Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: WCbGDg++SEvaaiZIvFBwa9ki3JrvigM8om1nVz/VisM=
Subject key identifier: F5:10:40:D0:C4:D4:CF:70:4B:A8:0B:10:C3:0B:47:5E:5A:BE:A2:61
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019D292961F8E73A62A320C074A4C4647D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: tdbkauPSawoMmXiZP2pQLVbIi3SCc1jV4nvG92KwNHE=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:61:f8:e7:3a:62:a3:20:c0:74:a4:c4:64:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=f51040d0c4d4cf704ba80b10c30b475e5abea261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:46:5a:5b:89:be:b9:8e:2a:9d:1f:4a:0a:
de:ce:00:0a:6d:fd:75:03:b4:fe:6c:de:c4:ff:cc:
d4:14:d7:9c:5c:45:0d:1d:e8:2d:65:7d:98:1b:b5:
80:1b:50:8f:d0:07:8b:d2:72:32:53:ba:de:e8:79:
0b:57:87:cd:ae:2a:a2:e1:9e:2f:ab:13:1a:b5:b7:
9a:3d:d9:86:76:6b:50:7a:e0:01:bb:f4:d7:3a:ac:
2b:7f:41:be:22:e4:f5:5e:2f:02:05:50:bd:0f:a4:
d7:d5:14:d5:18:33:af:3f:a9:8a:98:4c:b9:4f:68:
1b:9a:4d:d2:06:05:c4:f4:4b:6d:82:98:c7:67:42:
74:5d:92:84:ac:2f:36:26:70:b9:4d:0d:9c:11:e4:
fb:90:9b:c4:7b:ff:d6:b2:8c:0a:70:ea:71:61:3a:
b8:5a:c1:98:d6:31:86:fd:a6:8b:de:ae:ac:82:e7:
cd:57:cc:21:c5:41:34:11:aa:64:6b:b1:a2:29:5a:
34:67:a6:93:85:03:a6:bb:bb:95:b9:c7:57:4e:11:
2c:06:81:8a:9a:59:1e:bb:75:63:3c:e7:c9:e8:ae:
82:d4:5c:4d:ac:1c:cd:d3:e4:ee:c8:1d:79:8e:d0:
3d:ef:79:07:cf:14:14:b3:53:09:e4:3d:62:0c:2d:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:40:D0:C4:D4:CF:70:4B:A8:0B:10:C3:0B:47:5E:5A:BE:A2:61
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:93:b7:02:18:fa:8c:84:67:35:a7:ee:01:ca:c4:b4:59:
f1:39:40:d5:81:7a:42:0a:1c:c0:ef:3f:ab:a1:db:3e:b6:b2:
b2:fd:e3:28:b9:66:31:b6:0e:81:c0:90:4f:91:4b:d4:80:46:
54:6f:85:8a:56:8f:63:23:fd:ac:1e:48:58:a5:62:d2:d5:20:
f2:c7:a0:79:ec:fd:f9:29:0c:17:cd:79:1c:e8:c1:70:da:c8:
21:b0:4b:5e:73:3a:cd:65:6e:91:e8:51:c5:0f:6c:1c:d6:03:
46:96:b9:7f:1d:3c:95:df:e0:b7:4b:3b:7f:77:da:8d:9f:cf:
d5:51:9b:e4:8e:2c:11:7a:45:10:6a:74:88:95:d1:9b:0e:b8:
7b:fa:a9:18:95:0e:74:5a:3c:f4:84:29:02:ff:fb:97:5d:a7:
f1:40:a0:f8:f7:96:99:31:cf:93:2f:bc:3a:82:89:81:f9:c9:
4a:7d:40:9b:fd:dc:42:06:82:1f:a4:dc:eb:55:1c:c4:44:d1:
ad:3d:ec:60:5c:a1:5f:8e:0d:a4:1c:45:e8:2b:3f:09:62:2f:
b3:85:8c:91:56:27:67:d4:35:21:58:ef:c6:fb:2c:8a:d1:76:
da:86:90:dd:df:eb:00:96:3d:97:f1:ad:43:79:d6:2d:f8:0e:
8a:ad:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:10 2026 by rpki-client