
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: FOr0dof+IThwqPu9ZYn137iJQhvOr2UXFsT2PMrFJ0Y=
Subject key identifier: 93:CE:8A:04:25:66:99:7B:6E:00:C2:6B:2A:7B:14:8B:57:49:00:56
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 019D37527A30E23F4A1425BBBBEFA88EA009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 15C7
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: jgjUcC8zjp9gtZVcxZ4npHLpHV/leArJM60EPfpWe8s=)
2: UdRtC8oWULapblUxKPZMiKoK7Fg.roa (hash: NCRhs0KrgrczrslxIEqi2lQhD/o2DKDw/5BIUZhQTS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7a:30:e2:3f:4a:14:25:bb:bb:ef:a8:8e:a0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=93ce8a042566997b6e00c26b2a7b148b57490056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:cc:58:dd:84:0a:85:d6:eb:7e:f6:73:ec:
9f:31:c4:ba:a7:50:b1:92:22:e3:47:2a:7d:14:e2:
39:29:e7:70:41:13:98:67:28:e3:55:0c:eb:1a:24:
5d:82:47:d0:58:37:6b:e4:34:d6:b4:6f:1d:58:0a:
6e:5f:39:f4:f9:bf:63:d1:ed:84:c8:2b:d9:a8:33:
ba:17:33:fb:fb:15:26:45:89:f9:be:f7:a7:85:d0:
03:a8:3c:b4:80:40:7d:54:3b:9c:8d:59:d1:e0:28:
db:67:e2:b5:fa:c6:09:f0:44:55:88:8b:34:f7:d5:
ba:3f:31:39:06:be:36:40:97:a8:ed:8a:d3:02:47:
f4:26:e9:64:cb:8e:83:c7:d0:b8:b9:c5:8e:8a:9d:
05:1a:75:a4:58:4b:05:61:2b:4e:80:5e:d1:e0:70:
53:10:70:1a:df:af:35:ac:d5:c2:f4:de:27:f7:06:
1d:10:09:e8:63:3b:d3:e7:77:54:f7:85:17:35:cb:
3d:a6:11:66:c3:ad:ce:b2:e2:6b:6a:81:43:53:1c:
58:5d:1d:19:d3:d2:f5:69:a8:62:e4:4d:f6:fa:f2:
18:ce:4b:ee:28:a1:cc:d6:4a:3a:73:0e:86:88:12:
e8:c6:a7:b9:73:c9:dd:8a:65:10:59:a6:9d:1c:0f:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:8A:04:25:66:99:7B:6E:00:C2:6B:2A:7B:14:8B:57:49:00:56
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:90:2d:54:b8:71:36:d6:60:f4:d8:ed:24:59:ea:bc:d8:0d:
55:ec:cb:9e:ec:4d:df:6d:93:80:18:69:b0:8d:74:ba:5c:5f:
05:b4:14:f6:fb:89:b4:fd:70:8a:79:69:fd:69:df:51:01:76:
06:dd:c4:74:4d:63:50:2f:3f:97:ba:af:ad:ca:23:f7:3d:4c:
e9:48:f6:4f:8d:47:de:b8:97:c5:57:e4:0f:b7:b7:23:83:f8:
34:fe:55:af:73:19:9b:1f:5c:9f:85:1a:76:62:8a:07:d3:1b:
b3:24:ff:99:30:45:e9:e8:66:72:67:5f:89:34:53:0b:5f:71:
b9:78:d1:0a:08:27:55:6c:3d:71:1c:60:b4:25:99:78:46:b9:
b0:67:ee:57:43:87:82:c4:ca:c5:99:16:a0:05:7a:25:b4:e7:
f4:88:e1:35:9d:fb:a0:89:c7:0e:58:27:72:ca:00:29:61:71:
40:3b:01:ef:4a:ab:30:15:5f:ab:7c:9a:82:34:4d:56:12:4c:
3e:9a:7a:b3:09:14:0f:36:b7:88:0c:f4:4a:1c:0d:8c:15:f3:
de:f6:13:a5:42:80:3a:1f:5b:d5:88:24:7b:ed:68:ac:da:00:
3e:8a:fd:b2:83:34:7d:9e:43:f6:fa:26:64:8c:19:8f:7c:b7:
df:59:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:52 2026 by rpki-client