Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: lAx9bstGBWzDdbM3ex9RSE5073dp5KZIX9reU6s65NQ=
Subject key identifier: 74:99:DE:E8:ED:0D:F1:D5:CD:05:5D:F9:61:24:9F:17:EC:C2:9C:BE
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 01A08F4556C4BF0A0BEEFB083ED187F30624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 063F
Signing time: Fri 11 Sep 2026 07:01:20 +0000
Manifest this update: Fri 11 Sep 2026 07:01:20 +0000
Manifest next update: Sat 12 Sep 2026 07:01:20 +0000
Files and hashes: 1: R_QXAd0ljQo11gwzi4iQ8aziD6Y.roa (hash: of6gwgr1hLSBTBKNTi/EQcBYEpZYdsoorOxLzo/9c8g=)
2: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: DB18qF152JIZcTSi9tp0AXCfMWQi31yPVpua0LzyzzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:56:c4:bf:0a:0b:ee:fb:08:3e:d1:87:f3:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Sep 11 07:01:20 2026 GMT
Not After : Sep 12 07:01:20 2026 GMT
Subject: CN=7499dee8ed0df1d5cd055df961249f17ecc29cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:3d:5f:6f:ab:2f:67:ad:8d:03:03:28:43:
1f:39:2d:61:29:3a:95:ae:59:df:c1:27:a7:3a:4d:
b7:21:29:2a:bd:fb:4a:d6:96:d6:40:0b:7a:f3:2c:
77:01:f4:59:30:88:bf:ca:a1:61:a4:3a:c5:55:0b:
4a:51:c9:82:4c:32:8c:bb:65:1e:26:54:c5:4e:a3:
01:37:54:5f:1b:68:9c:95:dd:3c:13:18:4f:fd:5b:
57:42:5b:80:eb:ad:12:73:40:69:36:1c:6e:dc:33:
4f:0d:42:67:c1:99:3f:96:2f:22:f8:cd:83:fc:13:
88:e2:68:4c:cc:2a:0f:ec:9a:d2:f7:b1:75:2e:6c:
ae:c1:4f:b2:ce:43:1d:aa:36:1d:9a:ab:78:ea:14:
ae:1b:c7:d7:05:70:e0:4b:5d:5e:90:c5:40:13:48:
0f:8b:41:8c:52:31:57:ee:5c:34:03:13:d9:23:5e:
63:cb:05:68:09:df:78:4e:87:fc:87:dd:49:aa:42:
61:1b:ac:ea:d5:14:40:cb:70:87:b7:c1:6f:ac:c1:
55:97:cc:bc:a8:81:aa:b3:ce:6b:75:91:37:bf:93:
f6:e8:b7:e1:8e:81:e6:9e:28:5d:6b:ca:6b:6e:a4:
72:f3:53:a9:e7:6c:a7:77:9e:c4:7e:75:70:33:7e:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:DE:E8:ED:0D:F1:D5:CD:05:5D:F9:61:24:9F:17:EC:C2:9C:BE
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:cf:7a:5b:fb:d0:1d:ad:c5:93:36:83:aa:c8:fa:4e:ab:
1e:df:ea:40:67:46:71:14:ec:e1:19:41:c7:07:70:d6:43:d6:
33:0b:ac:96:e6:3c:d2:a3:c0:2a:f5:e1:32:85:6b:10:0d:9a:
3c:19:58:b3:50:13:bb:92:71:e3:8a:cf:8e:6e:88:5e:8e:2c:
9e:ec:b1:46:36:af:79:6e:a5:58:4b:5a:18:4e:f7:bb:b5:ec:
f7:0d:15:82:fa:71:eb:a8:b4:c0:88:65:e3:ff:92:0c:ba:29:
e3:e2:e4:c3:a8:68:aa:42:d8:49:94:e9:8b:6c:0c:60:49:0d:
77:e5:09:0f:f0:f0:ca:f2:66:8e:91:1e:2e:4b:ab:1c:a9:b8:
52:41:88:81:00:08:7c:f9:07:bd:6d:ed:46:8c:c2:09:e9:56:
9a:1e:25:54:e7:40:dc:e3:05:5e:45:9c:e1:33:fa:39:5e:77:
53:93:42:4e:8b:eb:50:bf:77:56:da:6d:9b:93:15:f1:0e:17:
43:17:7f:5f:35:b2:7f:fc:78:9e:91:eb:ec:f6:23:35:0f:7f:
76:ed:3c:2c:6e:4e:58:0a:19:29:d4:20:7a:94:11:e8:0c:c7:
c6:5f:d3:5a:b1:5c:59:45:74:b7:43:d2:8f:9a:39:14:2d:5f:
a3:5c:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:08:25 2026 by rpki-client