Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: FC2WdNFg1f18ZwTw4Lv7T7zhHm1Pi+KYuMmrthILeCQ=
Subject key identifier: 4F:DB:3D:C9:9F:FB:9E:8E:25:63:4A:77:3B:19:E8:8D:A6:64:0A:7A
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 01A13DEF38D3BDB83DEE814560EFDB45696F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 05:00:49 +0000
Manifest this update: Thu 15 Oct 2026 05:00:49 +0000
Manifest next update: Fri 16 Oct 2026 05:00:49 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: bvAC7osq6gP3PHiBikgPnK2/q8B2SqbVqjE4D1xJreY=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:38:d3:bd:b8:3d:ee:81:45:60:ef:db:45:69:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Oct 15 05:00:49 2026 GMT
Not After : Oct 16 05:00:49 2026 GMT
Subject: CN=4fdb3dc99ffb9e8e25634a773b19e88da6640a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:f8:96:72:1c:08:a5:6f:da:34:12:32:20:
de:2c:2d:e5:61:71:e0:63:7d:fb:36:1b:0a:16:ad:
27:0e:9f:89:0b:b2:07:f5:d6:95:9a:cd:ec:c6:74:
93:6b:50:ba:61:dc:f8:68:60:5e:e4:9c:db:91:50:
fe:87:b3:8d:2c:b8:d1:ff:ec:4c:31:e2:6e:66:43:
5d:50:ef:10:29:d1:1a:f2:b0:0c:61:be:5e:46:cc:
31:ba:41:e0:09:69:58:c4:a5:e8:73:00:76:7d:d4:
f4:af:da:f6:b4:aa:e5:2b:2a:28:f7:a4:33:1a:31:
e8:a0:df:cb:b5:61:f8:17:89:c3:82:db:5b:7e:93:
2f:2f:a7:42:64:d8:e5:9e:14:0f:18:87:56:3b:e9:
0c:27:12:f7:69:2e:1f:77:fe:1b:0b:4d:53:d1:e3:
84:2d:ea:43:1f:80:99:16:1c:fe:9e:ff:ca:b1:05:
7d:53:e5:13:ef:78:1c:c7:f1:93:e0:7a:8e:64:e8:
b5:47:c3:2d:b4:35:a8:96:52:1e:bb:e8:b2:35:b6:
a7:ce:a4:23:87:7c:3a:ea:eb:a1:d8:8a:10:3d:b7:
6a:d4:a5:62:3d:ac:d8:2c:90:18:6f:e5:01:2d:35:
78:c8:4e:00:1e:6b:e4:0a:f0:74:51:81:8f:b5:99:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:3D:C9:9F:FB:9E:8E:25:63:4A:77:3B:19:E8:8D:A6:64:0A:7A
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:96:05:78:08:5d:bc:3f:a0:bf:db:48:44:1b:4f:84:bb:e6:
32:54:7f:b0:60:01:30:73:33:bf:c6:12:18:fc:6b:f1:9d:15:
b1:f8:fe:a4:f7:12:f9:91:81:c3:d1:7e:7c:8f:5b:ad:35:80:
28:55:d5:c8:a6:0c:cd:a4:09:c0:e0:74:75:a0:62:26:1f:af:
87:4c:37:97:42:56:7f:df:e0:92:5a:c9:7f:23:2e:14:b7:75:
c3:fd:b4:82:b4:be:e2:aa:2c:71:1a:c3:36:91:fc:53:21:b5:
72:0c:4e:e4:32:9e:ab:99:05:32:8c:34:2b:c0:a6:51:c3:93:
d3:b3:cf:e9:e1:2f:fe:4a:3a:c7:12:02:9c:eb:ab:11:6d:e2:
71:03:e3:f6:f3:b5:72:a9:43:e3:6a:24:5e:97:35:95:a2:01:
04:8e:b2:5e:37:bd:dd:f2:1a:30:05:c3:a4:da:d8:c9:17:16:
e1:5b:f3:4a:0d:2a:06:ea:1f:16:55:a4:39:c2:8f:34:70:71:
49:63:80:7a:41:ed:17:e1:ca:a5:70:ff:aa:a4:1a:d1:ec:e2:
e0:8c:78:af:30:63:e3:76:f9:1c:3b:d3:ed:7a:22:8a:fe:65:
f3:69:3d:6d:a5:14:fa:52:96:2d:a5:a6:ea:53:95:90:d8:e0:
9b:6b:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:34 2026 by rpki-client