Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: Cv0HcB7SbfMsrGZgcxQ95l6YesDBi0eOIDh7jAXdjBo=
Subject key identifier: A0:98:35:E8:D5:0F:E1:98:55:8C:6D:A7:CC:F3:3C:70:4D:C3:4C:FE
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 01A13ECB9511D55384F6230548B2C2F840B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 09:01:31 +0000
Manifest this update: Thu 15 Oct 2026 09:01:31 +0000
Manifest next update: Fri 16 Oct 2026 09:01:31 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: bpwANX+zEv7zVV70SKoxruYYu2PBVH81TXAz9hGa3Ns=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:95:11:d5:53:84:f6:23:05:48:b2:c2:f8:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Oct 15 09:01:31 2026 GMT
Not After : Oct 16 09:01:31 2026 GMT
Subject: CN=a09835e8d50fe198558c6da7ccf33c704dc34cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:8a:84:28:11:e3:0b:39:5b:94:21:30:bb:
36:e7:49:15:d2:3d:f2:70:3a:f3:c4:34:c3:23:41:
8e:4b:59:5e:65:07:9e:37:78:00:4e:b8:50:c5:e4:
41:df:32:ff:1f:fa:4b:bc:32:c8:8f:0f:b8:e6:fc:
4e:2e:67:d2:c0:72:60:6d:e2:93:c4:b4:45:c4:b1:
e7:8c:c7:0e:bc:4c:87:ce:9b:24:b7:19:e4:ff:70:
88:61:84:c0:20:fd:23:b7:1e:23:04:a3:b4:fc:8d:
e9:fc:c3:3c:31:38:54:81:7a:85:bb:fd:05:32:ec:
6c:86:c6:57:6c:ba:1c:1e:5c:62:0b:c4:34:60:32:
39:08:2b:cb:5a:3c:31:af:1b:17:f7:82:0b:01:f5:
ee:8f:2d:ed:4f:45:66:1c:ae:58:51:9c:0e:c2:a4:
9d:f4:60:5e:07:44:39:b9:9b:dc:89:29:71:7e:0a:
5e:74:3e:03:3a:3d:9e:a7:93:03:77:cb:de:4e:81:
f3:48:bd:3e:c0:52:eb:21:13:47:52:99:09:49:ab:
34:09:a4:17:1f:03:3f:64:85:e8:00:5e:b8:9f:82:
22:b5:b9:d1:d3:0a:88:a7:9e:b6:cc:c8:75:77:83:
66:da:f2:88:5e:7b:5f:a3:07:0f:e6:27:1c:56:5f:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:35:E8:D5:0F:E1:98:55:8C:6D:A7:CC:F3:3C:70:4D:C3:4C:FE
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:17:91:ee:bc:62:31:21:d6:ed:af:6a:81:8e:13:dd:ee:
0d:97:c5:b0:45:27:38:03:18:bf:c1:84:81:c3:0b:20:f9:fa:
71:f9:f3:87:bc:29:ee:72:bc:ed:81:b3:92:21:81:69:60:4f:
aa:03:6f:53:f5:d7:47:d6:b1:66:46:2e:98:cf:b9:8c:8b:99:
ce:a5:35:e6:17:fb:68:74:2b:c4:cb:f0:dd:86:f2:e1:88:87:
4d:fd:f5:0a:41:6c:19:fc:9d:5b:0f:39:e5:db:db:b8:ce:16:
3b:05:33:89:6b:d2:45:60:53:a3:c8:e2:41:6d:a9:d4:b4:a9:
bf:08:81:e7:4a:cf:aa:80:08:bf:9a:86:fe:3d:7f:88:2a:cb:
7e:62:e8:8c:9c:69:8a:07:be:59:41:38:f4:dd:11:3c:0c:0e:
97:ca:10:f1:3d:27:f4:d9:64:36:d9:2f:ca:72:11:4f:1b:a0:
75:93:6c:f8:1b:8d:12:e1:7f:57:2e:b1:83:55:2a:0c:15:a8:
cd:68:55:41:2d:ce:a0:14:95:ac:b8:82:20:5b:af:66:33:22:
55:ec:43:94:e6:12:fc:77:3f:69:60:12:34:9b:07:33:3e:cf:
fe:8c:cc:6a:54:e2:10:e1:56:b0:c2:d3:61:cf:a6:26:24:e4:
4c:ee:ad:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y5UR1VOE9iMFSLLC+EC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTFkMDdkZTZmMTI4ZjQ2OWM0YzNiMzAyOGFkZjhkNGQz
N2UyZDkwHhcNMjYxMDE1MDkwMTMxWhcNMjYxMDE2MDkwMTMxWjAzMTEwLwYDVQQD
EyhhMDk4MzVlOGQ1MGZlMTk4NTU4YzZkYTdjY2YzM2M3MDRkYzM0Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyKKhCgR4ws5W5QhMLs250kV0j3y
cDrzxDTDI0GOS1leZQeeN3gATrhQxeRB3zL/H/pLvDLIjw+45vxOLmfSwHJgbeKT
xLRFxLHnjMcOvEyHzpsktxnk/3CIYYTAIP0jtx4jBKO0/I3p/MM8MThUgXqFu/0F
MuxshsZXbLocHlxiC8Q0YDI5CCvLWjwxrxsX94ILAfXujy3tT0VmHK5YUZwOwqSd
9GBeB0Q5uZvciSlxfgpedD4DOj2ep5MDd8veToHzSL0+wFLrIRNHUpkJSas0CaQX
HwM/ZIXoAF64n4IitbnR0wqIp562zMh1d4Nm2vKIXntfowcP5iccVl+b8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCYNejVD+GYVYxtp8zzPHBNw0z+MB8GA1UdIwQY
MBaAFAXh0H3m8Sj0acTDswKK341NN+LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMt
OGQxM2Y3YjNmMTQyLzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMtOGQxM2Y3YjNmMTQy
LzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLQXke68
YjEh1u2vaoGOE93uDZfFsEUnOAMYv8GEgcMLIPn6cfnzh7wp7nK87YGzkiGBaWBP
qgNvU/XXR9axZkYumM+5jIuZzqU15hf7aHQrxMvw3Yby4YiHTf31CkFsGfydWw85
5dvbuM4WOwUziWvSRWBTo8jiQW2p1LSpvwiB50rPqoAIv5qG/j1/iCrLfmLojJxp
ige+WUE49N0RPAwOl8oQ8T0n9NlkNtkvynIRTxugdZNs+BuNEuF/Vy6xg1UqDBWo
zWhVQS3OoBSVrLiCIFuvZjMiVexDlOYS/Hc/aWASNJsHMz7P/ozMalTiEOFWsMLT
Yc+mJiTkTO6tQQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:01 2026 by rpki-client