Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: 4b6B7TiOCtCVwXlBavuuKa1PPEwOaRK/BwfUtlIZ+Do=
Subject key identifier: F8:47:E9:D5:E6:79:72:25:84:3A:15:5D:6E:53:30:EF:6F:71:58:13
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019D3A8B041119CAF9FDA08018ECD9CBFFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 17:01:22 +0000
Manifest this update: Sun 29 Mar 2026 17:01:22 +0000
Manifest next update: Mon 30 Mar 2026 17:01:22 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: UAbyjuWfEKuTwYoSzuEKxU3AT9zdrwRbc5Z1vb+jn8I=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:04:11:19:ca:f9:fd:a0:80:18:ec:d9:cb:ff:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Mar 29 17:01:22 2026 GMT
Not After : Mar 30 17:01:22 2026 GMT
Subject: CN=f847e9d5e6797225843a155d6e5330ef6f715813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:c6:24:65:aa:74:4c:0b:95:56:d9:59:27:
91:59:fa:75:df:48:fd:85:82:26:49:20:94:90:70:
92:0a:23:d4:15:8c:58:71:ae:34:b8:e2:7f:63:d4:
23:aa:98:a6:57:32:03:ee:0d:36:9e:74:2b:b2:1c:
b2:e9:79:bb:da:03:22:f9:87:88:04:8d:a2:1e:4e:
62:d0:37:c5:82:3f:ed:53:3f:d1:01:6e:6d:53:2a:
f3:d5:73:d9:6b:19:93:54:2e:d2:bc:90:aa:71:78:
e5:e2:73:56:a8:d5:4d:36:19:d2:23:27:16:0e:26:
5d:97:0a:d8:ad:38:f5:e5:db:08:63:a2:7a:5b:09:
dd:f6:10:e6:d9:d5:62:29:8c:c5:0a:f9:a0:8a:61:
fc:4f:87:e1:1f:67:99:da:7e:ef:6b:b8:1d:80:f9:
0e:1a:c8:d5:d8:a4:8c:5a:48:aa:2a:d2:af:a8:5e:
67:a1:3d:ce:31:c6:d3:6a:26:85:73:eb:5b:60:67:
e4:83:fd:1d:37:43:e2:8e:6e:f4:71:57:7a:33:db:
d5:82:f1:15:f0:4d:60:a1:2f:e1:b9:82:50:77:e7:
d6:cd:07:78:ff:9f:c4:cb:70:40:5a:a0:0a:07:58:
c6:48:11:4f:0f:93:a5:cc:73:31:cc:4a:0a:d9:52:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:E9:D5:E6:79:72:25:84:3A:15:5D:6E:53:30:EF:6F:71:58:13
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:66:3f:94:53:58:d0:02:c3:db:78:a4:de:7a:7c:40:3a:
32:a6:84:da:25:34:ca:b2:7c:1c:f5:5d:3d:6a:92:6e:71:a0:
35:77:9b:c6:45:ec:c2:8c:20:3f:9b:7e:5a:74:53:da:1f:27:
9e:ad:1d:d4:04:04:07:5f:00:98:75:61:1a:7a:87:b1:e4:4b:
47:12:08:5b:fd:d9:74:c1:a3:f8:3d:82:d4:a6:e9:95:bb:22:
b0:b5:da:c6:48:59:90:96:77:31:ad:5f:65:15:dc:8e:b8:b8:
53:9e:79:ce:a4:f7:1a:d0:ae:86:a5:21:13:e2:b6:f8:bb:8e:
27:b2:b6:c2:dd:86:2c:91:fc:ec:7e:49:f8:ec:4e:bf:18:2a:
a5:86:ab:e6:7b:ca:20:93:6f:42:c3:e7:85:37:fd:fe:56:20:
29:10:dc:ce:4e:63:b5:a6:1c:6a:62:a2:5b:6b:73:ec:6f:2d:
61:c3:dc:64:0c:f7:e3:1f:4b:f8:47:9b:8c:17:eb:05:67:48:
2f:20:33:28:8d:f6:17:97:a0:0c:e3:1e:e9:f4:5c:d8:b6:a2:
8c:01:be:b1:41:7a:ac:1e:78:d2:e1:c2:7e:1a:5b:29:2b:ed:
ac:83:22:1c:a1:9f:cf:9a:3d:52:ee:ec:6f:08:7a:43:86:f0:
04:af:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:52 2026 by rpki-client