Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: xpZ1xJaUkv3uNDVBzL0L5AiWOnhZmZdSP2rCAQOnFac=
Subject key identifier: 08:A4:3A:56:3A:F8:F9:89:BA:CD:38:42:3C:15:E3:37:FA:FE:E7:F2
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 01A1DB385CF60918ED5B80B91C48A70E6027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1AFE
Signing time: Sat 14 Nov 2026 18:01:06 +0000
Manifest this update: Sat 14 Nov 2026 18:01:06 +0000
Manifest next update: Sun 15 Nov 2026 18:01:06 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: mqi9ATwQwtdu1Zf+4g5Ub72g4EBu8v2WiA2cRuJEUFA=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:5c:f6:09:18:ed:5b:80:b9:1c:48:a7:0e:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Nov 14 18:01:06 2026 GMT
Not After : Nov 15 18:01:06 2026 GMT
Subject: CN=08a43a563af8f989bacd38423c15e337fafee7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:d2:72:a3:23:ad:cb:24:71:f2:d0:38:0d:
5f:74:7e:d5:be:f9:85:d2:22:dc:a7:d7:23:ca:c6:
70:62:8c:d3:2f:25:e4:18:19:22:48:36:d1:6a:7f:
8b:4d:0f:d8:cc:09:39:64:cb:bd:f3:f1:24:dc:33:
26:c5:52:d3:d6:10:80:c3:27:86:0c:c3:21:f7:64:
db:59:a5:65:5e:f4:89:6d:56:4b:7f:d6:e2:46:95:
a0:c8:54:19:5f:8e:8d:f1:c1:d0:ac:d3:30:67:49:
d4:71:2d:1d:86:12:c8:5e:e3:ad:95:0d:23:f5:3f:
3c:44:38:9f:01:09:84:ea:40:fd:ec:4c:a7:9f:89:
5a:17:26:c2:7a:44:fa:cf:2a:58:ca:ec:60:10:f8:
9b:76:78:cb:e1:57:f7:f6:01:a8:08:3d:0b:26:52:
21:73:e3:98:b1:8a:96:4b:eb:e1:7d:4e:87:54:91:
7d:d5:cf:cd:60:41:f9:05:34:a3:76:5a:0e:34:3e:
c9:62:b2:2c:71:cf:f9:30:d9:59:d0:6e:cb:3f:5a:
27:b1:aa:f0:d2:23:82:48:19:39:f0:12:de:3f:20:
fd:83:4f:4a:fb:f3:6d:bf:26:84:60:2f:97:8b:7e:
58:3b:8d:20:4e:4b:0f:8e:8f:30:20:9b:b5:83:14:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:3A:56:3A:F8:F9:89:BA:CD:38:42:3C:15:E3:37:FA:FE:E7:F2
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:e9:64:65:ec:b9:2d:fc:8b:a4:f1:a8:92:58:7b:cb:70:
a1:e8:00:a0:cd:0a:46:cf:8d:1b:9e:17:07:70:fe:65:b2:e4:
b1:e0:41:38:8e:7b:be:c7:a6:69:75:6e:e4:ee:a3:d5:ae:d7:
ef:c6:10:cf:90:cd:35:9a:1b:28:b3:59:50:22:13:77:1f:74:
a5:3b:ad:e1:d2:ef:ae:3d:60:db:22:31:48:18:6e:ea:7b:75:
fb:1a:ed:b5:64:b2:da:08:f2:64:de:f4:33:2f:a0:91:26:76:
0c:17:49:6b:e9:43:eb:eb:6d:b0:3c:7e:c4:80:88:f8:81:4c:
35:a5:bc:86:97:47:de:96:b6:e3:f7:a0:98:00:47:5a:e3:d3:
66:6f:ab:94:25:9d:b4:86:25:f4:6d:7c:a5:83:17:e6:f7:63:
ea:9c:9e:18:94:f2:3b:7c:df:82:e9:4f:8b:e6:72:41:7d:d6:
40:45:1b:04:93:4e:32:33:8d:fa:4f:9d:ae:2c:79:78:9a:c0:
4d:6f:f9:b9:26:29:74:33:38:9c:3f:a0:d5:6f:69:0b:17:e7:
07:57:53:b6:af:b6:5e:4c:ff:35:96:ad:e4:eb:4c:a1:6a:d9:
28:7f:d4:88:e3:28:ea:01:3c:1d:8d:a4:44:11:79:29:b4:24:
8f:5d:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:50 2026 by rpki-client