Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: NV1QO8vYtk8L1HXkGStagmm3ACRqSnHDr5Rff5VN1ok=
Subject key identifier: 8F:5A:01:49:E4:A7:31:0B:0D:24:D6:07:45:E9:A0:7A:8C:0A:B2:C9
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019E1C7D9B0C3E46FC8C41D826DA43AB4740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0BE4
Signing time: Tue 12 May 2026 14:00:54 +0000
Manifest this update: Tue 12 May 2026 14:00:54 +0000
Manifest next update: Wed 13 May 2026 14:00:54 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: R7KbNZ1uFUHLS1D5mhGD8ZkuLw8i164lc/NSqkbJh9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:9b:0c:3e:46:fc:8c:41:d8:26:da:43:ab:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: May 12 14:00:54 2026 GMT
Not After : May 13 14:00:54 2026 GMT
Subject: CN=8f5a0149e4a7310b0d24d60745e9a07a8c0ab2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:ac:0a:65:7f:0a:4a:1c:a0:e8:0a:1f:24:
d6:1a:4e:c3:2a:da:d7:59:59:64:92:e4:e7:62:31:
75:da:21:f9:38:63:81:5d:34:47:79:df:da:e0:5b:
d7:9e:24:c7:21:2b:fa:0e:df:59:99:e4:d8:ad:e0:
c1:19:fc:13:dc:74:a1:22:e5:b1:b2:6a:61:d2:01:
4d:4f:07:15:f1:9b:da:98:18:85:18:7e:0c:fc:44:
a8:e1:57:53:3b:08:73:36:63:bb:54:a6:ae:a8:8d:
b4:33:31:ed:79:f0:de:c2:23:5e:35:84:a4:33:53:
c9:19:77:cf:c4:04:e8:e6:85:98:8d:80:df:b9:bb:
b6:a3:7d:bc:a5:3d:82:79:f9:7f:f5:ef:f6:bb:ca:
ce:68:df:dd:f3:38:46:ba:5c:94:c7:77:a5:ed:1b:
8d:19:6b:53:cc:07:5e:58:d7:50:38:a9:b7:24:d4:
ca:ae:5f:f6:f7:cd:2a:16:38:7d:48:55:70:dc:46:
bd:65:be:4e:dd:3b:cb:9a:04:63:11:69:d7:10:38:
dc:d7:59:2a:27:0f:bc:42:32:07:8a:a4:f2:b4:ba:
66:ad:4d:6d:90:8a:ae:a5:d6:4f:bd:3c:c6:17:af:
45:d5:f8:0d:2b:ca:c0:89:b8:c2:06:b3:9d:47:42:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5A:01:49:E4:A7:31:0B:0D:24:D6:07:45:E9:A0:7A:8C:0A:B2:C9
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:90:fc:2b:75:05:50:49:76:1d:f3:c5:a6:5f:ec:d4:7c:
92:e3:4e:8c:6d:88:08:c2:9e:02:c4:c7:8c:83:9d:d8:96:59:
b3:3f:f7:22:26:19:53:c5:04:54:bf:06:a7:1c:77:7a:d2:ad:
d6:0a:13:28:9d:29:0c:57:75:82:62:aa:bc:37:4e:c3:30:58:
7f:9b:46:6d:e9:de:fd:f2:8a:91:c7:9b:0a:c6:21:17:4c:86:
88:64:b5:d0:30:cf:0b:12:34:d3:56:76:2e:1d:c2:a5:1b:b2:
92:34:f5:3c:10:3c:4e:4d:5e:18:c4:b8:16:15:53:51:31:53:
44:82:be:2a:8e:55:0f:58:c9:9e:56:00:73:6a:da:71:47:2b:
cf:1e:84:4a:c4:bd:b2:92:f6:78:a3:ad:06:01:22:8f:7f:5b:
25:61:47:bf:99:b8:7b:09:91:df:ab:75:31:0d:6f:55:c4:ef:
9a:9b:eb:02:af:fd:59:2a:e1:d7:43:8c:5c:64:0c:f7:3d:81:
20:68:6f:91:5e:2f:ca:72:fa:35:e4:7b:f5:d9:16:a6:13:77:
48:6b:c9:77:84:90:7f:bb:09:2a:08:e9:83:03:d0:b1:85:c8:
c4:66:5a:4e:44:10:66:73:62:45:72:e4:4c:22:47:c2:3b:ff:
d7:ec:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:15 2026 by rpki-client