Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: gO827oW9YXu0ENAOQh1juVzBEOc4cLrriXpl4YyOOpY=
Subject key identifier: CF:6C:40:B4:BC:01:CC:B8:7A:28:5B:6D:9C:9F:D1:82:C6:D8:5C:EF
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019E1C47264B4A837D0034C4F4887E045E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0F9D
Signing time: Tue 12 May 2026 13:01:25 +0000
Manifest this update: Tue 12 May 2026 13:01:25 +0000
Manifest next update: Wed 13 May 2026 13:01:25 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: hSAQnrtFYfhamMp9jzV/E2yuhhR0TN8ojzbDhrQDRuU=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:26:4b:4a:83:7d:00:34:c4:f4:88:7e:04:5e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: May 12 13:01:25 2026 GMT
Not After : May 13 13:01:25 2026 GMT
Subject: CN=cf6c40b4bc01ccb87a285b6d9c9fd182c6d85cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:b4:14:17:28:81:89:a6:9f:36:41:58:ef:
87:c9:6c:a1:c3:3f:79:30:fa:d4:6a:0d:d0:4c:3e:
8e:57:9a:e2:72:69:29:07:0f:4e:cb:bf:d2:1f:46:
8b:0f:4b:dc:f1:5c:f3:6c:82:1d:e1:20:ef:ad:42:
17:a3:81:34:c9:e2:67:b2:fa:40:97:f5:f6:e5:e9:
bb:1c:c1:40:53:52:73:09:35:5d:15:7f:64:4d:f6:
4b:bc:86:56:0b:69:e2:e9:18:a8:33:84:25:85:95:
5f:85:b4:0c:ce:93:8c:aa:7e:bf:31:de:1e:e7:57:
45:24:db:66:5a:f4:4c:60:9b:c0:ca:3a:b8:1e:b8:
b7:74:bd:18:13:7a:5a:1c:ca:8b:b8:4b:df:8a:a4:
d2:de:ab:02:a6:7d:bc:22:72:06:16:91:bc:d0:e2:
98:e9:27:e3:06:ac:9c:06:d9:df:86:a5:81:4c:29:
e4:06:03:a8:1a:3b:79:99:ad:f2:b4:1e:0c:cc:45:
15:0c:3c:e3:91:7a:d3:ac:13:b3:1e:45:f0:5c:4b:
d0:c3:95:2c:e3:cd:3d:31:c7:75:1d:49:6b:68:4e:
23:08:30:27:6b:ea:58:b5:30:29:2e:91:9d:ea:89:
77:40:27:7f:e5:6a:bf:34:35:74:7b:b5:b8:a3:7b:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:40:B4:BC:01:CC:B8:7A:28:5B:6D:9C:9F:D1:82:C6:D8:5C:EF
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:5f:20:c7:1e:8b:48:07:d5:f8:f5:34:ba:da:c4:3d:94:
15:3b:85:0e:57:4c:22:79:83:63:5a:c1:db:d2:1b:d5:47:25:
6d:12:cb:64:c7:16:13:fe:f0:04:7d:58:36:53:ff:83:fd:2c:
fd:96:0d:bc:ed:c7:c8:1f:ff:39:f8:66:3d:89:04:50:c1:3b:
7f:14:a9:cc:41:9e:28:1b:78:24:19:6a:03:6c:b9:9f:e4:ff:
8d:87:07:8b:de:9d:18:c8:64:d7:98:c8:12:89:2e:15:1a:d8:
5f:c7:48:e4:8f:00:c4:a5:a8:fc:1b:3a:5c:ca:31:24:8e:d0:
47:f6:49:d7:63:c5:06:26:ea:71:bb:72:79:bb:3e:f5:8a:20:
d4:67:0b:7e:9b:c5:b1:46:8e:f3:d4:6d:8d:3c:96:84:de:46:
94:96:01:df:10:1e:2a:d7:3b:6e:e7:31:f7:32:1a:ea:9a:bd:
00:b6:9d:62:5a:9c:18:92:12:96:39:2d:3e:20:97:b0:ef:a6:
68:50:dc:8e:3e:98:7e:42:86:e0:3d:7b:99:43:d3:52:97:ca:
bc:68:3d:37:92:c6:d5:29:03:a9:15:f8:27:74:14:28:eb:ac:
b5:7e:04:0a:a4:83:38:cd:33:4d:1c:88:99:42:75:82:1a:bc:
b5:65:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:26 2026 by rpki-client