Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: VNkIvEMN+x3CjO25XK/BBwYnYRKlzejIIzmORLfvmfo=
Subject key identifier: 2B:99:BF:6E:17:BF:2A:76:BD:6D:00:5F:89:D7:F8:5D:10:79:93:16
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019D2703E37EBDD374DF6DA910CC7C2AFDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0F1E
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: Lceu+7nDMPVJADsBdSWF7PCUpy1vlAjTsbMF869BHzs=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e3:7e:bd:d3:74:df:6d:a9:10:cc:7c:2a:fd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=2b99bf6e17bf2a76bd6d005f89d7f85d10799316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:3f:05:8c:20:86:f8:41:9a:8f:d1:eb:35:
3b:78:44:b0:a5:24:56:ac:b1:04:1a:09:b8:db:96:
47:53:c6:c2:ad:e4:74:22:91:ad:08:6e:09:16:08:
75:3f:96:74:a1:14:65:7b:77:6a:fc:f8:71:2d:78:
ee:08:49:c6:a9:73:56:e9:cc:d9:62:52:ac:d3:bf:
7c:94:bc:71:7b:37:d0:65:32:c0:ee:24:fd:21:c4:
ae:2a:61:ed:4d:c5:e4:70:b8:22:7c:8e:06:78:27:
4d:4f:09:25:1b:e7:13:f0:12:f0:2e:2f:c8:93:aa:
d6:72:70:fe:e5:fc:5b:14:10:a8:e6:c0:0b:09:24:
5b:64:3a:8c:cb:3e:ab:bd:10:19:c2:2c:89:f6:cb:
03:ab:9e:92:8e:4a:86:97:cb:6a:7c:77:c4:34:e9:
c1:43:73:64:c3:2c:53:13:53:9d:ed:b1:e2:d8:e9:
ad:72:e1:24:46:a9:32:07:b3:5e:9b:fd:c7:f8:81:
94:20:da:06:54:18:06:5e:8d:a6:4f:39:df:e5:ce:
2b:4c:2c:aa:f0:d7:b3:a6:02:4b:13:37:c3:ef:1f:
59:04:6a:20:72:0a:ab:a4:b1:21:99:8f:2c:7f:f7:
a6:cc:be:7f:a3:9d:10:d2:4b:b2:ac:20:f0:14:4f:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:BF:6E:17:BF:2A:76:BD:6D:00:5F:89:D7:F8:5D:10:79:93:16
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9c:f9:c2:85:24:4c:46:89:27:69:b1:9a:ee:4b:e1:21:9d:
6c:e0:fe:a0:55:b0:45:6a:72:69:ab:04:8b:c5:28:e3:58:6c:
0d:b3:2c:d7:01:33:61:3e:b1:c2:fe:91:94:3f:2d:5c:97:9c:
43:6a:fa:cb:73:a8:b0:c5:e7:f9:0c:6a:10:42:f0:fd:4e:6c:
f7:a1:86:c9:b0:23:a9:4e:df:ae:24:4e:d4:bf:73:4f:fc:b8:
b6:47:07:28:fb:c4:dd:a2:3a:1e:f4:d7:f4:b6:74:db:94:70:
5a:7a:58:e2:62:2d:ec:a2:63:8a:4f:4d:2d:e6:b9:24:25:82:
1b:36:42:1f:c7:17:8c:5f:42:3e:95:55:48:e6:f9:f1:39:92:
39:0a:f0:76:5a:70:dc:1d:93:7a:39:d0:b4:59:9a:93:bb:e7:
52:0c:9c:7f:4f:bd:39:e4:07:42:79:b0:71:83:9c:b2:29:a7:
49:83:2c:d7:f4:5b:76:41:7d:0b:fd:ac:2e:b5:29:f5:0d:af:
4e:85:6d:ae:fc:1d:36:c6:65:91:60:e0:90:5c:cd:0b:6f:33:
f1:3e:ca:91:13:31:c8:9c:3c:00:1b:c9:97:71:b8:d2:f1:03:
4e:73:fa:86:67:cf:90:2e:aa:b5:42:6e:f3:6f:8c:f2:ba:f3:
cc:38:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:07 2026 by rpki-client