Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: iZGvAz9CdTybA7N7Xu1JGZX0ZaoHV08iJuD5qi/IwtE=
Subject key identifier: 7A:9F:49:CD:08:06:66:C9:35:B7:A4:38:7E:35:9A:2F:C5:FC:A9:9E
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019F178BE1A6FAF032B5BE3A70C8DF69C0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0C66
Signing time: Tue 30 Jun 2026 08:01:10 +0000
Manifest this update: Tue 30 Jun 2026 08:01:10 +0000
Manifest next update: Wed 01 Jul 2026 08:01:10 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: +d0p1HWAL8BkBxYndbCjPDmkhKLQmePoDSLS6CcwTUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:e1:a6:fa:f0:32:b5:be:3a:70:c8:df:69:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Jun 30 08:01:10 2026 GMT
Not After : Jul 1 08:01:10 2026 GMT
Subject: CN=7a9f49cd080666c935b7a4387e359a2fc5fca99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:05:c0:96:22:45:ed:9f:61:ef:24:0c:ed:
52:c2:8f:2a:42:01:5d:df:9d:1f:11:e0:bb:64:8f:
ce:b7:2f:d9:28:e1:1d:ab:49:db:53:39:9a:d8:45:
5b:91:45:c0:22:bf:d6:df:26:8a:64:fe:8c:ba:eb:
2a:e2:67:0b:2e:f1:a1:6e:99:72:86:33:28:2a:cd:
e2:91:81:51:31:55:04:59:7d:f2:dc:bd:34:be:bd:
10:b3:de:51:61:03:13:5e:3b:66:6c:4e:03:fc:bc:
09:70:25:b8:2e:67:f8:72:d4:9c:17:ec:75:67:83:
32:31:aa:fe:a2:7c:e2:eb:c2:6e:f4:4e:68:0b:e1:
6f:1b:ad:c9:52:6a:cf:2f:f2:a7:21:01:df:db:21:
98:f6:3d:68:69:ea:8a:51:d6:cb:45:9a:0a:b1:fb:
2a:0c:28:f6:62:2d:00:38:8b:3b:df:f9:f5:a6:df:
f2:61:76:d3:f7:e4:e4:cf:5f:a5:87:a1:aa:f2:e0:
8a:93:fa:a3:01:9e:62:14:a1:0e:3d:30:17:8b:89:
8e:32:91:d2:6d:e7:04:9e:aa:12:e6:26:62:6a:b8:
3a:ad:7c:50:cc:aa:99:cf:9f:d3:41:9f:cc:f0:a9:
31:41:66:3c:d2:fb:7e:7f:bc:27:f7:1d:a7:0b:4e:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9F:49:CD:08:06:66:C9:35:B7:A4:38:7E:35:9A:2F:C5:FC:A9:9E
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:e6:1a:c1:d6:b2:4f:d6:d8:d3:76:f9:5c:88:48:43:b6:
01:89:ce:62:ce:ae:48:d5:10:e0:c2:ad:9e:d5:39:18:8d:b6:
ef:24:3d:aa:59:af:9c:73:58:28:fa:cf:78:a4:90:aa:d3:68:
a8:59:31:77:dd:9d:5f:04:c6:39:c1:e5:6a:9a:0c:d1:51:5d:
e4:1b:a2:68:e3:db:47:c3:ac:11:30:57:eb:3b:6e:b6:89:3f:
63:4e:23:09:77:02:1e:7a:08:a3:d8:c9:de:ee:89:30:99:35:
75:28:75:e4:a7:73:4b:17:2f:86:f4:7a:cd:cd:cd:d5:f1:d2:
28:ad:87:cb:1c:f9:3d:a5:c8:b6:c4:6d:a0:ee:ba:7c:20:16:
02:77:c4:d5:65:ae:00:d5:04:7f:2d:28:d0:b6:25:6d:79:b0:
2e:5c:c7:4d:95:a8:88:d2:f4:a3:d9:38:02:e4:93:4e:10:cb:
02:fa:ea:72:d0:49:2e:8e:19:c7:b3:99:d2:5f:77:1d:f2:33:
8e:c9:03:35:a2:16:9e:dd:83:17:ba:2a:0c:d4:5c:d7:d0:dc:
bd:19:87:90:09:27:46:83:db:6c:1e:ba:64:c9:7a:0d:70:d8:
70:e7:40:97:ac:22:78:2d:b3:9c:19:9f:e5:fd:12:8b:d3:50:
74:2d:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:14 2026 by rpki-client