Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: qKw+Pew/jM3EytVLR/8tTaJ7z0mYTJ69/ksM+Ar6+iQ=
Subject key identifier: E9:31:22:5B:1A:48:75:78:74:06:CF:DA:2D:69:1E:43:1B:24:78:74
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019CEC6F366EDF97DDD3988E6E8F30904340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 045D
Signing time: Sat 14 Mar 2026 13:00:37 +0000
Manifest this update: Sat 14 Mar 2026 13:00:37 +0000
Manifest next update: Sun 15 Mar 2026 13:00:37 +0000
Files and hashes: 1: R_QXAd0ljQo11gwzi4iQ8aziD6Y.roa (hash: of6gwgr1hLSBTBKNTi/EQcBYEpZYdsoorOxLzo/9c8g=)
2: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: cbzdjv0cLewmZGx4auB7mVx9YojH0eIrQIOjC75BHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:36:6e:df:97:dd:d3:98:8e:6e:8f:30:90:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Mar 14 13:00:37 2026 GMT
Not After : Mar 15 13:00:37 2026 GMT
Subject: CN=e931225b1a4875787406cfda2d691e431b247874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:0f:be:cf:e8:89:62:b6:e2:cf:a6:ef:e7:
f4:17:c4:1d:7e:13:76:c0:6e:fe:29:1d:29:62:88:
dc:f8:15:3a:57:14:c8:4f:d1:df:e7:96:0f:7a:4b:
33:eb:ba:fc:c7:aa:7f:4a:47:37:b8:11:59:f6:87:
1e:a7:70:f4:19:ff:2c:9b:0f:01:8c:ca:cc:1f:c7:
1b:bb:d1:c7:e9:41:a7:58:af:23:1c:50:52:64:31:
83:70:3c:8c:ba:02:99:9c:d0:93:bc:7c:90:a1:4a:
20:3e:0f:07:61:d6:40:3d:2a:0d:c0:5a:4c:75:d8:
58:0b:54:40:b5:49:8b:3a:b6:22:b1:66:96:28:3e:
b8:b4:8c:e8:96:4e:df:71:7e:5b:3d:75:7c:1c:b2:
7d:fa:ba:54:56:96:88:6b:b5:37:93:79:8a:e2:1b:
1c:95:1e:9d:a7:d8:3e:3c:04:c6:74:b8:bc:41:ae:
f0:6a:2f:f9:bf:84:ae:c0:03:39:40:07:2f:17:80:
7c:cd:8f:df:0b:c7:c9:b7:2e:e9:c9:03:27:a1:27:
2a:cb:b5:3f:b0:9c:aa:44:0d:1f:8e:b5:39:b9:2f:
74:c6:c3:7a:54:45:bf:7f:aa:2e:33:37:b9:db:48:
18:54:8b:60:32:a1:21:5c:29:ad:15:95:cf:db:64:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:22:5B:1A:48:75:78:74:06:CF:DA:2D:69:1E:43:1B:24:78:74
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:ef:66:e6:b4:0f:24:af:83:21:5c:63:ad:68:ed:4d:66:
f0:29:05:1b:cc:9e:28:29:cb:f0:5f:d6:3b:b5:0c:a3:cc:7b:
35:37:30:e6:8c:33:fe:67:7b:11:56:8e:9e:a6:46:3f:32:dd:
92:23:a4:47:af:2d:b9:94:ee:3c:4e:ca:9f:88:8f:9c:87:a6:
30:ac:2b:81:1c:34:6e:93:d8:b3:1c:92:ef:38:59:01:ef:69:
d0:55:a3:95:cc:0e:26:97:97:c7:3f:cb:59:f3:a8:58:6e:3e:
d4:14:5b:d3:63:c2:4e:66:76:7a:84:41:d9:eb:bf:9d:38:9f:
5e:61:5c:42:fa:2e:b0:40:1a:1d:84:e2:ae:cc:ef:1b:3e:49:
d2:ed:f1:e9:43:58:ba:cc:0f:be:1f:f5:13:26:35:36:84:3d:
e2:18:41:38:a8:a8:b0:6d:b5:19:d1:24:2c:0a:95:9d:23:ab:
73:cb:25:86:f0:0d:79:90:60:5e:c5:9b:99:62:bf:76:ab:30:
cb:2d:06:cf:c1:48:f6:1b:c2:5a:d8:69:cc:2d:fd:7a:4a:5b:
b0:ca:50:62:44:c1:6e:b3:eb:f4:6c:ff:da:b9:84:c3:2a:11:
c2:1c:97:dd:7f:44:ee:43:ef:d6:34:33:4f:4c:c5:49:d6:2e:
c8:f6:ec:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsbzZu35fd05iObo8wkENAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTc5NTI1OTExOWVlOGE2ZDEwOGU5YjVjYmUwYmI5MGMw
OThlY2UwHhcNMjYwMzE0MTMwMDM3WhcNMjYwMzE1MTMwMDM3WjAzMTEwLwYDVQQD
EyhlOTMxMjI1YjFhNDg3NTc4NzQwNmNmZGEyZDY5MWU0MzFiMjQ3ODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8QPvs/oiWK24s+m7+f0F8QdfhN2
wG7+KR0pYojc+BU6VxTIT9Hf55YPeksz67r8x6p/Skc3uBFZ9ocep3D0Gf8smw8B
jMrMH8cbu9HH6UGnWK8jHFBSZDGDcDyMugKZnNCTvHyQoUogPg8HYdZAPSoNwFpM
ddhYC1RAtUmLOrYisWaWKD64tIzolk7fcX5bPXV8HLJ9+rpUVpaIa7U3k3mK4hsc
lR6dp9g+PATGdLi8Qa7wai/5v4SuwAM5QAcvF4B8zY/fC8fJty7pyQMnoScqy7U/
sJyqRA0fjrU5uS90xsN6VEW/f6ouMze520gYVItgMqEhXCmtFZXP22TaTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkxIlsaSHV4dAbP2i1pHkMbJHh0MB8GA1UdIwQY
MBaAFPwXlSWRGe6KbRCOm1y+C7kMCY7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYt
Y2ZhNmEyNTQzMmU5LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYtY2ZhNmEyNTQzMmU5
LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+/vZua0
DySvgyFcY61o7U1m8CkFG8yeKCnL8F/WO7UMo8x7NTcw5owz/md7EVaOnqZGPzLd
kiOkR68tuZTuPE7Kn4iPnIemMKwrgRw0bpPYsxyS7zhZAe9p0FWjlcwOJpeXxz/L
WfOoWG4+1BRb02PCTmZ2eoRB2eu/nTifXmFcQvousEAaHYTirszvGz5J0u3x6UNY
uswPvh/1EyY1NoQ94hhBOKiosG21GdEkLAqVnSOrc8slhvANeZBgXsWbmWK/dqsw
yy0Gz8FI9hvCWthpzC39ekpbsMpQYkTBbrPr9Gz/2rmEwyoRwhyX3X9E7kPv1jQz
T0zFSdYuyPbsHw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 22:12:28 2026 by rpki-client