Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: u6s2d6WNCAZrqKe3fbJMEbr4QwJydQc3ISNYPFg8b6Y=
Subject key identifier: B5:B4:DA:73:D0:39:3B:F3:A7:E6:BC:D2:4F:E0:15:AE:06:68:68:38
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 01A0CAEB75AA628851F75A33E46E1C55ECD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 21:00:23 +0000
Manifest this update: Tue 22 Sep 2026 21:00:23 +0000
Manifest next update: Wed 23 Sep 2026 21:00:23 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: xxUb5/f4Pj2mPw9fNASHKYIRHhYJ7xoHm3gq7yAnjS4=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:75:aa:62:88:51:f7:5a:33:e4:6e:1c:55:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Sep 22 21:00:23 2026 GMT
Not After : Sep 23 21:00:23 2026 GMT
Subject: CN=b5b4da73d0393bf3a7e6bcd24fe015ae06686838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:7d:d3:19:62:6d:c1:91:35:28:81:eb:72:
df:06:4f:13:9d:33:48:5e:9c:f4:cb:52:30:d1:11:
ae:25:fa:74:b1:23:bf:3e:58:df:f2:3d:b1:ec:b4:
02:eb:8d:89:d6:d9:76:01:64:7c:d0:4f:dd:c8:b2:
a3:d7:53:6c:a3:27:dd:78:14:01:01:fa:ed:a1:b5:
0d:c4:82:c2:eb:2d:2e:c8:45:31:71:78:11:63:74:
06:08:48:32:9b:3b:e4:95:98:3a:18:05:ce:d7:91:
0d:ab:81:36:1b:15:99:2c:83:2b:df:82:03:11:da:
44:c1:af:51:0e:d4:04:f5:fb:15:55:ab:a4:ed:2d:
ac:6e:ef:40:d6:c9:37:09:6a:73:17:52:70:db:ce:
7b:36:04:1d:24:e0:74:78:a0:b7:6b:85:be:4e:96:
56:74:c5:16:41:98:32:3e:a3:f8:37:a5:4a:1f:10:
4c:55:84:d2:78:5f:1b:35:09:50:bf:0e:0f:df:9d:
ab:86:d3:b0:8e:5e:c2:64:3a:5b:4a:6c:86:67:13:
40:d3:3b:30:bc:4a:14:7e:c0:79:69:0a:af:db:31:
3f:80:70:b4:8a:f7:f1:06:8a:63:26:b8:01:15:51:
af:6d:90:5f:77:99:5a:e5:ee:17:59:e8:07:80:c2:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:DA:73:D0:39:3B:F3:A7:E6:BC:D2:4F:E0:15:AE:06:68:68:38
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:ea:ea:7f:90:87:d4:3e:a1:57:ea:ff:a5:8d:d8:26:73:
45:45:ae:48:f8:57:96:77:08:f4:16:5b:97:d1:b4:02:07:7f:
fe:68:64:ce:a7:75:63:86:da:07:fb:e0:19:5b:5f:48:9c:b0:
7d:97:ed:a6:41:90:c5:ae:e7:22:65:94:27:a1:cc:82:b0:1d:
02:ab:68:31:69:b1:ce:a5:96:8f:56:43:ca:2f:4b:bd:ae:c5:
cc:b9:b9:60:45:1e:d0:78:69:65:5f:a4:f1:db:a3:92:c6:6d:
f1:dc:0a:ec:a9:41:98:27:7f:e3:cc:51:13:d9:b7:ce:bb:50:
45:c7:18:fc:8e:d1:d1:37:ce:48:e6:c9:4a:b8:56:1c:92:82:
41:88:69:c3:00:49:a3:4e:05:6e:86:84:aa:8c:55:4b:9e:65:
77:bd:1e:87:21:34:9d:23:af:e5:cc:a9:7f:fd:76:d8:7d:c3:
89:8d:fa:4d:87:07:f3:11:4d:c5:68:f3:1c:40:c8:e5:70:e7:
12:5e:58:1a:d6:bf:1e:70:2e:e8:2e:f9:d6:c3:16:8e:57:72:
ea:e2:c3:7a:54:3f:40:ea:0d:01:d0:6b:91:02:32:2e:3a:1a:
70:6d:cb:2e:2f:85:bb:c3:eb:f0:4c:b9:36:35:c4:73:65:48:
0c:7f:ba:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK63WqYohR91oz5G4cVezSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjYwOTIyMjEwMDIzWhcNMjYwOTIzMjEwMDIzWjAzMTEwLwYDVQQD
EyhiNWI0ZGE3M2QwMzkzYmYzYTdlNmJjZDI0ZmUwMTVhZTA2Njg2ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dh90xlibcGRNSiB63LfBk8TnTNI
Xpz0y1Iw0RGuJfp0sSO/Pljf8j2x7LQC642J1tl2AWR80E/dyLKj11NsoyfdeBQB
AfrtobUNxILC6y0uyEUxcXgRY3QGCEgymzvklZg6GAXO15ENq4E2GxWZLIMr34ID
EdpEwa9RDtQE9fsVVauk7S2sbu9A1sk3CWpzF1Jw2857NgQdJOB0eKC3a4W+TpZW
dMUWQZgyPqP4N6VKHxBMVYTSeF8bNQlQvw4P352rhtOwjl7CZDpbSmyGZxNA0zsw
vEoUfsB5aQqv2zE/gHC0ivfxBopjJrgBFVGvbZBfd5la5e4XWegHgMJVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW02nPQOTvzp+a80k/gFa4GaGg4MB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPLq6n+Q
h9Q+oVfq/6WN2CZzRUWuSPhXlncI9BZbl9G0Agd//mhkzqd1Y4baB/vgGVtfSJyw
fZftpkGQxa7nImWUJ6HMgrAdAqtoMWmxzqWWj1ZDyi9Lva7FzLm5YEUe0HhpZV+k
8dujksZt8dwK7KlBmCd/48xRE9m3zrtQRccY/I7R0TfOSObJSrhWHJKCQYhpwwBJ
o04FboaEqoxVS55ld70ehyE0nSOv5cypf/122H3DiY36TYcH8xFNxWjzHEDI5XDn
El5YGta/HnAu6C751sMWjldy6uLDelQ/QOoNAdBrkQIyLjoacG3LLi+Fu8Pr8Ey5
NjXEc2VIDH+6Hg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:43:10 2026 by rpki-client