Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: MtD0FT5/hELD183qVM+1gahBzdZjcFAzVjGFHu4ynIs=
Subject key identifier: 5C:A7:75:1B:65:7D:ED:8C:04:91:C9:62:FD:DD:72:6D:F4:04:FB:5C
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 01A0CAB478FF84FFB25AC662EED701033306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 17A1
Signing time: Tue 22 Sep 2026 20:00:20 +0000
Manifest this update: Tue 22 Sep 2026 20:00:20 +0000
Manifest next update: Wed 23 Sep 2026 20:00:20 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: BSjGUaN96OAmv3OSET4C8MeKei8L8YcdPHnL8kiM1QI=)
2: UdRtC8oWULapblUxKPZMiKoK7Fg.roa (hash: NCRhs0KrgrczrslxIEqi2lQhD/o2DKDw/5BIUZhQTS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:78:ff:84:ff:b2:5a:c6:62:ee:d7:01:03:33:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Sep 22 20:00:20 2026 GMT
Not After : Sep 23 20:00:20 2026 GMT
Subject: CN=5ca7751b657ded8c0491c962fddd726df404fb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:2f:86:d2:c6:a3:33:1b:55:03:80:73:88:
24:33:a5:7d:a2:ff:d2:ae:4a:9e:0c:69:3d:a5:ae:
5a:e7:de:40:f2:ca:a1:c6:31:e0:44:00:f9:4b:a1:
eb:f4:a9:6e:8c:e9:b7:18:83:60:df:d5:6d:af:d6:
b0:88:13:66:d4:de:d5:a2:75:1c:66:12:fd:b3:f2:
2a:d7:bc:7b:47:63:c2:d5:50:3e:73:82:51:27:dd:
b1:d6:d2:c3:07:4f:7d:03:d5:e4:a1:3b:13:d4:e4:
25:69:bc:69:06:44:3b:e6:97:8a:9d:7a:86:70:4c:
d0:9b:c4:d9:b6:28:c5:bb:12:08:d9:97:4c:51:f8:
60:25:e6:c9:67:80:69:88:84:63:28:de:b3:d7:7d:
30:fe:da:a1:4e:57:dd:82:14:28:b1:89:60:66:e2:
8b:48:e2:06:fe:35:ae:49:67:7c:9b:5a:70:1c:4b:
1f:8b:9b:01:4a:99:9d:ca:9b:bc:49:7b:65:07:c3:
2c:e2:c0:1e:9d:7d:1f:9d:59:d5:ff:47:dc:1b:6f:
c8:d0:1b:ed:57:dc:6a:bd:05:30:b4:0f:cd:24:bd:
13:71:9e:bc:07:f3:a2:c6:b9:cf:63:e3:9c:9a:0e:
01:b2:ca:69:d9:f2:04:a4:aa:f8:e1:9a:8e:e9:a5:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:75:1B:65:7D:ED:8C:04:91:C9:62:FD:DD:72:6D:F4:04:FB:5C
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:85:f4:dd:3d:5c:b9:f4:72:3a:64:d7:e9:0d:1f:38:3e:e0:
7d:ac:41:5b:50:bf:70:da:03:bc:0b:20:ef:f1:5a:eb:06:66:
df:c4:58:34:41:07:08:8b:11:c4:73:87:74:53:9b:80:97:38:
2b:e5:c4:11:1c:04:b9:94:8e:cc:c6:5e:e3:e9:3b:7f:9d:6c:
a5:7d:24:7a:a2:8f:84:74:10:57:12:89:97:50:86:e7:a2:5a:
69:5e:52:4b:e8:ba:94:1d:a7:16:e2:d3:c3:f3:61:7f:39:33:
17:4b:4a:a8:a4:4b:a2:e2:01:98:f5:87:e1:28:67:50:74:9b:
33:4b:f7:1a:eb:3a:09:cd:25:74:11:d8:b8:37:41:21:d3:f9:
3c:4c:c6:8b:82:97:d6:8e:06:e3:c9:02:3f:09:6a:1c:55:84:
42:95:7e:a8:e7:d5:68:26:22:82:c9:16:8a:54:64:73:61:ba:
a6:1a:cb:11:03:b5:b9:a7:58:0b:65:81:7a:81:ff:16:21:6f:
5f:95:eb:ab:55:e6:8f:aa:ad:21:70:5f:f2:a1:73:80:85:30:
fb:97:26:44:f5:74:c0:a5:03:b8:85:5f:98:73:0f:1a:21:91:
db:9d:bb:57:a2:02:f6:b2:fe:27:1b:cb:0d:97:27:30:ae:59:
15:7c:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:19:54 2026 by rpki-client