Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: D+btsBrKU0mHhRHY41/MY7gh8LoQY2m9DHlCv7QNyOk=
Subject key identifier: 8E:DD:4F:8B:90:0D:66:66:3A:B8:87:06:A3:9D:D0:1A:BA:25:8C:3E
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 019D26CD5BFAFC36904ACDC42D8C4BF0A6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0816
Signing time: Wed 25 Mar 2026 21:01:25 +0000
Manifest this update: Wed 25 Mar 2026 21:01:25 +0000
Manifest next update: Thu 26 Mar 2026 21:01:25 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: teyeLDHw35ryYTjbAl5Psszl6z5d+bA97fo5P+gLcA4=)
2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5b:fa:fc:36:90:4a:cd:c4:2d:8c:4b:f0:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Mar 25 21:01:25 2026 GMT
Not After : Mar 26 21:01:25 2026 GMT
Subject: CN=8edd4f8b900d66663ab88706a39dd01aba258c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:cb:ff:dc:9e:81:44:0c:db:e2:de:37:9a:
e3:26:b7:2d:a5:ad:cc:ae:87:cb:2f:1f:48:81:6c:
b0:f1:3c:49:e8:5a:10:60:07:be:00:42:3b:01:cb:
84:73:83:34:d1:28:c1:1a:35:8d:71:da:49:48:05:
9b:c5:66:23:b3:ee:d8:91:2c:4e:06:31:9d:9b:58:
b7:09:08:c2:b5:ba:7f:92:0c:62:97:c9:26:bb:8a:
1c:bb:ca:f3:57:cf:f5:42:5e:dd:a6:d6:bc:a4:96:
4f:35:78:89:d2:4b:57:ca:90:bb:91:40:ed:7c:ed:
1e:e0:15:31:0f:a2:17:7b:02:50:82:5c:05:0f:13:
dc:f6:98:43:09:03:4f:8d:9f:45:1c:b9:a6:0d:89:
58:50:88:1a:7f:67:7d:55:72:fa:f1:38:76:66:1c:
ba:23:11:e5:37:f4:4a:c4:f1:cd:17:b6:d0:de:bf:
8e:a8:e4:c2:67:52:fe:6f:2e:3d:bd:55:1c:05:f6:
27:f6:3e:c9:e8:04:cf:df:6c:fe:fa:e8:3e:4a:a5:
09:a5:c9:23:f1:30:91:52:b2:2b:da:49:95:88:a4:
63:bb:7c:13:4c:4d:88:d5:ef:9b:1d:e6:2d:29:87:
f8:42:51:3b:fd:45:c5:4b:df:14:46:53:51:51:1d:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:4F:8B:90:0D:66:66:3A:B8:87:06:A3:9D:D0:1A:BA:25:8C:3E
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:51:0b:4e:84:2d:22:c2:66:67:2c:08:9c:f3:ba:6c:99:15:
e2:97:c5:b1:64:a7:89:8d:e1:26:85:9f:1b:f7:57:53:3f:e2:
09:bf:6a:2d:ac:02:de:a5:af:69:b0:63:b9:83:1f:84:62:7a:
85:50:f1:3f:fa:f0:df:a3:c5:02:f3:51:97:92:c9:50:60:4b:
9c:c0:30:79:0e:7e:73:59:00:1e:3b:89:ca:72:30:d6:6d:d4:
f0:2f:c4:4d:81:08:62:b5:72:dd:b7:d8:58:56:90:6e:9a:7c:
f1:02:5a:60:fd:e2:71:a4:f2:fc:5f:39:bf:dc:bf:0d:9a:6a:
2c:d9:05:28:9a:65:61:e8:d9:ed:cf:96:40:5d:6d:99:13:33:
2a:7b:8a:f6:20:b5:b4:6d:32:d2:77:74:d9:3d:09:99:e2:ea:
d7:cd:7b:f8:2e:81:77:53:34:bb:9e:62:92:a0:16:06:d1:3d:
e8:b4:fe:98:43:fd:0d:87:08:16:3f:08:40:bc:79:e5:38:2f:
a0:c6:e3:4e:f3:2e:a0:54:6f:f7:3a:2e:2a:05:a1:44:af:e2:
13:bd:ab:b6:09:72:e1:12:b1:b5:ad:9e:34:f7:76:15:77:ee:
fb:f6:4e:aa:dc:49:3e:ab:08:ac:4b:15:b9:54:9e:b1:bc:2f:
c0:8a:ed:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVv6/DaQSs3ELYxL8KbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk
NWI0ZjYwHhcNMjYwMzI1MjEwMTI1WhcNMjYwMzI2MjEwMTI1WjAzMTEwLwYDVQQD
Eyg4ZWRkNGY4YjkwMGQ2NjY2M2FiODg3MDZhMzlkZDAxYWJhMjU4YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKvL/9yegUQM2+LeN5rjJrctpa3M
rofLLx9IgWyw8TxJ6FoQYAe+AEI7AcuEc4M00SjBGjWNcdpJSAWbxWYjs+7YkSxO
BjGdm1i3CQjCtbp/kgxil8kmu4ocu8rzV8/1Ql7dpta8pJZPNXiJ0ktXypC7kUDt
fO0e4BUxD6IXewJQglwFDxPc9phDCQNPjZ9FHLmmDYlYUIgaf2d9VXL68Th2Zhy6
IxHlN/RKxPHNF7bQ3r+OqOTCZ1L+by49vVUcBfYn9j7J6ATP32z++ug+SqUJpckj
8TCRUrIr2kmViKRju3wTTE2I1e+bHeYtKYf4QlE7/UXFS98URlNRUR11DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7dT4uQDWZmOriHBqOd0Bq6JYw+MB8GA1UdIwQY
MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt
YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx
LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVELToQt
IsJmZywInPO6bJkV4pfFsWSniY3hJoWfG/dXUz/iCb9qLawC3qWvabBjuYMfhGJ6
hVDxP/rw36PFAvNRl5LJUGBLnMAweQ5+c1kAHjuJynIw1m3U8C/ETYEIYrVy3bfY
WFaQbpp88QJaYP3icaTy/F85v9y/DZpqLNkFKJplYejZ7c+WQF1tmRMzKnuK9iC1
tG0y0nd02T0JmeLq1817+C6Bd1M0u55ikqAWBtE96LT+mEP9DYcIFj8IQLx55Tgv
oMbjTvMuoFRv9zouKgWhRK/iE72rtgly4RKxta2eNPd2FXfu+/ZOqtxJPqsIrEsV
uVSesbwvwIrtZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:53 2026 by rpki-client