Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: ZODKjbvQQxHPsw44tzl+p1YjS96453LrCoZ3002sXcs=
Subject key identifier: 2F:03:6D:98:5F:FD:4F:BB:FE:36:4C:90:79:0B:48:54:27:4F:2C:82
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 01A13DEEF65DF53B3A525AEF9C6F499ADDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0D83
Signing time: Thu 15 Oct 2026 05:00:33 +0000
Manifest this update: Thu 15 Oct 2026 05:00:33 +0000
Manifest next update: Fri 16 Oct 2026 05:00:33 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: 9XkOm/QdYfVlZawa2beR5oE7V10BxoRMuA/jSkHxsg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:f6:5d:f5:3b:3a:52:5a:ef:9c:6f:49:9a:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Oct 15 05:00:33 2026 GMT
Not After : Oct 16 05:00:33 2026 GMT
Subject: CN=2f036d985ffd4fbbfe364c90790b4854274f2c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:d7:55:c0:54:f9:31:58:47:e1:1e:fb:d0:
fe:c3:00:8d:f2:09:08:9a:c9:60:ac:64:6b:2b:e9:
6c:13:8a:30:4c:81:dc:32:f1:a8:c4:06:3a:61:a7:
1d:11:1b:8b:d6:39:d1:e0:b5:aa:72:a6:b4:e5:cf:
f5:fd:cd:27:65:f8:5e:2a:03:58:ae:b6:94:19:f3:
27:c0:51:11:90:e7:a1:08:e1:5f:e4:25:3f:e6:59:
61:fe:e4:5a:94:b5:f9:71:fe:6e:5f:73:f0:83:b0:
c5:49:9d:90:a2:ab:c0:f9:e5:6b:28:ab:3a:ef:8f:
c2:da:2e:8e:d9:1a:d4:f6:eb:5b:6a:ba:2d:1e:33:
19:1d:c2:9a:b8:a6:8e:0e:14:af:e8:57:f7:b0:0b:
ad:32:b8:58:79:57:c1:20:94:57:8d:16:c2:ed:36:
35:5b:71:cb:b3:68:d5:ae:85:74:cc:61:b3:96:f9:
d1:b5:ed:7d:90:91:5b:20:a2:01:b8:ea:54:6d:9b:
fa:c1:a2:38:37:4c:57:93:2b:a6:8e:07:53:b9:0e:
36:83:ef:59:fd:5c:96:91:7a:b4:bc:38:76:eb:1a:
3b:14:aa:45:31:ee:b0:fa:de:3d:a4:d5:f3:f9:8d:
d3:65:64:48:46:b9:b8:af:dd:c0:c8:a0:15:84:d1:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:6D:98:5F:FD:4F:BB:FE:36:4C:90:79:0B:48:54:27:4F:2C:82
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:f5:fc:78:d9:d3:ee:0c:de:92:4e:d0:c9:0b:e6:ee:8d:
09:ff:24:f9:e4:75:c9:90:85:32:e8:fa:3e:db:08:5a:cc:1f:
d9:78:d8:57:97:e2:75:57:a7:db:6d:bf:ee:4e:e7:ea:42:17:
67:ab:f7:b0:b7:67:7b:8e:8f:86:51:7b:15:04:c8:16:8f:8e:
8f:da:72:32:16:b9:19:74:33:14:69:c1:cb:c0:04:8a:b6:75:
80:ed:75:56:68:d7:78:c3:37:a9:77:c7:a8:cb:90:ed:64:f6:
2d:bf:f9:00:bf:88:ca:a3:d1:1b:80:72:c5:e6:31:94:59:5c:
ad:7e:5f:05:ba:93:58:cd:56:10:b1:b1:ef:27:8c:06:72:55:
f3:1a:b4:fc:1d:f8:56:3c:59:5c:0f:cb:3d:20:59:f3:ab:83:
88:97:8d:a1:4d:b7:b6:4b:25:1f:c1:47:24:d6:d6:82:44:9e:
60:3d:52:9d:ff:6a:a7:42:50:44:4e:05:38:40:71:02:b4:b3:
29:61:79:0b:04:50:0e:90:2a:c7:47:ed:73:a0:bb:b9:26:f6:
80:68:0e:35:b0:75:0c:0f:d1:d6:05:ec:9e:96:5e:76:30:95:
07:ba:bd:df:3a:8c:6f:e7:f7:53:9c:15:d0:a4:ac:10:b7:87:
b4:8f:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:52 2026 by rpki-client