Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: PMqcIHS1ovLT+7Kda+sO16vFHGPfhYBHHO087A1w4yk=
Subject key identifier: AE:47:23:E5:4D:7C:57:22:33:7E:E8:FD:80:FB:D1:A7:C0:7B:62:4D
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 01A00138657FB5F9F5018338E35AC45F60A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0CDF
Signing time: Fri 14 Aug 2026 17:01:08 +0000
Manifest this update: Fri 14 Aug 2026 17:01:08 +0000
Manifest next update: Sat 15 Aug 2026 17:01:08 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: wJ85qykSzfta7Pe/cwZLMvby8VNczS9lW7ohTcnzOeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:65:7f:b5:f9:f5:01:83:38:e3:5a:c4:5f:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Aug 14 17:01:08 2026 GMT
Not After : Aug 15 17:01:08 2026 GMT
Subject: CN=ae4723e54d7c5722337ee8fd80fbd1a7c07b624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8d:b5:80:56:40:9a:99:81:18:ba:f4:dd:e3:
66:4b:81:69:93:d5:92:a4:44:3e:86:25:cd:64:77:
ea:12:85:af:0b:3f:05:54:f9:1e:0a:aa:ca:a6:36:
93:6f:90:93:fe:d4:ef:f8:3b:92:c8:f7:57:5b:5c:
94:10:25:8f:0c:7f:2c:29:da:9f:9a:10:bc:b2:9a:
a0:04:61:e4:60:66:87:b7:89:6e:87:4e:d5:98:3c:
f7:d9:2f:64:4f:8e:e8:97:4b:27:2e:1c:70:5e:b7:
99:b1:e3:6e:fe:2a:f0:44:15:10:70:16:43:c8:21:
51:2e:da:05:cb:b9:1f:67:df:94:da:7d:7d:05:98:
4b:17:31:15:7e:d2:2d:2f:77:35:88:0d:12:30:8b:
48:d4:28:ec:55:1b:28:53:7c:3d:47:eb:2b:18:47:
b7:bc:98:d8:49:2c:88:67:69:34:c0:bd:fe:43:35:
74:c8:57:01:86:a9:26:3b:cd:9b:d4:eb:d3:f6:51:
e4:a2:52:35:64:de:61:12:d0:75:a2:ce:43:a3:25:
c2:eb:20:3a:22:10:f0:5b:c5:87:0b:52:86:71:3c:
24:b5:fb:e1:39:b3:16:99:ba:47:70:fc:2e:ee:a8:
69:69:34:ee:6f:de:95:8c:e9:e1:76:63:09:0e:19:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:23:E5:4D:7C:57:22:33:7E:E8:FD:80:FB:D1:A7:C0:7B:62:4D
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d1:63:79:95:22:bf:1e:90:1d:72:eb:b7:5c:97:a5:8f:12:
ad:c9:c4:24:ce:28:aa:8b:a1:e9:48:3c:f9:d8:22:d3:78:93:
bd:82:e4:bd:90:8b:2d:ec:cc:36:09:ed:92:b3:96:b0:73:fd:
3a:28:5e:8a:f4:ee:5a:e6:b5:42:5d:41:c6:6a:3f:de:3f:0e:
54:0c:43:2e:f7:e3:3d:27:03:81:b5:74:22:77:8c:50:20:77:
da:fc:27:2d:69:49:93:dc:d1:fd:2e:59:e4:8d:fb:62:23:61:
95:eb:2f:f2:45:02:a9:8c:56:bc:83:2e:c7:da:dd:57:ce:d8:
e4:6f:6f:0f:a2:c0:9e:ef:34:8a:eb:a4:65:fd:7d:1c:ca:2e:
e7:38:9a:99:24:4b:6f:7a:1f:e3:3f:a6:4b:6c:8e:0b:35:29:
26:ce:30:83:61:01:87:07:53:dc:23:ff:2d:48:a8:c6:b9:00:
9e:37:71:c2:e1:d0:4f:34:ad:5c:72:cd:ef:c7:29:cc:d2:bf:
10:39:f2:cc:56:9e:72:d4:f1:15:17:e4:f9:e4:a7:0a:de:91:
94:4f:a0:5a:3f:73:87:f1:40:ac:37:ce:cf:a6:f6:cb:d4:f9:
ab:f2:6c:8e:c3:f3:34:c4:65:7f:f8:c8:2a:5a:25:d7:a1:16:
4f:81:8b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOGV/tfn1AYM441rEX2CoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjYwODE0MTcwMTA4WhcNMjYwODE1MTcwMTA4WjAzMTEwLwYDVQQD
EyhhZTQ3MjNlNTRkN2M1NzIyMzM3ZWU4ZmQ4MGZiZDFhN2MwN2I2MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9421gFZAmpmBGLr03eNmS4Fpk9WS
pEQ+hiXNZHfqEoWvCz8FVPkeCqrKpjaTb5CT/tTv+DuSyPdXW1yUECWPDH8sKdqf
mhC8spqgBGHkYGaHt4luh07VmDz32S9kT47ol0snLhxwXreZseNu/irwRBUQcBZD
yCFRLtoFy7kfZ9+U2n19BZhLFzEVftItL3c1iA0SMItI1CjsVRsoU3w9R+srGEe3
vJjYSSyIZ2k0wL3+QzV0yFcBhqkmO82b1OvT9lHkolI1ZN5hEtB1os5DoyXC6yA6
IhDwW8WHC1KGcTwktfvhObMWmbpHcPwu7qhpaTTub96VjOnhdmMJDhljowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5HI+VNfFciM37o/YD70afAe2JNMB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdFjeZUi
vx6QHXLrt1yXpY8SrcnEJM4oqouh6Ug8+dgi03iTvYLkvZCLLezMNgntkrOWsHP9
OiheivTuWua1Ql1Bxmo/3j8OVAxDLvfjPScDgbV0IneMUCB32vwnLWlJk9zR/S5Z
5I37YiNhlesv8kUCqYxWvIMux9rdV87Y5G9vD6LAnu80iuukZf19HMou5ziamSRL
b3of4z+mS2yOCzUpJs4wg2EBhwdT3CP/LUioxrkAnjdxwuHQTzStXHLN78cpzNK/
EDnyzFaectTxFRfk+eSnCt6RlE+gWj9zh/FArDfOz6b2y9T5q/JsjsPzNMRlf/jI
Klol16EWT4GLFA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:21 2026 by rpki-client