Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier: zCIfgbO6wIqvTpltc3ABOAdd0q4YfvIwEuNk1CXVMqU=
Subject key identifier: 3E:B0:40:EE:C5:0E:9F:F3:0B:3F:46:9E:BD:57:9A:81:C0:A9:A2:93
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer: /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial: 085CB89E306896105BD592811F44EB4737C3245A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number: 20
Signing time: Thu 30 Apr 2026 08:04:09 +0000
Manifest this update: Thu 30 Apr 2026 07:59:09 +0000
Manifest next update: Fri 01 May 2026 11:22:09 +0000
Files and hashes: 1: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: GaolhY2TLOwwgzyAIU/C8e3rN1S90TomKOOq1dQcUuI=)
2: AS11967.asa (hash: 3G71/8YzgM4CTftmey2qsl+DI5Cry2OneqPjAmyn8TM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5c:b8:9e:30:68:96:10:5b:d5:92:81:1f:44:eb:47:37:c3:24:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Validity
Not Before: Apr 30 07:59:09 2026 GMT
Not After : May 1 11:22:09 2026 GMT
Subject: CN=3EB040EEC50E9FF30B3F469EBD579A81C0A9A293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:64:02:a6:fd:e7:79:f9:fd:20:2a:5a:93:
50:c5:5a:7f:33:91:b9:a5:81:c2:f1:19:1b:f7:9f:
5f:df:0d:cc:46:41:9b:94:77:d2:cd:bd:28:4e:e3:
8c:84:02:cf:93:ff:bc:eb:f2:1b:c1:b8:d4:cb:3b:
0e:0f:b7:0c:57:f3:5b:d9:ca:f8:bc:22:36:75:07:
25:04:f5:b5:11:bc:6d:05:03:7d:5d:e7:cc:c9:82:
40:2a:9e:f6:c4:0b:ee:b2:e8:b7:46:da:09:9a:21:
af:39:ca:64:26:d1:59:71:16:c4:89:6c:53:a7:08:
f2:30:13:7a:f8:5c:c6:12:c1:e4:aa:c7:f6:93:ae:
f5:b3:8f:11:d1:6f:f4:a0:1a:91:a8:cb:11:cd:a1:
f0:c5:38:09:a1:7e:e6:43:c5:92:75:2d:66:bf:f4:
55:6d:75:07:f0:8d:04:f7:9b:2e:1d:4b:06:e6:33:
7a:e5:39:ab:43:4c:f6:f4:1a:99:0c:b1:7c:5e:4d:
01:70:d2:2e:69:9d:2b:1b:c6:50:d2:fb:5f:46:fa:
f7:52:54:cb:dc:22:93:0b:2e:be:ff:8b:7d:b4:2f:
13:6e:ac:6d:ac:2d:7f:69:c3:6b:a4:bb:46:b3:5e:
c5:bf:1b:ac:89:a2:41:ca:ad:fe:18:5d:d7:bf:e7:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:40:EE:C5:0E:9F:F3:0B:3F:46:9E:BD:57:9A:81:C0:A9:A2:93
X509v3 Authority Key Identifier:
keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:d2:e1:8e:8f:bc:2d:2a:86:6e:5b:49:14:97:4c:12:0b:
d5:d6:a8:46:62:fb:5e:5f:5d:f0:88:f0:78:02:a0:a0:85:4c:
a6:45:1e:24:e2:2e:12:6b:11:08:15:70:8a:06:b6:3b:3d:71:
68:cd:07:8f:8f:da:91:81:3f:71:19:74:14:c2:12:63:c5:9b:
0f:ce:6e:a9:74:b2:47:79:e2:b0:35:a8:dc:be:db:17:e4:84:
c6:8f:41:34:64:18:c0:2b:f3:82:a3:60:91:4d:5a:01:28:57:
a8:57:16:ee:9a:01:b6:83:d8:cf:cb:07:42:8b:79:95:3e:c4:
f8:0c:c1:17:14:80:84:77:0e:3e:83:ee:50:56:8c:4a:aa:c0:
fc:ca:a3:5f:bc:08:6d:ab:6e:51:78:43:fd:ae:6d:d9:ad:e5:
11:41:b5:03:d9:bd:37:8a:69:ea:ca:d4:47:bf:f4:66:77:8b:
cf:7f:20:dc:e5:ce:39:b6:eb:d0:b3:75:c7:e1:39:10:bb:93:
48:d7:67:a4:7a:8a:9e:bf:a1:3c:37:34:5b:7a:1c:e8:9f:6f:
ec:ee:ff:d4:2b:ef:b0:8b:0e:95:f9:cf:17:06:65:5d:e3:cc:
47:63:af:c3:e8:d6:49:ce:89:29:a3:2a:35:d9:5a:21:3d:d1:
7c:60:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:46 2026 by rpki-client