Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: r2Lzgft4BX6nDtfjbaY5ClSxOlYgG5WsUpMXpGMhZnk=
Subject key identifier: FF:7F:7E:FA:81:41:EE:0B:F8:01:23:3F:CC:5C:50:DE:43:9A:E3:9B
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 019D1D24EF940FBD4B2A731E34595D51065E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0811
Signing time: Tue 24 Mar 2026 00:00:53 +0000
Manifest this update: Tue 24 Mar 2026 00:00:53 +0000
Manifest next update: Wed 25 Mar 2026 00:00:53 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: OAk1d+Oy6zJedB+bK2JwrlW6mbxSRDSEeKsxRjH6Ia4=)
2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:24:ef:94:0f:bd:4b:2a:73:1e:34:59:5d:51:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Mar 24 00:00:53 2026 GMT
Not After : Mar 25 00:00:53 2026 GMT
Subject: CN=ff7f7efa8141ee0bf801233fcc5c50de439ae39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:78:25:1d:88:34:3b:3f:61:53:d1:cf:ef:06:
65:64:58:96:b9:35:ed:a1:96:4e:d3:01:f7:ba:e0:
d5:7b:9e:69:0d:5e:82:37:b7:91:b7:0c:2c:5d:ea:
0e:75:e0:6f:33:5b:d9:bd:de:53:f7:78:8e:aa:73:
1b:da:3c:8c:2e:06:76:0f:08:4f:4a:e3:47:d3:a5:
4f:aa:fb:27:b0:15:71:94:ba:49:57:8d:3b:2a:fa:
1f:c6:8e:27:3d:0c:dc:a8:b3:1c:a2:cf:e9:8f:5a:
b4:dc:48:c1:7e:7a:ac:56:4b:0a:26:bb:95:8b:eb:
7c:3f:7a:e1:a4:70:b3:97:ed:86:f6:59:cc:ac:11:
42:65:e0:50:10:a1:ad:c1:7e:33:46:82:ff:b6:9c:
05:8e:16:0e:1b:39:f9:a0:b8:d4:d3:ff:b3:28:0a:
53:69:fb:9f:4d:e7:29:dd:ce:16:64:11:45:e1:63:
9a:e0:e0:a3:4b:78:75:ab:57:f7:dc:5b:e1:13:4a:
b3:be:24:3f:75:a9:d9:56:bb:c0:99:21:23:e6:63:
37:50:0e:03:54:5a:e8:b5:6b:ee:8c:5a:26:07:d2:
a6:24:28:aa:1b:bc:6a:3b:49:88:41:76:de:f9:b9:
0c:d0:53:7b:9a:81:15:7c:3c:f5:0b:1d:e8:be:0f:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:7E:FA:81:41:EE:0B:F8:01:23:3F:CC:5C:50:DE:43:9A:E3:9B
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:5d:b0:10:22:d6:f4:ca:d2:51:be:c5:b9:33:e0:86:d7:
0a:5e:2f:45:4f:32:c4:09:5f:2c:ed:4b:5a:00:93:79:c9:a9:
db:12:7e:6a:28:87:b7:5d:6c:8c:6c:e3:e9:02:17:be:3c:61:
eb:c6:77:ae:5e:70:6a:c8:00:44:49:2e:48:aa:1a:6b:0d:f7:
3a:8b:76:5c:7b:32:2d:b2:56:0c:cf:f7:f8:3e:a1:1f:20:24:
1e:e8:c5:e2:fa:25:83:14:61:7f:9f:d1:40:90:6a:89:48:af:
6b:1e:75:ee:47:7b:37:cd:4a:aa:d1:6c:66:95:e3:d2:0e:3d:
0f:66:7d:5d:b9:ef:47:e9:a0:b3:ea:29:62:66:98:fa:4e:a5:
ed:b4:a8:72:eb:52:c0:d6:32:fe:36:95:63:35:31:c5:6c:b5:
02:5f:bf:3e:da:b7:da:81:44:86:cf:f3:52:7e:e0:a5:a6:1c:
e6:48:46:40:00:8c:1e:d5:ba:09:85:10:a8:18:4b:d8:44:cf:
80:d8:0d:33:9d:5c:b7:1f:5b:04:7b:65:05:ce:df:17:4c:68:
46:8b:e2:7f:2f:4c:a7:1d:0d:37:71:16:a9:3f:8b:e7:2f:c0:
94:6e:d1:08:bf:85:ba:dc:0a:a8:90:69:7d:7d:f0:70:1e:0d:
bd:d7:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 10:36:37 2026 by rpki-client