Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: BmSbuTnvoD5MZbcvqYPNfCkhOJqT/EyDgnBbYHVwBsQ=
Subject key identifier: 9B:E5:33:65:80:C3:27:3B:5B:36:31:14:7D:E0:95:88:E0:7C:6F:41
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019F19435CC2B03EC277C32CAE3BA28915C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 1020
Signing time: Tue 30 Jun 2026 16:01:12 +0000
Manifest this update: Tue 30 Jun 2026 16:01:12 +0000
Manifest next update: Wed 01 Jul 2026 16:01:12 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: vTo+jZAqWWJTFBzEh6tSKZHmSjLV2vsKet3QFFuLjgc=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:5c:c2:b0:3e:c2:77:c3:2c:ae:3b:a2:89:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jun 30 16:01:12 2026 GMT
Not After : Jul 1 16:01:12 2026 GMT
Subject: CN=9be5336580c3273b5b3631147de09588e07c6f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:a2:eb:12:e4:97:26:75:2c:27:84:0c:10:
ab:69:54:dc:29:3b:3d:a4:78:54:b2:be:ff:d6:0d:
85:23:b4:c0:00:07:86:9f:83:55:8c:05:98:18:2c:
43:5a:38:18:06:2c:2f:41:74:19:09:ae:69:46:c9:
87:6c:36:95:93:6a:64:ea:01:02:ba:18:ad:21:87:
e2:f9:7b:76:78:0b:be:cb:f0:18:16:b1:14:1d:e0:
20:44:ff:84:1a:48:12:23:1b:c8:3d:fe:62:a6:a1:
bd:44:a1:3f:e2:b9:9a:8a:18:10:0c:e9:ca:35:e5:
1b:ad:c3:b3:a0:03:52:05:dd:5c:61:7f:29:3d:9d:
6a:f8:4e:a4:c5:75:f1:d0:05:26:c0:28:3a:17:0c:
0a:8b:a4:65:45:1d:eb:58:88:f2:2a:61:3f:40:47:
9a:7f:21:71:e6:84:7a:4c:19:e2:76:4e:2b:93:d3:
84:fd:c2:e1:d3:1d:44:63:bc:56:7e:f6:68:61:8d:
df:d7:b6:15:8f:ea:b5:a9:c3:09:ae:63:32:96:53:
2a:68:2d:ec:a6:66:a7:91:8a:24:01:41:05:c6:ed:
19:69:c7:5b:ab:01:7b:bf:8a:14:15:f7:6a:92:6c:
48:0d:e5:34:8d:26:f7:27:c1:e2:e5:42:c9:3c:a5:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:33:65:80:C3:27:3B:5B:36:31:14:7D:E0:95:88:E0:7C:6F:41
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8a:30:62:25:f9:07:60:d2:23:9c:cf:c5:f9:a2:9a:ab:b8:
8f:08:4e:e1:0b:15:29:d5:2f:35:c5:00:68:1d:4d:a5:5e:60:
a7:d2:f9:b1:f5:c8:3f:54:a2:f7:60:33:aa:8e:2c:93:28:51:
81:c4:86:17:06:e6:db:0b:a0:66:65:6d:64:e2:28:fe:6b:fb:
5c:db:a6:45:a3:44:63:df:82:7e:38:5b:d9:88:7c:a0:64:f9:
f4:06:7b:89:4b:29:a3:4d:16:2e:88:fb:b3:01:c5:45:67:7d:
2f:f1:3d:e0:a6:14:34:07:df:69:df:07:08:ae:3a:f1:a3:9e:
86:04:3b:05:06:47:92:a3:9a:28:b2:0a:4c:99:d9:48:dc:f2:
50:b3:a1:3c:55:60:44:16:2e:e9:a1:35:7e:41:c6:3c:37:35:
e5:18:21:35:ee:42:bd:74:e0:d4:65:35:c9:ab:f1:fb:ba:f6:
8e:4d:b5:9f:29:0c:fa:9b:2e:5a:21:91:29:96:95:d5:fc:e3:
45:05:cf:49:4b:1e:98:c6:ff:26:b1:25:e6:de:c2:9e:1b:64:
ad:9c:e3:a6:c6:84:ee:00:e7:d7:07:38:d9:6c:72:fc:95:44:
ec:63:b9:de:4e:9d:84:31:32:01:9b:f6:6d:f4:8f:6a:ec:f2:
e9:c7:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:04 2026 by rpki-client