
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: diGaJnCziysjdimTF+8Zdjm2TdosTjl0x2ccH+ODZ1E=
Subject key identifier: 1B:78:CE:33:A1:E2:98:FB:09:FD:39:AA:7B:81:03:32:44:5E:D6:9D
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 01A1280C568D6ECCFE2090D5E9BCB1525688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 1AA1
Signing time: Sat 10 Oct 2026 23:00:59 +0000
Manifest this update: Sat 10 Oct 2026 23:00:59 +0000
Manifest next update: Sun 11 Oct 2026 23:00:59 +0000
Files and hashes: 1: 05rFXFI3A4kfX6r22QyghCwPirk.roa (hash: 8PjiY9BzJB2DkdX2+hxe3msVLY8QoBKmds38yfTHkwE=)
2: 7YhBZ7NArw0eSpGJGzdZL6Xd9LI.roa (hash: 9PtG5SAhmPuIvjkG4xvn789Z3mHnr1quGuZQ4Ri0QLs=)
3: EAabvO0Qnyfx-kVnjrXL2Bf1JN8.asa (hash: rkWEAOLRcpfHubuVeOsl16/pqDaD1BhawQm64Xtilvw=)
4: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: /lpaFeS8Xj7KL9pW/RUc61QTPIz+fCP3bq8ZR8HR7MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:56:8d:6e:cc:fe:20:90:d5:e9:bc:b1:52:56:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Oct 10 23:00:59 2026 GMT
Not After : Oct 11 23:00:59 2026 GMT
Subject: CN=1b78ce33a1e298fb09fd39aa7b810332445ed69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:89:d4:cf:1a:3d:8e:59:8a:72:36:7e:15:
66:d2:9f:48:c7:27:d5:f3:d2:8a:d0:da:60:32:36:
79:f6:ab:32:4d:a4:db:b0:96:93:3f:57:c8:50:8e:
af:47:ae:2a:74:a3:1e:6d:c7:21:26:af:0f:4c:36:
3d:dc:a7:de:fb:6f:3f:72:d1:96:93:53:15:2a:5f:
bb:d8:c5:ca:ff:92:3c:2e:32:d7:cd:02:8d:38:4a:
19:f4:5e:ec:26:d3:ed:c0:90:3a:e2:60:db:87:54:
68:6d:06:97:c2:c5:61:d6:d8:54:0a:e9:90:cc:19:
ac:7f:63:ae:15:b9:eb:70:2e:9b:58:8b:26:59:43:
65:2f:4f:4b:b8:86:65:6c:38:16:f8:d6:07:36:0f:
81:16:1c:cc:ec:ae:9d:f0:4b:ed:ce:d1:b0:68:d8:
38:cb:53:1b:94:28:3b:df:e1:35:79:3e:c6:71:3c:
76:66:2e:32:6c:d6:19:5b:a5:92:76:ab:3a:23:fc:
fd:83:5e:ca:53:ad:fd:5c:0d:e6:4e:08:b4:a3:fb:
c1:f2:aa:1a:fa:48:5e:f1:12:8a:d3:11:a1:0c:69:
f9:33:bc:66:dc:8b:c5:ce:92:de:7c:f9:29:3a:7e:
bc:4b:c8:67:6f:bb:b6:95:d8:ae:28:f4:19:52:a6:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:CE:33:A1:E2:98:FB:09:FD:39:AA:7B:81:03:32:44:5E:D6:9D
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:65:d0:e3:4b:2d:dc:d2:c5:1d:2d:a4:06:00:18:11:e4:a6:
af:f7:2c:53:00:0f:20:1e:2b:74:43:cf:23:17:f9:f3:ea:99:
04:14:bd:ce:2e:61:f0:10:80:f3:0e:44:06:9e:cb:b8:78:7e:
7f:9c:db:82:bf:c5:19:4c:e1:f5:31:d4:3d:0e:6a:8f:3c:b3:
e3:ca:84:48:50:3f:7f:b5:9b:48:6f:36:92:26:d6:28:cb:0d:
34:b2:ff:a3:cd:c9:06:19:54:70:86:a3:93:9d:03:9d:07:02:
4f:1b:bd:eb:f6:4a:f5:4c:4d:c0:c1:d3:8d:3c:db:6e:e3:18:
d5:e5:28:1f:f4:b5:1c:bf:a8:80:ae:6a:53:f5:28:08:b7:5a:
04:9a:37:ff:30:f9:f7:66:7f:63:3a:e1:79:dd:c1:87:22:67:
09:c9:72:ea:74:1a:af:b0:53:a8:96:66:4e:75:46:a7:82:f6:
78:00:4d:61:f7:0c:b9:40:be:36:c5:7a:b8:c2:5e:14:11:7c:
d4:71:1f:99:10:e1:33:a7:26:18:6e:1a:f2:c9:8a:4a:7d:48:
02:cc:f0:39:f2:d5:dc:ed:ac:aa:9c:46:5f:e1:06:14:03:05:
45:ef:c3:86:43:8c:f8:7e:76:3e:44:5a:ca:7b:1b:b0:31:0e:
14:f1:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:24:56 2026 by rpki-client