Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: zDxaj3FhxmLQVW9viyOSWPmTKBuBjEsxNczR94Sjh2M=
Subject key identifier: 46:D7:93:E8:FB:A0:69:62:FB:4C:9C:0D:AD:B7:50:F5:8E:29:BB:05
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019D3A1C36DB90FB0C4797201B716056069E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 15:00:20 +0000
Manifest this update: Sun 29 Mar 2026 15:00:20 +0000
Manifest next update: Mon 30 Mar 2026 15:00:20 +0000
Files and hashes: 1: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (hash: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8=)
2: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (hash: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4=)
3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: Za////kmaGT05F+DLDeaUgn3WxN4TTWc6O6BU/yT/ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:36:db:90:fb:0c:47:97:20:1b:71:60:56:06:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Mar 29 15:00:20 2026 GMT
Not After : Mar 30 15:00:20 2026 GMT
Subject: CN=46d793e8fba06962fb4c9c0dadb750f58e29bb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:a8:6a:00:23:43:62:a5:6d:65:23:87:b6:
e3:b5:cc:92:d6:ab:e3:8a:52:b9:88:83:27:37:ce:
82:00:53:f8:69:55:c5:0f:f2:2b:f6:5b:ae:47:2e:
e3:5d:ef:d4:14:1c:8b:d9:c0:07:40:40:45:39:fb:
e5:da:e1:85:a6:f2:e9:88:c3:80:8d:fc:96:44:5b:
39:8a:b7:61:65:d7:23:89:f1:1c:68:5c:d8:73:4d:
56:6f:8c:81:e0:72:4f:a3:2a:ec:8a:c7:2c:a5:85:
ec:f0:70:f8:92:12:c9:3d:93:90:18:c7:eb:f0:3b:
fa:72:ba:75:0a:80:ae:69:06:e5:fa:33:44:4a:03:
23:36:8e:ac:91:37:52:de:79:37:79:1a:85:91:0d:
4a:df:b4:06:59:76:ef:5e:c2:9b:da:ed:3d:1d:40:
c1:3d:46:a8:d0:6e:0c:5c:e5:b4:bf:03:0d:13:76:
b4:16:13:48:af:94:00:fc:bb:fa:dd:f2:a5:b6:58:
96:bb:b5:5a:54:84:3f:cd:2d:92:de:5f:f0:47:34:
ac:a9:8a:ad:17:65:4a:a4:30:e6:04:3f:3e:7f:68:
a7:92:b0:eb:e9:74:d0:d4:07:38:5d:89:52:3f:ec:
74:ca:b4:05:6a:88:1c:b4:c0:ee:f0:f4:67:f8:11:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:93:E8:FB:A0:69:62:FB:4C:9C:0D:AD:B7:50:F5:8E:29:BB:05
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:d4:65:46:81:8a:59:66:8b:f3:53:f6:91:5d:c1:b3:a0:
8c:ec:2f:ca:9e:aa:81:80:ba:af:9f:42:e2:7c:b4:d3:26:e5:
b3:c9:27:50:c0:f1:43:16:f2:fd:ac:08:6b:ad:10:93:00:f4:
b0:47:5c:5a:db:6d:ca:60:67:15:cc:57:07:b1:93:d5:a4:15:
f2:22:68:8b:d3:9e:b0:71:ff:16:98:1b:f6:eb:fc:43:ac:ab:
56:fd:e7:07:af:07:c4:6a:58:61:87:da:cf:ec:29:ac:bc:21:
73:3d:5f:5c:16:64:ee:86:93:75:71:07:cf:ca:8d:ed:cc:5e:
fc:1c:91:12:3b:49:20:aa:af:97:72:c3:32:d7:b6:d3:b6:21:
7d:2a:3a:0d:df:8b:73:ad:8d:19:f3:f6:db:12:49:a3:a1:95:
04:1d:0d:1d:ad:cf:e4:40:ad:6c:de:3c:9f:38:6a:de:36:02:
d9:3a:79:f4:b0:cc:cf:c3:f9:53:04:10:0e:d2:6e:e6:03:05:
34:f0:66:90:59:68:4f:cb:99:0f:c2:fb:dd:ee:14:88:7e:86:
02:86:ac:f4:ea:f5:65:20:5b:09:16:1c:43:ca:0c:b1:d9:34:
0a:bf:e4:b8:6b:b3:f5:16:6f:e6:83:95:c2:b1:7d:fb:71:2c:
58:ba:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:39:05 2026 by rpki-client