Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: XxElAs/n/HFEWswW0e70ZYaid9Jia6n6NvLtBAXrwRM=
Subject key identifier: 2E:F4:65:01:96:99:DE:49:CF:82:87:BF:B1:45:9C:26:56:93:78:E6
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019F91357F6099CFDC9FBEC39F69F0E5A44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0CA5
Signing time: Thu 23 Jul 2026 23:00:30 +0000
Manifest this update: Thu 23 Jul 2026 23:00:30 +0000
Manifest next update: Fri 24 Jul 2026 23:00:30 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: SZKhS3TqAKElT2JhrDtkg7tEphZ0t/M72xK4bUb2m4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:7f:60:99:cf:dc:9f:be:c3:9f:69:f0:e5:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Jul 23 23:00:30 2026 GMT
Not After : Jul 24 23:00:30 2026 GMT
Subject: CN=2ef465019699de49cf8287bfb1459c26569378e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:07:6a:a2:4c:9f:15:be:0a:fc:20:8e:54:
bd:45:90:e6:98:4b:49:db:1f:49:ce:e4:8a:66:d2:
e3:4c:66:73:60:15:96:de:34:d2:2e:93:8c:f7:91:
52:ec:43:7c:ca:32:b4:bf:1b:ad:1e:b0:7f:a5:e0:
5c:30:7d:4e:19:5e:04:d3:12:b8:48:59:94:46:1c:
c2:b3:53:98:d7:a6:66:7c:ad:67:a5:8b:28:44:0a:
f7:cc:59:ba:81:96:31:0f:51:ce:b6:4b:02:58:7f:
7e:86:92:80:0a:69:3e:24:de:24:2c:fa:94:d8:28:
c9:1f:78:4f:33:84:c0:c0:5d:fa:88:3a:0d:11:98:
8a:00:7a:d5:a0:85:f2:a6:83:4b:41:2e:e5:a4:e3:
9d:c8:34:41:30:98:10:9d:93:fc:88:23:1a:5f:48:
d1:b5:35:ef:be:76:59:86:b7:ba:9a:55:d4:f7:b4:
94:08:b9:4b:be:c2:e0:85:39:68:80:25:75:a8:cb:
a1:24:66:2d:c0:1f:05:7a:b9:fc:ac:a3:82:bf:2e:
c1:88:6e:07:5c:5d:ef:8f:00:3c:04:e6:00:64:c0:
8b:83:0b:2b:cf:e6:b4:9d:9d:4b:eb:1b:2b:1e:40:
e3:f3:cd:92:c2:8a:8d:d0:5b:ca:81:05:a3:4e:17:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:65:01:96:99:DE:49:CF:82:87:BF:B1:45:9C:26:56:93:78:E6
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:91:b5:fe:fe:48:5d:52:60:90:1d:bc:6e:33:10:e8:f7:
13:53:42:b9:b2:aa:7c:76:13:ab:e3:c0:46:90:d4:53:e7:a0:
ec:7e:4b:60:c7:e0:46:73:9a:ad:9d:1b:af:3e:46:48:12:96:
4b:d5:5a:ff:18:17:15:7a:b4:cb:59:e5:ce:d0:ea:c9:89:6f:
d9:59:e3:a6:41:7e:04:95:5f:9e:82:bb:dd:d6:49:90:4a:41:
02:77:d2:cb:99:57:61:89:ce:f7:75:ce:cd:72:a5:64:88:d6:
dd:90:94:6e:42:9d:bc:72:50:83:0e:b5:8d:c5:5d:a2:21:a4:
ee:62:d7:17:6d:32:83:b7:a0:3d:a4:ab:cc:dd:26:2a:d8:01:
c5:95:4c:e2:0a:95:a0:2b:58:7b:61:65:2c:7d:04:b1:a1:99:
e0:05:92:5a:e4:9e:e5:65:d9:f9:a6:18:a3:2b:f9:ec:3a:1b:
d3:f6:cb:7c:89:26:ba:7f:ea:9b:2b:72:a8:8e:25:70:4d:19:
af:f8:76:56:da:01:fa:c3:1e:6c:e6:eb:95:07:04:6c:58:e7:
85:02:70:01:05:f5:fb:66:13:77:d3:ac:61:7f:8f:33:40:fe:
b6:7c:dc:19:51:9a:42:1c:aa:06:da:a5:0c:da:c3:8d:91:98:
55:fe:ac:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNX9gmc/cn77Dn2nw5aRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjYwNzIzMjMwMDMwWhcNMjYwNzI0MjMwMDMwWjAzMTEwLwYDVQQD
EygyZWY0NjUwMTk2OTlkZTQ5Y2Y4Mjg3YmZiMTQ1OWMyNjU2OTM3OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVkHaqJMnxW+CvwgjlS9RZDmmEtJ
2x9JzuSKZtLjTGZzYBWW3jTSLpOM95FS7EN8yjK0vxutHrB/peBcMH1OGV4E0xK4
SFmURhzCs1OY16ZmfK1npYsoRAr3zFm6gZYxD1HOtksCWH9+hpKACmk+JN4kLPqU
2CjJH3hPM4TAwF36iDoNEZiKAHrVoIXypoNLQS7lpOOdyDRBMJgQnZP8iCMaX0jR
tTXvvnZZhre6mlXU97SUCLlLvsLghTlogCV1qMuhJGYtwB8Fern8rKOCvy7BiG4H
XF3vjwA8BOYAZMCLgwsrz+a0nZ1L6xsrHkDj882SwoqN0FvKgQWjThfcHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC70ZQGWmd5Jz4KHv7FFnCZWk3jmMB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2GRtf7+
SF1SYJAdvG4zEOj3E1NCubKqfHYTq+PARpDUU+eg7H5LYMfgRnOarZ0brz5GSBKW
S9Va/xgXFXq0y1nlztDqyYlv2VnjpkF+BJVfnoK73dZJkEpBAnfSy5lXYYnO93XO
zXKlZIjW3ZCUbkKdvHJQgw61jcVdoiGk7mLXF20yg7egPaSrzN0mKtgBxZVM4gqV
oCtYe2FlLH0EsaGZ4AWSWuSe5WXZ+aYYoyv57Dob0/bLfIkmun/qmytyqI4lcE0Z
r/h2VtoB+sMebObrlQcEbFjnhQJwAQX1+2YTd9OsYX+PM0D+tnzcGVGaQhyqBtql
DNrDjZGYVf6s1Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:21 2026 by rpki-client