Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: Fz4Q8TXMoKW3/j+G5N011NbjQj2+Ui9UmBJG0ZNj2R4=
Subject key identifier: D8:43:8C:08:0E:88:EF:62:38:D6:E4:AF:20:ED:4E:3F:4C:DE:E1:DE
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019D2816CFD4504AE4B53252FD72CCFA715A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: +f0wK9JlNX9wS/7VWs8jMljOePC8i1VEVfrRnIEx1SI=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cf:d4:50:4a:e4:b5:32:52:fd:72:cc:fa:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=d8438c080e88ef6238d6e4af20ed4e3f4cdee1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:d8:35:5b:bb:9c:be:1d:26:6e:cc:6e:f4:
ff:d2:76:07:60:f7:4e:dc:a4:c5:ce:44:c2:e4:ab:
3c:23:16:2b:da:63:75:5b:b9:bd:f2:5a:92:7a:b2:
59:62:2f:ac:15:3f:4f:be:dc:28:52:41:3d:52:aa:
10:22:00:9f:e7:df:25:0a:61:4a:60:d1:62:00:e7:
df:48:88:97:b3:78:b8:7d:e6:0a:e5:8e:14:fc:dc:
9c:5b:87:92:2c:09:c0:f6:ee:07:c3:ea:7d:52:d9:
58:a3:4b:c7:84:24:65:67:84:64:de:75:ed:2a:a3:
cb:de:45:40:fb:e4:c2:48:c0:28:0d:e8:51:1e:dd:
14:5a:21:8b:9a:fd:92:7a:3c:b0:ac:f5:b3:a8:38:
cf:87:9c:6c:95:8e:ac:06:1f:bf:7d:10:42:62:2b:
a2:2b:0a:94:e7:f8:e7:5b:59:74:7a:53:72:0d:a5:
d1:f4:fa:96:fd:dc:38:97:6d:8b:f5:9a:13:e7:22:
3d:9c:06:5a:d7:85:ed:8c:47:47:99:49:30:9e:e3:
3b:41:e9:5a:8f:65:02:c7:44:a1:e7:62:ad:4c:74:
49:1e:06:55:5f:21:0e:5e:dc:e5:70:c9:1e:eb:f2:
6a:e6:20:bb:22:ac:a2:e8:6c:ae:5f:c3:a5:1d:e3:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:43:8C:08:0E:88:EF:62:38:D6:E4:AF:20:ED:4E:3F:4C:DE:E1:DE
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:34:0f:79:b6:e5:c5:82:5e:fa:7e:fb:52:89:75:35:0d:d7:
40:d0:70:1c:69:47:78:4c:2e:95:8a:c6:bb:05:e6:14:08:0f:
b5:47:e9:74:8c:22:80:85:56:12:86:0e:60:28:bf:f9:49:63:
f3:e4:18:28:36:88:f6:b7:6f:93:2c:07:4d:80:58:fd:d9:21:
99:16:10:a4:e1:fe:43:75:53:53:4e:49:15:e2:9f:6f:b8:9d:
01:0d:ab:af:73:0d:7f:56:25:96:98:84:c8:c7:fa:ca:41:f3:
80:2b:b8:2e:28:29:3a:d7:e1:ad:d9:f0:44:67:82:11:3c:a2:
85:41:6c:80:7e:fd:c4:c2:55:de:74:0e:7b:58:54:d1:3d:45:
9f:da:29:b9:66:28:eb:8a:e3:27:60:54:01:27:8e:11:eb:83:
69:04:78:85:98:c2:70:ab:e3:f5:56:96:fc:c5:06:9b:4d:e5:
9f:70:d2:6b:58:6b:43:c4:0d:9e:10:0c:27:e1:d8:69:25:f7:
f2:ca:56:d4:9a:7d:37:4c:01:a9:8d:83:ac:b0:77:e0:31:ed:
4d:95:76:14:bb:93:83:a8:bc:e3:b8:d3:3c:7e:57:e3:a8:ff:
d2:41:72:8b:3f:c4:f1:c7:c4:22:55:1c:03:25:0a:eb:8a:2d:
32:f5:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:30 2026 by rpki-client