Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: keCKZGyFTaINnQOOgEdIAJYWpYb4seaW4tZxDx10X0I=
Subject key identifier: A9:5F:D2:A8:AA:4A:75:01:93:E9:6A:C8:DA:82:C6:4C:78:8E:9A:64
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 01A0CBC700900421EC6D8972DBD160C10D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 0236
Signing time: Wed 23 Sep 2026 01:00:11 +0000
Manifest this update: Wed 23 Sep 2026 01:00:11 +0000
Manifest next update: Thu 24 Sep 2026 01:00:11 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: a0Xn6CuHw/pJBc1RPzFqnesURu/c9gheCD/VPDwfxW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:00:90:04:21:ec:6d:89:72:db:d1:60:c1:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Sep 23 01:00:11 2026 GMT
Not After : Sep 24 01:00:11 2026 GMT
Subject: CN=a95fd2a8aa4a750193e96ac8da82c64c788e9a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:97:5d:4e:f9:bf:98:b8:06:87:6b:36:ff:
b5:12:3c:39:1e:81:95:0f:86:72:b7:0a:24:59:6f:
27:5f:60:07:8e:1d:50:56:15:f4:07:0e:f7:8e:10:
cd:36:f9:e7:f6:83:66:97:3f:cf:22:21:dd:97:3c:
de:b8:54:80:a2:e5:fc:0a:5f:49:45:0d:be:da:5b:
b7:ee:b5:b4:9f:d0:d1:da:2d:2d:39:70:d8:dd:3e:
af:1d:4a:77:8f:d9:bc:b5:79:b9:c2:4d:d4:af:9b:
f1:5e:1b:4b:3e:7d:1d:2d:d9:0c:e3:cc:d0:24:76:
93:0f:3d:ee:40:3e:86:96:43:af:51:83:87:b8:56:
f0:9a:35:d9:5a:a3:e6:6c:e4:1a:24:bf:46:3e:bf:
eb:c8:95:eb:f5:2d:92:d0:9b:d9:e0:8f:32:70:57:
6a:cd:00:2b:59:c5:1d:4a:45:19:e0:51:04:fa:e0:
76:86:35:ac:f8:a6:74:27:bd:1d:eb:13:64:05:c7:
9a:2a:05:fa:3a:78:b5:45:ac:e8:88:d6:4f:e2:e8:
d9:8f:21:77:ea:6c:ac:3d:b1:e2:01:83:f5:0f:ea:
04:f5:50:21:71:ab:21:fa:ed:fe:61:66:85:fd:53:
35:fd:2d:37:c7:53:b1:0a:e2:47:5f:43:c9:81:80:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:D2:A8:AA:4A:75:01:93:E9:6A:C8:DA:82:C6:4C:78:8E:9A:64
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:8c:92:4f:54:b5:9d:43:81:9a:87:6c:fe:5d:b4:5f:78:
4b:ab:38:90:53:c5:4c:02:ec:bf:50:fb:f2:7a:00:95:eb:fc:
b4:18:38:e0:54:4f:a3:0f:d9:5a:20:6f:36:f6:18:94:a0:1d:
b4:2f:e1:f9:7b:f5:bc:4b:62:c2:59:ea:25:f2:3c:7a:90:e0:
2a:e1:18:16:f0:74:cc:20:0e:d3:af:a4:de:38:1b:b1:04:b7:
c8:1d:3c:62:99:33:c5:15:8f:5c:5d:71:c3:dc:c9:7a:ae:5a:
f9:8b:76:37:5d:8f:93:01:33:c4:17:a4:eb:8a:78:42:53:82:
5c:0b:a4:20:d4:ac:dd:b1:61:00:43:a5:50:a7:6c:6d:8e:21:
84:00:5c:15:71:5b:d2:0d:3f:9d:b3:a5:60:b5:bb:8c:52:bd:
69:d0:1a:63:e6:d0:25:d0:f6:22:1a:bc:a2:43:47:64:8b:1c:
bc:5f:90:76:46:a8:bc:6d:f5:89:bb:f2:64:f9:db:5c:76:27:
9a:24:9b:9c:49:6c:08:fc:f3:2c:c1:bc:d4:e6:7f:6b:8c:c0:
85:89:06:8c:68:e8:37:30:ff:5d:a0:28:ec:26:8b:dc:a8:cd:
aa:a3:c4:c1:39:e1:8a:fc:c8:3e:39:88:f6:17:d0:3b:8a:df:
a9:89:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:42:24 2026 by rpki-client