47:45:77:0f:a5:f0:48:89:5c:30:17:aa:82:
09:cc:6a:4f:ce:3f:0b:0b:d8:ce:ec:79:56:c5:85:2d:43:d8:
31:b7:8d:43:92:0f:21:21:0d:49:0f:53:42:52:78:bb:67:9c:
5d:8a:91:84:37:82:2b:14:3c:cd:34:08:5c:c1:ae:18:7c:c8:
a0:1b:53:23:b1:1b:9d:b2:4b:26:7c:5c:25:03:13:76:bf:5c:
00:fa:95:16:f5:98:52:4a:ab:19:e9:7e:0b:bd:e3:e9:1a:64:
85:b5:bb:a9:52:84:33:db:df:6d:6b:3d:15:b3:a7:c0:90:70:
38:40:6d:93:cf:bc:0b:a3:bb:fb:26:d4:6f:42:d4:41:28:93:
8c:b2:71:7d:22:b0:5d:63:98:37:59:e1:50:f8:00:75:75:93:
0a:dc:b9:de:cd:a6:01:24:51:1d:ae:56:19:4d:9a:a5:46:e3:
23:42:5b:96:16:ec:ae:dd:98:e6:44:76:14:e3:1f:57:f2:02:
a4:f8:aa:cb:3f:70:7d:ac:4f:c4:22:ed:2f:ac:90:e6:60:9e:
6e:bb:b8:4c:a6:13:d0:5a:32:90:53:11:41:ff:3a:7d:8d:3f:
90:56:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:14 2026 by rpki-client