Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: KB7pfGtP+pDvLjDX4IPw1I89pyv0KYyNf8dqpDZBVD4=
Subject key identifier: 64:74:15:48:17:02:AC:0B:0D:EF:85:75:2D:A6:D2:E1:5D:94:88:37
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 019F18680EB9D773068E5871CC0D5A97B72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 12:01:40 +0000
Manifest this update: Tue 30 Jun 2026 12:01:40 +0000
Manifest next update: Wed 01 Jul 2026 12:01:40 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: l7B2JthFU5QuDERrRXVSC29u/fwSTpBDDSObX7ungf0=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:0e:b9:d7:73:06:8e:58:71:cc:0d:5a:97:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Jun 30 12:01:40 2026 GMT
Not After : Jul 1 12:01:40 2026 GMT
Subject: CN=647415481702ac0b0def85752da6d2e15d948837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:7f:ac:5e:ea:db:14:a7:4c:ac:75:d3:f2:
55:1d:1b:44:10:4f:e1:71:49:75:67:7c:c3:b3:c9:
f4:ee:98:bd:3b:f2:37:ea:c5:0a:56:b4:53:23:47:
d5:bd:32:80:94:62:4e:79:74:83:01:9e:69:79:58:
52:0c:e0:19:79:ce:e9:fc:fc:28:74:50:ac:ca:e8:
af:04:88:d8:ee:fd:35:62:fd:43:22:96:3a:f4:b0:
c8:1e:9e:98:c9:1f:ad:21:96:34:cf:bc:21:36:e4:
58:51:78:be:66:29:e4:89:66:0a:24:f6:3e:91:ea:
ff:0e:4c:32:24:5c:43:58:cf:d0:2c:89:88:0a:0c:
97:53:cd:d2:36:21:1b:26:67:65:ee:f2:0e:51:09:
be:68:be:42:e4:9e:f4:46:1b:70:ba:a1:92:cf:15:
78:7f:5b:b8:bb:f4:a1:a7:52:c0:9e:29:be:3a:bc:
ef:f3:ba:9d:72:b5:ca:36:02:f0:32:78:39:24:9e:
7d:5a:6a:91:2e:2d:87:16:28:e4:b2:99:e7:d2:fb:
99:9d:64:a8:af:c4:fc:b5:e2:5c:3c:d0:1c:29:49:
ef:4b:56:2c:18:78:3a:e7:77:f3:02:21:2d:d6:e4:
bf:97:25:88:ec:b6:99:3b:f9:87:d9:25:e5:67:7c:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:74:15:48:17:02:AC:0B:0D:EF:85:75:2D:A6:D2:E1:5D:94:88:37
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:50:f1:84:19:57:80:32:4d:db:7f:dc:42:f1:a2:42:28:27:
2b:13:83:85:9f:e8:05:09:14:0a:07:0a:90:73:57:13:2b:e0:
d4:59:98:ad:00:35:94:85:6e:89:10:df:a0:11:94:53:17:df:
62:e9:c9:41:ad:0f:f6:ba:8e:53:d0:27:f6:ad:23:88:aa:31:
0c:7b:23:d5:fd:ae:bd:d8:4d:84:ab:df:eb:5b:1f:49:bc:09:
e8:37:61:0d:bb:a6:c6:88:b1:c4:00:bd:e5:e6:bf:95:25:18:
95:6e:a9:91:9f:b5:16:20:7a:f9:71:e4:fe:05:43:c1:b9:d4:
45:ef:fa:0d:f3:ae:e0:ff:56:90:ee:86:75:d2:83:e5:55:b1:
28:63:bd:30:bb:26:a4:97:7a:ee:f3:25:8c:d6:8c:46:ae:fa:
de:ff:71:41:3c:7e:43:35:49:c9:54:91:bc:cf:1b:71:18:95:
0c:07:4e:b8:f7:db:54:e4:d3:6b:48:d7:a8:bf:df:a6:58:9d:
7c:21:cf:77:78:83:57:5d:59:61:29:f4:9b:7a:25:32:b0:8b:
2a:a8:56:84:ee:15:58:77:36:0c:3d:d5:30:1b:0d:de:34:07:
66:32:61:7c:40:9c:fd:7c:49:7c:eb:e6:d5:57:b8:bd:da:cf:
d7:1e:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:43 2026 by rpki-client