Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: dsTftR1NHJyVPHC+wOemGOaFDRZZbfxJxT0NZsTDqNw=
Subject key identifier: 3A:91:E5:6F:61:5B:8C:76:10:EB:CE:7D:84:B4:C5:18:0F:AD:E1:DB
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 01A0EAAE217418F9808BAC7D58C85826AB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 0246
Signing time: Tue 29 Sep 2026 01:01:15 +0000
Manifest this update: Tue 29 Sep 2026 01:01:15 +0000
Manifest next update: Wed 30 Sep 2026 01:01:15 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: iszSr8L6/P/6y/ikqSz61telUb8k/F0Pm9UPdk1fETo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:21:74:18:f9:80:8b:ac:7d:58:c8:58:26:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Sep 29 01:01:15 2026 GMT
Not After : Sep 30 01:01:15 2026 GMT
Subject: CN=3a91e56f615b8c7610ebce7d84b4c5180fade1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:01:cf:99:c2:2e:85:85:2b:95:c2:cc:6e:c3:
fc:4e:d3:e2:26:d3:06:f8:40:9d:a0:bc:e9:bf:de:
40:5b:f0:45:d0:c9:1b:95:ba:76:f9:ef:cc:b4:c9:
8d:85:92:ba:e2:54:31:ef:f1:95:de:fa:09:17:b2:
de:88:36:88:50:9e:85:2a:73:8a:f6:0d:e6:6b:1e:
c0:fa:25:10:a0:e5:9d:51:9a:35:98:48:77:4f:f4:
8e:09:7b:07:bc:5b:ae:f7:eb:03:b1:a5:2a:22:49:
e3:ca:af:9d:75:98:c1:dc:4d:6d:a6:3a:91:07:95:
9f:77:8b:5d:24:76:bc:be:20:6b:9b:a0:ce:fd:80:
c1:1c:6b:34:e1:3c:fa:9a:b5:c5:c3:db:cc:9c:14:
b5:b1:50:d3:e0:9d:f3:ac:f8:41:20:d5:88:ad:2d:
d5:69:7f:54:d5:53:8d:d6:7b:b6:57:1c:33:96:df:
48:43:f8:1d:f7:7e:89:da:57:e2:4b:33:51:76:5b:
cd:ea:30:66:02:84:d3:cd:08:80:b1:ed:cc:cc:80:
93:d3:8f:96:bc:f4:f9:37:37:10:4c:ab:75:73:1e:
aa:7f:aa:e4:06:ec:54:78:33:5d:ea:a8:9e:12:de:
20:e6:28:37:40:d8:01:ba:60:b3:48:15:41:48:8a:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:E5:6F:61:5B:8C:76:10:EB:CE:7D:84:B4:C5:18:0F:AD:E1:DB
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:43:8e:56:4b:1c:ad:5e:5b:84:54:a7:f8:d9:99:a4:2d:4d:
46:21:1e:4d:cc:39:41:9a:e8:53:15:f6:a4:1e:78:02:3d:54:
5b:90:d2:32:7b:78:7c:a3:4b:67:2e:2c:ea:a0:08:6c:ab:93:
23:8b:99:fc:8a:56:c8:ed:d9:58:dd:80:26:b0:02:68:9a:df:
1b:15:fa:9c:49:4f:b1:6e:a1:62:85:09:01:47:f3:9b:a8:d3:
8d:38:cf:f2:fd:e0:17:8e:ce:e8:62:59:88:39:93:9f:28:43:
b8:0d:a0:4b:18:63:e4:6f:a0:58:3b:11:1d:af:a8:92:20:17:
da:d9:f4:56:d3:d4:87:e3:ef:83:9d:d1:8b:46:ed:3e:f1:9a:
f8:9d:bb:93:4d:52:af:d9:0c:17:b8:7d:da:22:cf:29:52:24:
82:e9:11:46:f4:ef:20:b8:ae:ae:27:54:64:66:d8:e9:1a:74:
1e:d1:60:59:b1:be:58:d8:47:9a:4a:8f:66:9e:0b:63:a7:d9:
e9:a3:1c:48:a0:49:17:2c:25:56:50:96:1f:12:98:38:6d:e3:
cf:d8:ed:80:5b:fc:6e:0e:8f:e1:f8:af:b7:3e:46:90:0a:52:
3c:f4:ed:dd:28:24:2e:a2:20:66:fb:88:4e:be:29:be:8c:14:
82:2a:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:22:36 2026 by rpki-client