Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: Pg0qgVP4Vn7NgrytqbgI8hMiUGFwiMQH5x6b8Cp5Umk=
Subject key identifier: 62:A9:63:13:BC:DA:72:FA:C8:9D:FC:CD:BE:F9:3A:6A:63:58:01:6A
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019D389BEEF39E94673BA82694C4F254190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0B6E
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: SRUiAOYgHvU2JlBEd+iUoJKlHBCYnuFTlVuQGvt1jDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ee:f3:9e:94:67:3b:a8:26:94:c4:f2:54:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=62a96313bcda72fac89dfccdbef93a6a6358016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:dd:2c:2b:7d:10:38:42:77:31:78:56:c2:
c9:9c:0a:75:e0:21:2a:ab:01:ac:8c:92:c9:3e:7b:
37:cf:9a:1b:01:ef:bd:79:49:d4:0e:f6:af:e6:0a:
46:36:f9:c7:ec:ca:38:83:18:4b:53:3f:88:cb:29:
50:1b:e9:da:06:b5:1e:fb:46:ad:91:57:c9:66:0e:
80:f6:33:fa:c3:49:6b:67:05:8c:cf:7e:ee:f3:71:
98:11:2e:fb:77:72:72:a9:7d:43:3f:27:76:6d:15:
a5:9b:41:b7:21:f4:18:57:d0:69:f2:50:a1:40:3c:
98:d6:be:59:08:82:6d:2c:89:fa:a1:c1:21:94:e2:
74:b6:f0:14:46:8a:79:eb:eb:18:61:0c:7a:71:44:
c4:0f:bd:9e:b6:ce:85:a4:bd:44:cb:34:74:e3:5c:
81:80:7d:7d:63:96:07:fe:16:fa:bf:2a:04:c9:79:
4c:93:03:23:97:f7:b4:20:a5:5d:ac:c0:6e:b2:02:
2a:4a:2d:70:00:07:07:7f:0c:bc:17:14:47:eb:be:
90:1a:79:e7:8c:41:11:02:ad:73:21:ca:7d:c7:b6:
1f:3f:ff:82:47:3d:f0:d0:14:b8:4b:b6:3d:7a:95:
a2:40:f8:90:10:68:a5:f4:65:42:d1:cc:ca:aa:4c:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:63:13:BC:DA:72:FA:C8:9D:FC:CD:BE:F9:3A:6A:63:58:01:6A
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:77:c5:cf:b8:3a:ea:5b:2a:6c:17:9c:a6:89:c9:20:5d:
f6:14:14:3e:4c:78:1f:bd:f5:20:a8:0c:ae:f6:d9:07:e8:54:
0a:02:f4:2b:04:20:28:71:61:33:a9:b2:85:21:dc:86:a9:29:
4b:fd:04:c2:6d:25:84:72:74:36:60:30:03:a9:ea:2f:ad:d6:
1a:19:df:6e:e2:fa:a2:70:88:9b:6e:2d:18:21:29:d8:05:1d:
95:2a:b1:ba:fa:ce:c4:b3:e0:e6:0a:4b:bc:f8:75:ef:1f:af:
54:bd:3a:09:62:be:7d:cc:36:62:23:26:21:aa:da:66:bf:2c:
57:f2:6f:cf:e2:91:c0:bb:c4:49:c4:6b:a6:d2:4e:61:28:80:
a8:19:44:a3:cf:f3:2d:1b:0e:61:41:07:98:01:62:ba:7d:cf:
29:9c:b6:42:be:a5:d9:3a:12:b8:21:18:9b:92:6b:fe:0b:03:
5c:a4:98:bc:78:f1:46:9b:68:82:f8:42:18:e0:30:a8:1b:42:
92:55:5c:54:28:8f:b2:7f:56:32:57:85:57:3e:85:e4:d3:43:
25:31:8d:97:d0:e2:92:88:70:48:7b:07:80:3d:33:60:09:a0:
30:39:bc:05:d5:6f:75:54:33:17:27:ea:5a:8c:a3:54:38:2b:
e5:a4:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:48 2026 by rpki-client