Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: zaDJikhT/dLECBcgJRLacUGm2nGtonMFsZXX4epJOpI=
Subject key identifier: E6:5D:FF:E9:96:49:61:44:C7:13:8A:74:44:BC:58:C7:4E:E5:4D:6E
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 01A0D0B71075014EC27A49C5A825B52FBA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 00:00:53 +0000
Manifest this update: Thu 24 Sep 2026 00:00:53 +0000
Manifest next update: Fri 25 Sep 2026 00:00:53 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: r57OMgkXSoRTsW6x7wvP9KOP6B5w5Y8QStVpO05SxeE=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:10:75:01:4e:c2:7a:49:c5:a8:25:b5:2f:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Sep 24 00:00:53 2026 GMT
Not After : Sep 25 00:00:53 2026 GMT
Subject: CN=e65dffe996496144c7138a7444bc58c74ee54d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:e7:15:aa:65:21:d7:59:ae:7a:96:64:a1:
58:39:57:ea:b7:58:2d:46:ac:ba:64:79:09:c3:1b:
e2:a9:7e:3a:db:29:8c:fc:be:3d:41:09:61:da:65:
b1:9c:79:2e:4b:ea:b6:d3:61:d0:85:ba:f7:f0:68:
c0:5c:38:eb:77:3b:1a:6e:3d:47:30:e3:38:72:fc:
6a:f1:c6:c8:90:07:b5:71:c4:57:7c:24:d0:42:8a:
79:e0:9c:43:12:76:16:bf:be:44:ee:43:3b:c0:37:
1f:b5:ad:39:51:6b:30:4f:bd:71:59:2a:05:02:58:
2c:ab:78:23:bf:00:61:cf:69:a4:a5:cd:20:31:78:
2f:3a:e9:ef:67:90:9e:13:22:17:c2:9d:94:4b:5b:
3a:c8:f0:c2:9f:cb:a3:8a:7f:2b:42:7a:34:f2:17:
a1:63:59:66:07:b1:d6:82:66:c3:1c:b4:eb:a9:d1:
17:68:61:f5:0b:ae:7b:d5:70:af:f7:81:c5:13:02:
05:e6:0a:73:e2:69:a1:7f:b0:86:36:05:f5:72:d1:
52:95:06:22:f5:96:de:78:43:47:55:92:c5:91:07:
40:89:de:95:22:cf:3b:6e:64:ec:2b:bd:2c:d8:c5:
f4:48:a3:26:88:4a:b8:57:ef:a4:ae:c5:81:78:4c:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:FF:E9:96:49:61:44:C7:13:8A:74:44:BC:58:C7:4E:E5:4D:6E
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:a9:50:72:a4:22:35:23:62:6b:1c:f6:b2:30:64:0d:b1:
65:14:c3:3c:18:90:31:47:d1:48:ab:c0:c4:90:73:9d:92:ab:
c6:dd:a8:a7:81:4a:04:65:87:e6:ec:11:09:f9:52:5f:42:89:
fc:47:50:7d:1a:01:ef:b6:88:89:b9:f4:b1:31:db:af:63:1c:
ef:9f:44:0a:64:15:43:33:4b:00:fe:e0:45:d2:76:3c:b4:2d:
1b:e3:df:2a:48:46:f7:5b:ec:09:0e:4e:2f:7e:57:64:51:ad:
7b:de:eb:d0:af:39:a9:0a:22:3f:2a:d9:60:d4:87:b3:3b:6e:
06:e4:e7:92:ad:3e:5e:f3:0a:0b:9b:76:0c:27:91:ae:cf:0c:
21:fe:9e:6f:3d:9b:d4:df:68:0d:ce:64:a6:64:b6:29:17:87:
c9:54:09:0a:ec:c1:9e:67:7c:0c:f5:18:13:21:de:44:39:dd:
12:87:d5:e7:ff:f0:0b:1a:09:8f:47:d4:63:81:29:a0:be:d0:
54:01:13:e3:e2:17:8a:39:72:8c:0e:3e:a9:2f:53:85:6f:7c:
7e:51:49:27:b4:1e:7e:58:b4:eb:45:5d:28:7c:9d:fa:70:8f:
c6:c8:f4:a0:83:4a:0d:f9:e6:4b:61:49:ac:8e:1a:27:26:5c:
a0:4c:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:06 2026 by rpki-client