Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: fYvtktf7JdDf0EoKDktUqXTp/JAj2eGUmwNaFfZy+xs=
Subject key identifier: F9:7F:25:59:12:F0:61:62:7B:C9:F5:42:87:57:62:01:F0:20:86:C3
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 019EFC4B43A7B9103F84C22D24FE93A96A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 0146
Signing time: Thu 25 Jun 2026 01:00:51 +0000
Manifest this update: Thu 25 Jun 2026 01:00:51 +0000
Manifest next update: Fri 26 Jun 2026 01:00:51 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: 5X4g2npnWPQS7VXhOPl4DT5vUA8jwiurZm+VLsvvUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:43:a7:b9:10:3f:84:c2:2d:24:fe:93:a9:6a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Jun 25 01:00:51 2026 GMT
Not After : Jun 26 01:00:51 2026 GMT
Subject: CN=f97f255912f061627bc9f54287576201f02086c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:8e:1f:79:14:ff:99:2b:93:38:1b:70:c4:
a5:b2:ef:b9:ee:cb:7b:4e:7a:3b:71:1a:b6:78:ba:
27:22:a4:be:d8:be:ba:2d:19:05:3d:d9:ec:a8:f3:
0a:15:8e:53:95:1c:ce:1c:9e:a8:15:7b:66:d9:0c:
b5:c9:eb:93:af:14:95:27:66:fe:e6:40:2e:8a:65:
a3:eb:91:0b:b3:a0:e7:6c:35:c3:cf:5d:37:b6:c6:
8a:33:00:91:cb:4b:b4:d4:df:63:36:14:15:65:69:
d1:b9:ab:7d:18:c2:0e:b4:41:bf:57:1c:4f:2c:87:
4b:b6:13:38:92:c2:43:4b:5e:a9:c8:9d:eb:66:88:
06:64:c5:ee:41:2f:ff:07:40:45:8f:8e:02:88:38:
36:1f:8f:6c:be:37:5d:35:0e:27:90:28:c9:c1:df:
4f:fc:46:b5:b6:9b:c9:28:71:4e:fe:86:80:33:bc:
9f:e8:4f:a9:17:50:da:cc:33:34:af:1e:40:1c:d9:
69:a5:c2:cb:2f:86:16:c7:ba:23:09:68:5f:24:c7:
b3:08:d2:2f:17:a7:f6:bd:05:d3:7b:ff:c6:99:cd:
23:9e:5a:dd:dd:1e:05:64:36:b4:6b:df:57:71:80:
a7:b2:2b:a7:c2:e0:e7:24:3a:2d:34:bc:f4:e4:64:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:25:59:12:F0:61:62:7B:C9:F5:42:87:57:62:01:F0:20:86:C3
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:7c:06:fb:6b:c9:09:bf:ac:8c:66:4f:e6:95:f6:cc:57:3d:
29:91:2b:3d:0c:02:93:f5:6e:57:12:fc:22:23:ec:5b:7b:6d:
8d:cd:74:f2:e5:8c:46:c1:db:d4:a2:3e:e7:2f:82:43:0f:f1:
a8:8d:22:ba:61:c3:98:70:26:97:1e:1d:1e:f8:a3:f4:13:14:
b3:9f:44:32:a1:c2:ed:1e:c0:81:ed:a8:88:be:bc:23:e6:e0:
35:6d:1e:c5:6d:af:6c:4d:82:cc:24:4e:b4:23:7c:41:e9:ef:
f2:fc:88:59:ff:e7:15:56:39:15:31:a1:24:3c:a8:ef:dd:08:
80:b1:df:8d:0f:59:13:fd:9a:a2:63:43:2c:1e:77:83:2f:53:
67:bd:6e:a5:e9:11:69:96:3f:2d:c1:db:c1:00:fc:5b:9b:bb:
2f:38:9e:0c:4c:9d:3b:67:30:d1:86:3e:3b:2d:9a:d6:c1:04:
72:a9:f1:5b:f2:a4:41:37:85:9c:61:b9:8c:86:c7:aa:fb:bd:
52:7e:dd:52:31:85:58:97:f0:08:5c:f8:c4:3c:4d:30:0b:06:
e5:bc:aa:13:98:af:a5:a7:37:2e:00:22:b9:52:84:0f:f7:1f:
f8:7b:dd:1e:77:04:c8:76:0d:b2:7c:1d:cc:0b:6e:0c:01:ba:
2f:5a:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:55 2026 by rpki-client