Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: tyRsIjDb6AiOgmCrdBHc9CsXQI79/UyOmWDGhFWAhX8=
Subject key identifier: 4E:B6:F6:D1:11:24:A0:20:03:8D:2D:99:61:1C:82:5F:69:A4:C4:E8
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019D3A544F56791702B0B283C9C2E4238960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0F28
Signing time: Sun 29 Mar 2026 16:01:36 +0000
Manifest this update: Sun 29 Mar 2026 16:01:36 +0000
Manifest next update: Mon 30 Mar 2026 16:01:36 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: wCLl3/Ri9x1iPHl/Anz2+o7pLSq4rjZyRjfVLWkzBGo=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4f:56:79:17:02:b0:b2:83:c9:c2:e4:23:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Mar 29 16:01:36 2026 GMT
Not After : Mar 30 16:01:36 2026 GMT
Subject: CN=4eb6f6d11124a020038d2d99611c825f69a4c4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:58:fe:80:b6:7d:84:44:83:db:3c:8e:61:
d3:2c:3f:83:db:15:8b:1f:d1:99:16:eb:95:f3:68:
30:f3:6b:73:b6:e9:44:f5:e9:97:06:e1:5b:7f:69:
97:1a:01:e1:e5:38:62:49:88:d9:0f:f0:a0:79:0a:
89:18:8c:8c:28:b5:29:90:39:31:5d:17:59:3d:f4:
09:3b:42:dc:e4:5a:af:f3:c1:9b:dc:0b:51:f2:62:
9a:e9:1c:6b:31:1b:30:9d:4f:b3:86:80:4c:0f:e7:
e4:d4:1c:61:1c:c6:43:98:c0:75:95:93:41:d9:ec:
8d:15:21:9e:0d:4a:27:58:99:db:7b:ab:39:c5:26:
3c:c1:bc:90:b6:10:ec:47:de:df:1c:c6:5e:7a:1d:
6c:91:da:36:49:cf:fc:7f:52:bf:08:33:8a:72:77:
fa:5d:68:6b:67:10:b6:07:af:17:f2:c4:1e:ea:09:
bc:8b:f5:ba:ab:c6:5b:03:8d:62:96:8b:61:28:4f:
19:33:b6:71:9d:ec:c9:77:85:f6:f1:4c:19:bd:12:
ed:b7:8e:96:c1:91:58:c8:41:29:7b:b4:12:d0:9f:
7a:7a:7b:94:0f:d8:24:51:c2:30:65:4c:35:92:43:
d1:f7:07:5c:84:7e:2f:3e:ee:d5:5f:9d:41:16:b3:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:F6:D1:11:24:A0:20:03:8D:2D:99:61:1C:82:5F:69:A4:C4:E8
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e8:f6:04:43:27:7e:2f:d2:cd:e5:b5:8e:db:22:68:e1:ae:
c3:d7:b8:39:da:b4:45:08:d5:81:89:25:a2:59:b0:a2:c2:46:
82:13:6c:05:fd:42:07:2e:c8:17:31:72:e8:97:55:4c:7d:1a:
27:6c:f2:35:b6:69:e8:17:53:52:37:aa:05:cb:43:f2:96:c2:
06:88:9f:62:eb:e7:29:2d:f6:e1:d4:32:18:b8:48:b8:8a:14:
2c:a9:76:cb:41:96:7b:94:da:99:96:85:e3:0f:7a:59:a4:86:
c6:bf:12:1b:ff:1b:79:e4:e9:7f:21:66:b3:53:b3:07:45:45:
7b:cb:14:a1:ae:44:f1:e6:25:93:65:f2:91:0e:ed:d5:fa:7c:
04:8a:38:0c:a1:88:5d:2c:5c:2d:05:66:08:36:cd:31:7e:ea:
e3:a9:1a:33:aa:cd:b5:5f:99:ec:c7:8e:b6:2b:2d:39:ae:e1:
33:be:34:9e:d1:d2:6c:ae:cb:09:3f:3a:c2:5c:77:92:d3:c8:
52:72:05:f9:f4:89:6a:af:5c:d8:31:cd:56:29:fb:e0:4b:9e:
68:eb:fd:7e:cb:43:3f:47:8b:47:2f:b1:72:3a:59:9a:6c:58:
37:38:ec:82:77:5b:ae:46:b0:c4:ae:7c:fb:ed:38:bb:b3:fb:
55:c5:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:51 2026 by rpki-client