Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: 11QgN+fZnjqrtQNELkp637MkhWT678eQ626Q4RTmRBg=
Subject key identifier: 24:62:4F:30:F5:20:92:30:77:51:64:69:E2:12:5B:5E:78:97:E7:D7
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 019E1E35B1BB01A001B9AC91D175887E419F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: D3
Signing time: Tue 12 May 2026 22:01:35 +0000
Manifest this update: Tue 12 May 2026 22:01:35 +0000
Manifest next update: Wed 13 May 2026 22:01:35 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: b7A+cM2O7fOABNmDljWpa1xVVqTIEO8rfUH0Hud8Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b1:bb:01:a0:01:b9:ac:91:d1:75:88:7e:41:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: May 12 22:01:35 2026 GMT
Not After : May 13 22:01:35 2026 GMT
Subject: CN=24624f30f520923077516469e2125b5e7897e7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:b8:a8:f8:a4:4c:ee:bc:cd:cf:c0:24:6d:
f6:43:91:6d:3d:69:81:e1:5f:91:3b:7d:f2:5a:0a:
3c:29:75:3c:e1:35:a0:bb:10:12:cf:72:f4:e0:7f:
d8:7b:c3:0c:a8:b5:b1:55:1c:42:ec:26:32:c1:07:
23:c0:e5:0f:fe:c5:9b:0e:70:84:1b:ce:05:fd:17:
08:30:37:04:a2:17:01:8c:aa:69:b5:89:73:ea:1b:
9e:97:f7:32:f6:f3:41:50:dd:ad:aa:21:28:f0:12:
f7:0a:62:3f:43:d4:b7:e1:d5:c5:7d:b5:73:c6:47:
14:f0:e4:58:ff:1a:97:11:49:0b:81:bc:c9:74:81:
66:07:ae:01:bc:fe:8a:84:b8:d0:75:d4:40:b4:90:
83:cc:d9:f7:02:f1:10:96:f1:b7:14:c3:35:d5:ff:
33:19:40:85:d6:82:d7:9b:36:9f:3c:80:2d:dd:96:
ac:56:4c:3a:bf:e5:1f:95:d1:7b:ec:0f:30:69:9d:
44:5c:1f:53:8a:e4:a9:1d:96:9b:aa:7a:ef:f7:c2:
43:a4:8f:90:5a:1a:85:0f:b1:5f:26:52:b9:71:5b:
ea:53:72:29:1e:f7:33:a6:76:a8:ff:31:09:05:4d:
fd:84:5b:b9:44:f9:dc:fe:c3:1b:a6:02:1b:3f:e7:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:62:4F:30:F5:20:92:30:77:51:64:69:E2:12:5B:5E:78:97:E7:D7
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b8:37:82:de:72:d8:70:29:4f:45:0e:2e:8e:80:b7:8e:1a:
25:fc:2c:8d:c8:9b:0c:c5:c8:86:de:22:b3:f1:a7:eb:db:a8:
04:14:fc:75:e2:19:5d:a0:b9:be:de:12:ca:53:6f:a1:3b:be:
e6:10:d2:9c:38:e9:6e:65:fe:23:77:9d:da:ee:4c:6d:30:60:
4a:4a:d6:f5:58:d9:8d:40:df:de:2d:22:34:1b:6d:a6:66:5b:
06:5e:0f:4e:30:65:9e:42:39:cc:8a:88:62:61:43:6a:c6:8c:
88:4b:86:df:f7:aa:19:08:38:63:44:ac:03:95:3e:c1:e2:da:
eb:65:29:ba:d4:04:9b:80:58:06:44:47:ce:c3:9d:48:ad:87:
f0:25:cc:66:82:05:0d:52:d0:f1:aa:4b:83:ca:73:60:98:29:
8f:b9:6f:86:59:24:a1:9e:ef:5a:96:67:3d:5d:73:2f:6c:e8:
44:cf:4b:1b:eb:22:6f:e6:9f:40:97:f4:b7:e2:04:9e:69:fe:
49:b4:7f:88:42:46:42:fc:2a:1a:4d:69:98:84:3e:bb:05:a7:
f1:9f:0b:20:cb:fa:75:69:2f:fe:7b:7e:95:d8:79:1c:f8:a6:
be:86:7c:ca:a7:fd:ef:e8:63:a9:72:39:0a:fa:55:af:c0:0c:
11:76:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:00 2026 by rpki-client