
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: DxpcK+AUiubKAdw3aqGKhBzVUn+Kx/JzGWydQi1gr6c=
Subject key identifier: 57:A1:55:79:55:4C:AF:3F:79:1D:B9:4A:44:42:01:9F:69:88:BA:0D
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019E1E6CAAB38C79E97AFDA4C9192411F5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:38 +0000
Manifest this update: Tue 12 May 2026 23:01:38 +0000
Manifest next update: Wed 13 May 2026 23:01:38 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: 7bPVpNgAAi2ZM8K35SyZej3LBa0PNexiixE6TqNDhTM=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:aa:b3:8c:79:e9:7a:fd:a4:c9:19:24:11:f5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: May 12 23:01:38 2026 GMT
Not After : May 13 23:01:38 2026 GMT
Subject: CN=57a15579554caf3f791db94a4442019f6988ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:9b:6d:ab:df:3e:a3:fe:7e:b7:3a:f6:bc:
d1:20:92:ac:4c:a3:0e:56:d4:72:47:46:8e:c8:7a:
f0:f0:7f:88:d4:b2:21:7a:cf:b0:b0:83:c4:ad:52:
af:0b:20:be:9c:64:9d:52:33:fc:c3:db:ca:b9:dd:
b7:b2:83:f4:71:9b:13:98:38:b2:57:65:84:7d:aa:
8c:b2:bb:39:ef:43:06:e5:cb:ae:e3:de:da:a2:c2:
1f:04:7d:66:69:2b:c9:47:1e:ae:40:76:29:b0:d9:
d2:94:02:d8:1d:6b:e2:4f:a4:10:7a:46:c3:27:9f:
38:27:04:e3:12:a3:10:c6:87:66:ea:7f:d4:87:b1:
b0:74:19:49:84:32:92:38:73:06:9c:97:ee:b7:91:
63:c2:7f:b6:54:12:6d:a3:8b:d8:e8:db:35:37:62:
15:5e:ca:2b:23:6f:62:e2:09:23:38:f5:05:1a:04:
7d:f0:cf:04:76:f7:5a:f3:66:49:71:92:69:49:78:
39:71:f2:90:69:b7:f0:70:8c:8c:98:01:57:92:f1:
d5:20:24:81:40:c7:07:47:07:6d:c2:3a:71:02:b9:
27:47:aa:11:a2:96:43:58:ff:60:c2:63:43:95:9f:
a5:8a:1a:64:ac:59:b5:c0:96:06:81:9b:94:cf:35:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:55:79:55:4C:AF:3F:79:1D:B9:4A:44:42:01:9F:69:88:BA:0D
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b1:0a:49:ab:2e:44:1f:be:87:b6:64:0c:2a:18:a2:73:06:
e9:fa:27:ef:4d:18:6c:84:c0:d9:2d:b3:e5:20:5e:78:cb:74:
46:52:6c:09:94:8b:bd:39:14:fd:e0:1c:34:bf:d1:b9:d7:96:
68:be:b9:73:ea:b1:7b:fe:92:5a:f1:5c:d6:bb:29:00:75:b9:
bc:7f:b2:d7:c2:84:bc:76:07:78:de:cb:ac:9a:0c:26:66:99:
ee:a2:76:cd:79:e6:98:16:70:97:f9:79:6a:e2:f8:97:c9:21:
06:a5:98:11:c7:73:1d:42:8d:97:48:40:7a:75:54:23:ed:df:
84:74:49:4c:17:30:89:20:8f:57:67:67:d0:bf:f1:e6:85:8b:
37:bd:8d:37:d7:da:aa:64:ee:fc:81:61:8e:8b:a0:ca:68:2e:
10:f6:72:bf:c4:3b:77:76:4a:57:56:b0:3e:17:4c:51:1f:e2:
48:c3:63:08:04:0a:59:a5:05:3a:86:91:e6:ce:04:cc:ac:c8:
61:ee:12:14:cf:8b:38:b2:aa:b4:76:b7:0f:75:d2:3c:09:f5:
77:a2:af:0b:04:a1:f9:90:d5:40:6b:59:81:ee:cd:9b:5a:5e:
18:46:ac:33:2c:62:ba:df:6b:74:fe:2e:8b:5b:27:38:46:60:
a2:5f:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:42 2026 by rpki-client