Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: ggJVvS1lLMR+CZ0/ICDeZFsyWca4CxGJWfWxq9lMfQ8=
Subject key identifier: 83:EA:85:DB:C7:64:DC:0A:B6:9B:D8:EF:B0:4A:6C:F9:DE:4E:05:0D
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 019CF4CEAFC79F947EF0F58468246CE576D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 39
Signing time: Mon 16 Mar 2026 04:01:51 +0000
Manifest this update: Mon 16 Mar 2026 04:01:51 +0000
Manifest next update: Tue 17 Mar 2026 04:01:51 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: dcd0+/oW9NegtI5hDEJWS1OoXsZ/gU7YX64zju6z9KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:ce:af:c7:9f:94:7e:f0:f5:84:68:24:6c:e5:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Mar 16 04:01:51 2026 GMT
Not After : Mar 17 04:01:51 2026 GMT
Subject: CN=83ea85dbc764dc0ab69bd8efb04a6cf9de4e050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:d6:6f:cc:c4:02:ac:08:04:86:82:da:1e:
bc:17:c9:bf:8b:c6:e8:f6:cd:80:96:ac:d7:40:17:
ac:e7:cb:99:64:96:5b:14:c5:0e:bd:ca:7a:58:7a:
17:7f:84:7b:45:df:e0:bd:19:27:e5:52:6b:3c:c1:
87:ee:54:a9:f5:46:5a:6a:34:e0:07:b3:a6:b8:e4:
14:ca:32:07:dd:77:f4:e9:79:b5:ff:b3:8a:c5:d8:
e5:d3:4f:e2:5b:b2:4e:a9:05:ad:1b:4e:cf:37:42:
de:c5:3b:bb:74:e2:94:a5:99:09:ff:c3:0a:19:dd:
fa:b2:04:56:e7:1a:a6:d4:c8:82:d4:6e:8b:fc:f1:
6a:e8:ae:eb:78:57:2f:04:c8:9a:ea:c6:a3:91:22:
31:4b:48:c9:6d:e9:4a:4c:c1:81:5f:52:36:f4:e7:
b7:e8:ce:4d:7f:1f:2b:b8:9e:d1:fd:ff:49:3b:68:
86:7f:34:92:e5:38:d9:0f:fe:99:f7:b2:7f:f5:95:
6d:d2:fc:a3:63:b6:f6:8f:30:1e:f9:ad:30:2e:b6:
45:6c:f5:21:c3:f2:2d:ba:18:d0:68:8e:2d:bb:ad:
cf:89:17:09:d7:ed:90:46:23:f4:b6:b8:67:32:66:
4d:55:a2:cc:25:d8:7f:0e:e9:14:eb:59:7c:94:ba:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:85:DB:C7:64:DC:0A:B6:9B:D8:EF:B0:4A:6C:F9:DE:4E:05:0D
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:7a:a5:b3:66:07:ad:97:75:9e:41:f0:91:ee:3f:71:f9:
5c:1c:5e:1c:86:7e:6c:e1:70:c1:99:5e:73:05:44:6c:75:ed:
57:f8:c2:47:1f:ce:1e:7b:c3:f9:da:3c:2e:af:71:0d:b9:c1:
e3:0d:f6:7e:bf:1c:fb:b4:1c:8c:06:b0:c0:12:09:2b:9f:e1:
a7:0d:94:aa:da:00:e1:43:c2:43:e7:29:07:3d:e8:41:0c:83:
a0:fc:ef:9f:f3:ef:00:1f:d8:55:e8:6f:00:9c:fc:67:9c:38:
25:d1:37:bf:a8:53:77:49:50:5b:db:b2:b1:59:f1:7f:e8:9b:
55:39:06:49:5a:15:c0:fb:92:bb:79:20:06:de:08:45:d4:37:
a1:f8:d0:fa:8c:d7:b0:7a:96:c8:a2:36:7e:fc:ab:88:d5:f1:
e3:45:e2:5c:f6:21:92:19:a1:e3:20:f7:54:cb:4b:e8:6a:68:
6c:cc:4c:9c:84:61:7d:07:b2:1e:0e:ce:0b:d1:94:6a:2a:a2:
54:4e:b3:87:83:24:d2:8e:d7:0a:4e:6e:f0:79:7d:cf:43:6c:
d3:bf:49:fb:4b:eb:24:bb:56:a3:d5:ef:41:90:be:71:5a:f0:
54:30:a7:92:3c:76:3d:3c:8a:6c:2b:23:16:45:c8:cf:ac:a9:
1c:08:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:19 2026 by rpki-client