Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: T4CsqFmJusSct2N6AMNi8pmlAGz5Gf84YLLNG1nlGGE=
Subject key identifier: A5:50:41:73:48:E9:A1:AA:F0:AF:92:38:95:6A:1E:41:0A:AD:15:EE
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 019D2515D88E97C00DCCD7632B4650F36E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 52
Signing time: Wed 25 Mar 2026 13:01:21 +0000
Manifest this update: Wed 25 Mar 2026 13:01:21 +0000
Manifest next update: Thu 26 Mar 2026 13:01:21 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: WRGbhWamgP7XUDhNSuxQr0G/NDW1q0lx9YcI/48C8vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:d8:8e:97:c0:0d:cc:d7:63:2b:46:50:f3:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Mar 25 13:01:21 2026 GMT
Not After : Mar 26 13:01:21 2026 GMT
Subject: CN=a550417348e9a1aaf0af9238956a1e410aad15ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:49:1a:6c:96:ab:06:8f:3a:41:a3:c0:2e:
35:67:ab:91:51:9c:4c:c0:fd:1e:46:f0:22:17:b8:
4d:91:95:d1:a6:c0:fc:eb:ea:52:10:30:ce:92:56:
5e:58:83:5b:b9:99:1b:87:5d:12:cc:16:49:0b:94:
8e:c7:c6:d6:5f:2a:2a:17:1c:35:59:61:62:15:d5:
66:58:65:18:60:43:79:5c:29:47:b8:14:41:46:7b:
0f:5e:78:c6:b8:0e:b8:43:58:db:90:dc:06:3b:b2:
7b:dc:07:f2:fd:80:32:20:c7:f3:6f:76:c3:f2:0f:
7b:ad:80:18:9b:e2:df:de:9f:42:7c:df:c5:9a:72:
b5:35:a6:8a:53:d3:f0:5f:42:c8:7a:85:2b:2e:af:
39:7a:03:aa:a3:0e:d0:4d:60:ea:00:84:b5:04:3a:
e1:a4:a4:e7:9c:37:b9:be:5d:58:65:9c:0c:44:75:
e5:52:c6:98:de:19:21:ac:17:44:3e:a2:57:38:68:
e3:a1:d8:ad:f4:39:6c:d1:33:da:9c:bc:17:5a:f2:
f8:2a:36:6b:d1:ea:5b:da:24:fd:32:e5:2a:04:7c:
8d:d5:8a:23:50:6f:0a:98:d1:f6:51:26:ca:a5:56:
b2:ef:cb:cb:c6:c5:63:db:26:a0:67:f1:03:af:09:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:41:73:48:E9:A1:AA:F0:AF:92:38:95:6A:1E:41:0A:AD:15:EE
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:df:bc:2a:8e:c9:80:4f:8d:38:55:ae:c1:3d:b9:d5:1d:
d8:ae:f2:a1:a6:c3:d4:94:f0:df:50:5a:bc:48:f4:f6:96:92:
20:0c:0c:74:2a:99:49:e0:c0:db:89:11:8d:0b:85:16:27:20:
a0:1c:56:99:0c:46:04:9c:e0:d4:6b:e1:08:aa:d1:22:db:c6:
b8:d8:c3:23:dd:cb:08:b8:cc:dc:e7:3e:a9:6f:22:a6:58:5c:
53:38:73:7a:b6:38:37:e2:64:ef:c3:12:17:ed:c8:f5:a9:0b:
63:68:3c:0d:b2:31:e7:9e:25:61:a0:04:ea:7e:17:f9:08:e9:
e6:22:db:03:3d:2d:b4:81:16:22:fc:04:0c:7b:65:c6:d7:fd:
35:6f:b4:87:6f:6d:cc:32:c3:ac:f4:09:0e:a7:ca:0b:f2:d3:
0a:e8:af:e4:fe:20:a7:21:24:4d:f8:d3:92:c1:91:31:16:ac:
09:20:cc:b0:68:54:b1:3b:e1:e1:d3:cd:a3:83:89:27:1f:e7:
6d:ec:b8:fe:1d:63:12:8a:2d:16:ff:e4:24:3f:a0:c8:0f:73:
0e:81:6d:07:7c:ce:21:94:d9:0a:d8:02:4e:ea:8c:93:ea:cd:
82:a3:ee:42:29:09:fc:c2:65:f8:06:f4:c1:ba:b1:d1:03:9d:
17:e5:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:53:52 2026 by rpki-client