Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier: cWB66/8obw1CgAXBFsJBxsOH9bhzIG/fw1WWI5zMi2g=
Subject key identifier: 38:AA:D5:53:3E:54:5D:65:4F:D1:D3:D4:ED:83:C8:8B:88:33:C0:64
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer: /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial: 048CCC3A6C7FE12922701DB2DEAF302A0BFD84B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number: 0115
Signing time: Thu 29 Oct 2026 23:19:41 +0000
Manifest this update: Thu 29 Oct 2026 23:14:41 +0000
Manifest next update: Sat 31 Oct 2026 03:06:41 +0000
Files and hashes: 1: AS11967.asa (hash: qrZnTIDpiG9un0qsZjyzIzrI+E4EXxLiTHN5tO2HHvI=)
2: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: nxh8eLtAlSxQPgL2UHW+XszYz4jSB7CT4QFGeH3JXLs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 03:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8c:cc:3a:6c:7f:e1:29:22:70:1d:b2:de:af:30:2a:0b:fd:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Validity
Not Before: Oct 29 23:14:41 2026 GMT
Not After : Oct 31 03:06:41 2026 GMT
Subject: CN=38AAD5533E545D654FD1D3D4ED83C88B8833C064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:18:4f:b7:43:a0:e8:c2:3d:56:38:a5:f4:
7a:92:6b:15:d1:b8:cf:69:0d:ac:24:ac:e9:4a:8e:
aa:37:50:f0:8c:93:e4:b3:f1:2a:ee:51:d3:5c:ed:
14:75:8a:f4:e2:e8:34:ee:5a:c0:d5:7b:9a:d6:45:
02:63:b0:22:e3:ce:22:01:bd:f7:74:ba:2c:d5:f5:
4d:92:e6:4f:8c:82:59:d4:81:76:4d:5d:31:a5:44:
40:18:0a:7c:99:6a:39:c0:c4:9c:df:65:fd:15:1b:
cc:46:a7:ba:08:53:5b:01:bf:5d:ba:b5:a2:a0:2f:
d3:2d:4e:aa:2e:12:de:5f:9d:4d:8a:c8:85:3d:82:
41:5c:9d:76:12:4e:27:73:6f:3c:71:a4:7b:5c:39:
6e:b4:f8:dc:68:7c:3c:73:19:d5:a3:1e:b3:33:0a:
44:c1:aa:63:13:a9:5b:b3:30:2d:c9:d8:82:dd:30:
bb:32:22:29:e0:6d:e5:d7:1f:dc:70:a3:b6:9a:29:
0c:46:15:d1:96:3e:e0:2e:15:82:b3:9e:13:2c:80:
a2:46:d6:de:6d:84:60:04:ed:58:14:14:de:2f:4e:
5d:3d:88:1b:a6:ba:b2:df:df:71:67:1e:d8:a8:0c:
06:ff:36:7b:53:79:db:40:fa:80:12:e7:cd:df:a6:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:D5:53:3E:54:5D:65:4F:D1:D3:D4:ED:83:C8:8B:88:33:C0:64
X509v3 Authority Key Identifier:
keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:47:02:85:bb:4c:66:34:15:ca:60:3f:a5:6c:9d:13:94:51:
99:a7:b9:92:37:f5:41:a3:93:6b:e9:9a:e3:b9:bc:ca:0d:1a:
fd:70:fb:b3:12:c9:d8:21:98:35:cb:16:5b:2c:7e:28:32:55:
8b:89:80:c7:62:92:7d:14:01:9e:89:21:12:59:fb:6f:12:de:
87:a6:90:33:0b:d0:60:56:60:ae:c4:37:cd:b4:d7:f3:c1:31:
98:c9:90:b5:32:bb:9e:65:63:7a:7c:52:96:05:f5:01:3a:5e:
fa:17:b4:b1:bb:31:6d:a5:9b:cb:2b:cf:03:d7:d1:6f:8a:8c:
c9:8a:1f:91:4d:79:20:db:ed:ea:34:97:d4:b2:25:5d:38:f7:
68:86:68:09:68:43:53:a5:20:2e:43:a1:37:bb:c0:ea:ed:1f:
ea:f7:f8:5f:24:49:97:61:ed:f4:b5:c0:0a:a2:d0:32:d6:a5:
23:3b:14:2a:0a:ed:a4:69:ab:4b:2f:65:92:49:04:cc:56:34:
87:7c:c9:25:5d:c7:ed:5a:50:a4:95:a9:6b:7b:15:67:6d:69:
3f:8e:2b:18:b1:ab:f7:f7:28:5e:b1:56:2d:1c:44:f9:ff:bd:
cd:b6:44:83:e2:16:c3:fb:db:fd:27:be:bc:54:d1:72:14:7d:
7f:f2:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:02:49 2026 by rpki-client