Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: wzTLYVl1miJ48y9zb0/YWdYa4vI+mY4Z7jk7Qu8xzcs=
Subject key identifier: EF:A0:DB:71:40:56:CA:C7:61:00:00:DD:69:C9:71:FB:95:06:FB:46
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 01A0CA0FDBB79D34334AB85681644CCBAC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0D47
Signing time: Tue 22 Sep 2026 17:00:31 +0000
Manifest this update: Tue 22 Sep 2026 17:00:31 +0000
Manifest next update: Wed 23 Sep 2026 17:00:31 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: iF55vNGNIF1e2wuunFyufkoD55HbUQmDdbn2rr6wSXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:db:b7:9d:34:33:4a:b8:56:81:64:4c:cb:ac:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Sep 22 17:00:31 2026 GMT
Not After : Sep 23 17:00:31 2026 GMT
Subject: CN=efa0db714056cac7610000dd69c971fb9506fb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:c0:a6:05:8c:0d:00:9d:bf:28:a9:58:ae:
3b:ea:fb:0c:99:ba:8a:fa:c0:06:bb:92:8f:18:fc:
3f:ca:30:9b:09:cb:34:35:b2:64:3f:0e:09:2e:b3:
c3:83:e3:5e:9e:22:10:65:d4:5e:83:50:f5:14:17:
62:a3:21:af:3d:a0:13:55:75:f1:31:1d:26:7b:69:
0f:cd:d0:50:69:af:31:b4:e9:47:39:0f:54:e9:e5:
ce:2b:f7:41:d5:a6:73:fb:b8:fe:aa:11:d6:b7:15:
51:a9:7d:20:94:b9:42:86:72:75:0f:ff:54:58:47:
cd:a5:ee:cb:b0:f9:bf:33:74:37:cd:78:aa:e6:fb:
65:a4:cd:20:12:ec:57:cf:ce:dc:c4:cc:58:cc:d6:
2c:da:93:9d:08:f9:a6:4c:bc:7f:b4:1a:b9:fe:2d:
d8:33:03:4e:4f:e3:82:87:a0:e2:0f:8f:f3:84:61:
d8:17:63:14:ad:62:c8:c7:31:7a:90:ee:fd:8e:4c:
a3:1e:43:32:fe:1d:75:2a:65:33:1a:12:99:3a:c1:
f3:3d:20:fa:95:ea:5b:bc:74:d2:83:51:19:88:ba:
3e:8e:75:2f:70:35:a7:70:17:3a:d0:8a:31:89:c7:
41:9e:37:5a:2e:6c:0e:84:4a:1f:83:e4:b7:39:37:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:DB:71:40:56:CA:C7:61:00:00:DD:69:C9:71:FB:95:06:FB:46
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:03:13:25:e3:ec:61:64:e8:7e:10:1d:d8:85:03:0e:17:b7:
f4:88:85:62:5d:3f:6d:a1:03:ed:6d:68:56:d6:71:47:55:bb:
a5:4d:81:c2:84:51:41:f2:cf:89:16:9a:fe:7c:00:22:d8:94:
10:82:93:a9:5d:31:8b:2c:26:62:bd:df:f9:04:fe:7c:24:5a:
5c:7b:dd:e1:91:ea:ef:65:cf:09:b6:d1:ea:6e:6d:5e:5d:22:
6a:a8:7f:81:57:f5:e0:57:2d:03:fe:92:e3:47:6f:bf:2e:82:
d4:a4:67:f2:8d:6e:4b:1c:72:e9:93:24:52:77:cc:fc:5b:eb:
fe:dd:85:bd:d5:0f:ba:de:d2:fc:14:8c:88:fb:5b:5e:a5:01:
4d:99:c8:1a:7b:5f:9f:c4:0c:fa:2a:3e:ee:6f:67:66:34:39:
52:36:c5:30:1f:79:df:32:d5:5d:61:6b:83:0d:e3:a1:b3:27:
87:b8:ed:f0:41:ae:76:aa:7e:e1:7d:d3:4f:a7:2e:68:76:e6:
d7:88:d7:36:ee:5b:c1:67:f3:55:37:84:f2:03:9a:3c:f8:03:
bf:bb:a9:07:62:9f:06:6d:19:be:77:1b:5d:19:ef:1f:1e:08:
60:9f:6b:d9:9c:28:12:cf:23:3c:9e:e6:04:9a:59:0f:af:08:
0b:93:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:09:09 2026 by rpki-client