Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: ysUQIBSjWF+GF9ppYJiR881fCLIWs6m4YksXiJ2qPSc=
Subject key identifier: C5:61:68:7E:E6:1B:4F:E1:41:CB:42:73:74:75:9D:A6:71:10:1B:35
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 01A0013826A498F4851219B20872673F0920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 17:00:52 +0000
Manifest this update: Fri 14 Aug 2026 17:00:52 +0000
Manifest next update: Sat 15 Aug 2026 17:00:52 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: KGLQmbYcAz2EWVV7IMLXDiy5gmEYFb5RLmcKzfMuFQc=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:26:a4:98:f4:85:12:19:b2:08:72:67:3f:09:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Aug 14 17:00:52 2026 GMT
Not After : Aug 15 17:00:52 2026 GMT
Subject: CN=c561687ee61b4fe141cb427374759da671101b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:f0:0c:c9:72:01:a4:0d:51:71:20:47:86:
e2:e4:f8:56:92:10:45:b8:c1:ee:c6:ca:a0:7c:4b:
2f:65:ac:4e:c9:d1:29:9d:26:24:8d:ef:ee:6b:fd:
d0:b6:e9:fe:40:6f:4f:61:a0:0d:de:6f:ff:21:62:
42:89:3e:ae:6d:e2:97:ed:3d:37:59:54:3a:3e:be:
3b:2c:22:8a:29:b7:1b:af:7f:0c:27:c1:be:12:c8:
da:83:0e:46:b0:14:39:6f:be:6a:7c:a7:2a:6d:b5:
7b:49:3e:04:63:5e:7b:98:54:4d:2b:bb:5e:e5:15:
41:7b:44:d6:69:ef:33:06:2b:c4:80:04:fe:6e:f0:
2a:6f:1f:89:15:9c:4e:6f:66:5a:0e:38:cf:59:19:
d6:af:86:c7:75:59:5e:ab:4a:3f:8a:61:7a:3e:76:
94:ce:5b:ec:12:07:42:b4:d0:d2:c3:aa:43:58:87:
93:26:aa:c3:ee:72:56:64:46:58:3e:9f:40:48:3d:
cc:26:37:a7:a2:d8:8f:76:94:80:38:55:71:e0:3d:
a9:03:db:ee:36:5f:20:7e:18:fa:f1:3f:3f:de:71:
ef:fe:2e:7b:9e:99:a1:99:1b:33:b1:a3:df:38:e8:
f5:88:21:75:9b:d1:6d:8e:cb:0c:a8:80:db:e2:38:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:68:7E:E6:1B:4F:E1:41:CB:42:73:74:75:9D:A6:71:10:1B:35
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c6:9d:e5:10:9b:19:e8:70:27:6f:33:7c:da:f6:c5:ae:be:
b8:98:c5:a0:2a:f7:c8:fd:6c:4a:32:9c:b2:02:26:78:52:bf:
2c:5d:19:02:cd:b0:da:37:af:9c:75:1d:0a:86:41:31:28:52:
cf:b9:32:75:5e:8f:66:e2:6b:15:57:04:65:ed:ac:8a:d5:4c:
15:aa:25:fd:30:13:6f:c9:b0:c9:bb:9b:30:3b:08:92:60:6c:
ba:11:d1:79:d7:a3:c6:da:b2:e3:b6:40:34:7f:76:62:f2:df:
7d:9d:8f:cc:03:dd:89:00:7d:eb:00:af:87:68:78:7f:19:ec:
ca:64:c2:40:d9:bb:61:8c:5a:07:06:e1:a6:db:4d:a2:66:5f:
79:7a:d2:34:e3:40:d1:97:49:01:68:5a:b1:b7:bf:90:06:0d:
c9:67:a0:70:46:d0:80:53:dc:bb:b6:e3:e0:37:41:3e:d0:ce:
54:ed:60:37:f9:44:23:fc:cf:da:cf:cd:f8:c0:c1:55:4d:68:
4d:7e:c8:b5:93:d5:b6:0f:3e:f5:fd:70:94:46:16:9d:e5:ce:
9d:f3:00:d4:d6:5a:e1:54:7d:eb:54:ec:67:2e:23:f2:93:6d:
6f:d9:ee:aa:19:1f:2a:16:ee:c9:65:86:06:63:23:39:56:0c:
4b:f4:04:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOCakmPSFEhmyCHJnPwkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGIyMmQyNDliNjY2M2Y5ZmEzNGIxNzYyZDI1ZmZkOWZi
M2ZlZDMwHhcNMjYwODE0MTcwMDUyWhcNMjYwODE1MTcwMDUyWjAzMTEwLwYDVQQD
EyhjNTYxNjg3ZWU2MWI0ZmUxNDFjYjQyNzM3NDc1OWRhNjcxMTAxYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUvwDMlyAaQNUXEgR4bi5PhWkhBF
uMHuxsqgfEsvZaxOydEpnSYkje/ua/3Qtun+QG9PYaAN3m//IWJCiT6ubeKX7T03
WVQ6Pr47LCKKKbcbr38MJ8G+Esjagw5GsBQ5b75qfKcqbbV7ST4EY157mFRNK7te
5RVBe0TWae8zBivEgAT+bvAqbx+JFZxOb2ZaDjjPWRnWr4bHdVleq0o/imF6PnaU
zlvsEgdCtNDSw6pDWIeTJqrD7nJWZEZYPp9ASD3MJjenotiPdpSAOFVx4D2pA9vu
Nl8gfhj68T8/3nHv/i57npmhmRszsaPfOOj1iCF1m9FtjssMqIDb4jhCBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVhaH7mG0/hQctCc3R1naZxEBs1MB8GA1UdIwQY
MBaAFARLItJJtmY/n6NLF2LSX/2fs/7TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEt
NjM3M2QzNmNlZWY2LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEtNjM3M2QzNmNlZWY2
LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsad5RCb
GehwJ28zfNr2xa6+uJjFoCr3yP1sSjKcsgImeFK/LF0ZAs2w2jevnHUdCoZBMShS
z7kydV6PZuJrFVcEZe2sitVMFaol/TATb8mwybubMDsIkmBsuhHRedejxtqy47ZA
NH92YvLffZ2PzAPdiQB96wCvh2h4fxnsymTCQNm7YYxaBwbhpttNomZfeXrSNONA
0ZdJAWhasbe/kAYNyWegcEbQgFPcu7bj4DdBPtDOVO1gN/lEI/zP2s/N+MDBVU1o
TX7ItZPVtg8+9f1wlEYWneXOnfMA1NZa4VR961TsZy4j8pNtb9nuqhkfKhbuyWWG
BmMjOVYMS/QEqw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:06 2026 by rpki-client