
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: XxabLhCV55z5tAGz7a2qQNWTDqNreIbMLKdTjMQxyAg=
Subject key identifier: 19:E5:C6:2E:DF:D7:C3:5A:84:25:C6:0F:B2:11:A8:D9:F5:41:B9:71
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019F178C428D2CEF6CC56AD4FB0CC637B731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 08:01:35 +0000
Manifest this update: Tue 30 Jun 2026 08:01:35 +0000
Manifest next update: Wed 01 Jul 2026 08:01:35 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: cKhkCGIx5O8r1xdNuao2wsCShTP3AoV+yiDU4vJwTZc=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:42:8d:2c:ef:6c:c5:6a:d4:fb:0c:c6:37:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jun 30 08:01:35 2026 GMT
Not After : Jul 1 08:01:35 2026 GMT
Subject: CN=19e5c62edfd7c35a8425c60fb211a8d9f541b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:f4:3d:f4:34:6e:9a:f6:7d:6e:a2:39:2f:
47:81:70:bb:e5:43:26:e4:50:85:8c:ca:b7:f7:66:
a3:e8:46:fa:42:c3:c6:65:05:aa:98:13:20:3b:9f:
53:a7:c9:52:31:d6:50:a8:b9:87:05:1a:2f:d7:1a:
46:81:ae:a3:86:36:11:bc:97:87:53:2d:c8:b4:98:
3d:a2:01:44:e5:6c:4d:3c:f5:e2:08:21:9d:26:f8:
37:5c:7c:17:3e:f6:79:8d:ed:90:1d:51:7c:69:bf:
7e:ca:40:97:47:af:d8:de:6e:b6:8e:37:06:87:73:
30:b6:f3:18:94:c1:f0:93:3a:46:30:01:a3:88:35:
33:d7:c1:22:2a:f7:f0:64:60:61:f9:57:10:bf:90:
bb:48:f8:07:e2:a7:98:43:38:a8:d6:fc:bc:bd:33:
eb:95:c1:73:9f:91:c2:f9:3f:e0:ff:67:e6:f6:3c:
cc:b2:19:ba:9b:5b:01:db:a4:40:f3:5f:9f:69:ef:
34:74:07:c8:36:95:11:59:b9:3d:7c:a3:51:be:2b:
3e:3e:09:20:96:d7:fe:28:71:ea:57:50:f0:55:12:
f9:c6:ee:39:14:6a:60:96:e4:67:3f:62:86:bd:3b:
e2:dc:8e:99:98:07:dd:75:0b:f8:db:a4:72:a4:f4:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:C6:2E:DF:D7:C3:5A:84:25:C6:0F:B2:11:A8:D9:F5:41:B9:71
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:9c:b9:79:b2:0c:9e:fe:63:52:8b:a5:78:27:0d:00:25:
1f:2b:9c:bf:92:05:62:13:96:f3:8f:df:b5:ff:72:b3:73:d9:
fd:9e:08:87:94:c5:00:af:f1:64:b5:61:52:07:dd:14:a6:51:
08:11:7e:9f:44:90:73:d7:1c:bd:18:48:4f:c6:5e:25:92:bb:
f5:59:3e:65:20:d0:79:82:49:f5:f2:ad:ec:52:39:76:a1:27:
d8:a5:0d:8c:92:b9:bc:b7:55:e5:98:40:53:a7:19:75:d9:70:
49:89:4a:1c:ac:c4:fe:1f:61:46:af:89:34:fc:db:a4:f1:14:
16:d3:30:3b:63:b7:da:b7:c4:23:31:f8:50:ac:d3:43:5b:ba:
54:9f:2a:29:ea:f2:78:ab:ad:6c:66:2f:60:02:18:f8:aa:54:
48:0a:aa:69:c3:d7:fc:fa:41:33:67:be:2e:d9:92:0a:45:21:
39:96:81:e4:10:70:2e:73:69:72:5c:58:32:ae:87:03:db:e0:
0e:a6:bc:06:01:4a:68:51:d1:a0:4d:8c:99:78:80:08:db:5e:
d8:51:c2:f9:16:f4:ff:75:cd:5e:cc:d2:62:fc:da:7d:e1:bb:
54:c6:3d:16:ff:e6:f6:b8:c8:be:a5:a1:ee:13:ba:c0:e4:fc:
bf:6c:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:20 2026 by rpki-client