Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: zfgCNbrZ4zv4yhGAi1edGqGUlbQEQr/L5mqRKfM6QMQ=
Subject key identifier: 9A:07:0F:04:A4:E9:3D:22:CF:5D:46:07:F1:0B:D4:95:C7:54:D6:B4
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 019D26280D0F9B21A1AD390D050F092A4CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: ZbwwcVHZxbPwKrvJ5clkBGBV+9YvMHJj9VnsiolG6Lc=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0d:0f:9b:21:a1:ad:39:0d:05:0f:09:2a:4c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=9a070f04a4e93d22cf5d4607f10bd495c754d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:36:ff:15:8f:a2:15:bb:fe:bd:58:3c:b2:
5f:9d:d0:f4:b9:ae:ea:fe:b7:aa:aa:47:5c:1e:1c:
3f:79:cc:d6:fe:0c:52:16:a9:64:35:92:e9:8c:3d:
c9:2a:ed:7a:31:f7:b5:38:ac:cd:7e:88:31:c0:da:
f9:88:d0:8e:45:4c:e1:3b:3b:f5:02:1b:a8:cc:7d:
f6:19:46:1d:26:1c:e2:e1:20:4f:6f:f6:f0:2d:c8:
fc:9e:0c:f5:0c:0d:bd:26:6a:0d:81:4a:3a:da:e7:
ab:ff:29:5f:c5:6c:00:89:7c:66:11:56:ab:a7:18:
77:9b:39:ba:41:12:59:9f:29:3c:00:26:6b:47:08:
25:f1:98:13:15:f2:47:93:2c:c0:26:61:10:98:54:
53:b7:c4:78:ce:91:ef:3e:e9:18:ba:ae:f3:d0:76:
af:d7:05:cb:ce:40:ff:82:ff:a0:e2:e0:9f:c5:63:
50:7b:4d:17:a9:e2:62:27:83:8d:d3:60:98:1c:3d:
95:bf:5e:8b:00:e7:85:7c:b0:62:0d:0b:88:c5:e2:
b5:88:0a:cd:59:8b:d3:60:d1:9b:ea:18:79:a9:9e:
85:21:95:bb:dc:ff:20:3a:ae:bc:5f:c5:7e:30:91:
dc:c6:1f:41:07:2e:23:5a:d1:12:8e:62:26:8f:07:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:0F:04:A4:E9:3D:22:CF:5D:46:07:F1:0B:D4:95:C7:54:D6:B4
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3a:58:af:fc:13:f0:57:2e:09:d6:20:a4:df:1e:d2:0f:7c:
ce:82:d5:78:e0:48:75:9c:c6:6b:0b:d5:44:cc:80:2e:f6:e8:
c3:48:6d:d0:2e:5c:0c:95:e6:8c:39:bf:cc:25:34:59:3a:e8:
04:7f:ca:46:60:e5:8d:50:1d:5e:bb:c7:8a:55:c4:3c:44:56:
6c:13:c7:7d:52:df:58:10:33:69:11:0b:47:87:6d:9e:34:e1:
06:3c:44:3e:94:f9:14:99:08:64:d2:f7:93:c0:9f:cb:40:2f:
2b:04:8d:8f:95:d6:a8:0a:b5:ff:02:d9:15:de:d2:ae:5e:85:
3e:14:3d:99:18:07:3e:8a:9f:f3:4b:e1:63:5f:0f:44:ca:1f:
e3:50:70:aa:ee:f0:83:ab:cc:d3:9d:11:c3:e3:9e:03:1a:be:
29:12:56:2b:2e:11:8e:3a:20:c7:3a:ed:a6:d9:48:7c:02:9c:
c4:b5:aa:65:90:7d:8b:c0:ef:c0:1d:ea:b5:28:8d:44:ed:c6:
9c:36:cf:64:9a:d5:dc:73:4e:f1:76:47:31:b1:d7:f0:36:58:
ad:ab:93:0b:6a:e6:74:02:2a:ee:9e:d0:4c:66:9f:c5:2c:96:
6d:43:20:72:5a:75:a1:59:1e:e4:6b:30:41:21:71:a2:7f:69:
92:18:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:26 2026 by rpki-client