Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: O8Fpgu6QBCAIUfJwF1CQIOIzrvZu2BYS50EnwO9GIAU=
Subject key identifier: FE:FB:F0:4E:7C:5F:EE:D6:3B:93:B6:EB:14:F3:5E:6A:98:48:D5:23
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 01A0D19224830E07531E12E1927A6C3FFA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 1104
Signing time: Thu 24 Sep 2026 04:00:10 +0000
Manifest this update: Thu 24 Sep 2026 04:00:10 +0000
Manifest next update: Fri 25 Sep 2026 04:00:10 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: kA5Qbfc/u/85L0gm9e0bsbcwKmxlRC+aM+1sJlzqFqI=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:24:83:0e:07:53:1e:12:e1:92:7a:6c:3f:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Sep 24 04:00:10 2026 GMT
Not After : Sep 25 04:00:10 2026 GMT
Subject: CN=fefbf04e7c5feed63b93b6eb14f35e6a9848d523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:6a:88:d0:4b:81:c6:d0:89:cd:09:b2:cc:
09:71:10:0a:5e:be:5a:66:ba:78:88:b4:27:35:21:
e5:02:a4:6b:db:68:17:7b:a9:d2:de:92:67:1d:cb:
63:a8:ef:9e:c5:87:c2:9c:39:fb:85:e9:c9:52:54:
78:52:80:fe:7b:da:19:0c:fe:1a:2d:42:79:6f:50:
83:fb:b9:d8:5c:a7:64:67:45:90:67:dc:ce:db:da:
71:a5:3e:0b:44:49:e0:9a:01:e7:f1:42:d5:84:3a:
24:d9:92:5b:43:24:ef:4f:92:2c:e6:87:9f:3c:9c:
d0:85:a4:9d:63:c5:e9:4b:5d:e9:0f:9a:ca:59:43:
9f:0f:5b:d5:ea:b5:b1:c5:f4:24:c0:a4:d6:f9:32:
9f:49:25:a3:8d:f9:7b:91:88:0e:56:b3:db:43:ad:
b0:cb:c7:87:3b:e8:db:db:30:6c:ad:ee:d8:c0:a5:
a3:93:f4:32:02:bd:00:a9:53:29:ed:7e:b3:21:84:
da:10:8f:83:de:2f:ec:b4:2e:0d:ef:e3:ec:49:f1:
b9:2e:a8:aa:43:a2:14:ab:54:de:5e:72:30:49:fd:
63:4c:91:ae:b1:fe:b7:5e:96:2b:aa:14:28:97:cf:
76:00:08:66:f1:63:0d:36:0b:71:58:00:4d:08:39:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:F0:4E:7C:5F:EE:D6:3B:93:B6:EB:14:F3:5E:6A:98:48:D5:23
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:14:5c:37:66:f3:3d:96:fa:90:74:1f:78:8b:60:69:d5:29:
f8:b6:e7:d6:28:19:7d:bf:7a:ad:7f:be:56:71:b6:23:06:23:
44:df:7c:99:d5:a4:5e:6b:b4:34:a7:b6:00:80:f5:5c:59:b6:
f8:61:fd:fc:33:94:c2:4a:2f:46:b5:24:50:4a:29:0f:45:54:
2a:21:ed:f9:68:0d:11:82:93:fb:30:1f:4f:2a:a0:c3:da:b0:
22:fe:b4:f7:4a:a1:d7:09:01:f1:13:57:74:46:88:39:34:02:
75:83:e9:87:22:3d:50:5f:1f:53:ea:31:a2:97:28:7d:fe:c9:
66:c3:6e:ff:6c:f3:f5:39:96:a4:62:a0:05:79:d5:1f:0f:0e:
ec:68:39:be:33:16:dd:ab:ea:d6:80:d6:62:95:43:f6:90:43:
0b:c1:33:5c:6a:60:f4:b6:a7:34:7f:b9:ba:69:0d:08:86:ae:
59:e6:88:33:f2:95:d1:7a:dc:05:2a:50:11:49:f7:70:0a:2a:
f9:a0:8a:0c:4f:e2:02:a1:b9:89:06:a7:49:dd:d8:e5:1b:92:
c7:b4:61:c4:10:e3:5f:ec:53:ed:81:a9:7c:32:29:2e:c2:13:
97:b0:b9:fd:f9:b9:94:a0:00:a2:33:a8:9b:d7:c4:98:a3:ab:
3d:0b:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:18 2026 by rpki-client