Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: FIvI0d7tGPz3q9kpCPZgrbRIAqMbY81qQn3zX3/DvD0=
Subject key identifier: 24:85:B5:2F:6D:F4:BB:1D:30:FC:F9:F5:F5:75:3A:DB:F0:04:DB:60
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019E30A96AE8B7FA625CFA63C5A86195B496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1918
Signing time: Sat 16 May 2026 12:01:09 +0000
Manifest this update: Sat 16 May 2026 12:01:09 +0000
Manifest next update: Sun 17 May 2026 12:01:09 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: VeBMOiBimdWedgW83nmUXYQ9mtRQF7iECAatrMKy68U=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:6a:e8:b7:fa:62:5c:fa:63:c5:a8:61:95:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: May 16 12:01:09 2026 GMT
Not After : May 17 12:01:09 2026 GMT
Subject: CN=2485b52f6df4bb1d30fcf9f5f5753adbf004db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:f5:4c:78:3b:a0:12:93:86:c6:78:3f:ad:
59:f9:1d:da:f6:a9:68:85:4b:13:8d:33:6a:6e:28:
91:e4:5e:6a:14:02:e5:3e:8d:92:9a:62:ac:9e:ca:
e6:2b:9c:a8:1d:c5:87:e8:90:d9:62:93:2b:5c:2a:
a4:e6:24:30:19:0b:f4:4b:59:c0:a8:f2:7c:a9:63:
c3:12:b1:31:9b:9d:87:17:03:6b:61:13:a7:da:45:
91:86:34:83:7a:da:56:6f:81:17:ba:18:7d:55:a0:
59:ba:c1:7a:1d:8d:e5:9c:b2:b8:46:bc:6d:e6:68:
23:37:f3:b7:70:a0:99:44:3d:4f:9f:8b:74:a3:b9:
e8:b8:5d:e0:78:30:a5:58:44:58:50:56:6d:f8:04:
aa:24:4a:39:38:5b:c3:09:ab:db:42:6f:af:33:b5:
03:f4:df:b2:99:dd:67:b2:f9:d1:87:78:69:53:19:
a0:54:42:d8:f3:d9:ad:d6:58:75:6e:cd:25:69:0a:
39:55:fb:f7:4f:2b:17:41:98:cb:d7:3a:4e:1b:e8:
4a:0c:55:58:dc:24:19:e2:f4:c7:3c:d8:69:64:d0:
c3:0c:db:d7:49:0c:07:26:23:56:e4:70:07:24:d7:
30:df:cb:90:a6:1c:a3:69:6b:a7:93:a7:f7:ff:0e:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:B5:2F:6D:F4:BB:1D:30:FC:F9:F5:F5:75:3A:DB:F0:04:DB:60
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cd:a3:5c:4b:9c:9d:27:a5:f8:40:fa:00:18:63:f4:40:47:
63:57:df:39:80:1a:f6:fd:38:29:c2:7e:3b:5e:28:66:54:1e:
22:93:57:16:61:b5:0f:7b:e1:bc:07:40:db:f8:0c:cf:0a:09:
f0:35:26:0c:1b:e6:14:cd:5d:85:90:35:33:18:af:8f:7a:ab:
9f:a1:12:d3:72:11:37:6f:66:5b:c6:80:27:13:78:88:25:4e:
0a:f5:f3:32:c7:2a:25:8f:ad:d9:74:5b:72:0d:de:99:59:9b:
f9:29:af:4e:5c:79:53:cd:67:df:2b:aa:d4:88:86:cf:a4:08:
59:bf:74:43:8d:08:7d:8f:2a:b0:1b:1e:f9:c1:fd:7f:f8:80:
96:b2:5e:fe:90:b8:24:fd:21:3c:81:77:bb:06:b1:7b:77:3c:
fd:f3:00:a8:0e:f9:fd:64:6b:68:dc:a1:d9:14:4a:1c:90:75:
6f:03:f2:a1:15:4a:5e:f9:52:33:5c:fc:c8:96:e7:97:9c:a7:
33:c7:c1:c3:5e:79:09:24:ce:75:ae:e4:c3:8a:9c:2e:77:30:
63:17:e1:cf:94:f8:ca:4e:3c:d6:2e:45:8f:4d:76:e7:cc:67:
c5:93:78:1b:00:61:9b:33:a7:e6:28:44:ff:47:0e:e9:ca:f6:
18:83:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:33 2026 by rpki-client